Privacy Policy
Effective 12th September 2026 · REZ for Android
The short version
REZ holds your handle, your picture, the photographs you post, and who you follow. Signing in with Google adds the email address that account signs in with, which is the only thing that can find your account again from another phone.
Photographs you take and do not post never leave your phone. Nothing is sold. Nothing you do is measured to decide what you are shown, because there is no ranking to feed. You can delete the whole account from inside the app at any time.
The rest of this page is the same thing said carefully.
01 Who is responsible
REZ is made and run by SEAN BURRAGE, trading as brokoz. In data protection terms that is the controller for the information described here.
Questions, requests and complaints all go to hello@brokoz.com.
02 What REZ holds
| What | Why |
|---|---|
| Your Google email address and account identifier | It is how you sign in, and the only way your account can be found again from a different phone. REZ never sees your Google password. |
| Your handle | It is your name here, and it is how other people find and mention you. It is permanent for as long as the account exists. |
| Your picture and your bio | Shown on your profile and beside everything you post. The picture is either a small pattern generated from a number, or a photograph you chose, stored at 32 pixels square. |
| Photographs you post, and their captions | They are the app. Each one is stored with how it was made - its size in pixels, its palette, its number of colours, its dither - and when. |
| Keeps, notes, and who you follow | So the app can show you the accounts you chose, and show photographers that somebody kept their work. |
| Accounts you have blocked | So they stay hidden. Your block list is private and is never shown to the account you blocked. |
| Reports you send | So they can be acted on. A report records what you reported, why, and that it came from you. |
| Crash reports | When the app breaks it sends what it was doing, the model of phone and the version of Android, through Google Crashlytics. It is not tied to your account and it is used for nothing but fixing the crash. It is the only thing here you did not ask REZ to do. |
Kept on your phone and nowhere else
Your appearance and capture settings, any palettes you have saved, and every photograph you took but did not post. None of that is uploaded, and clearing the app's data removes it.
03 What REZ does not hold
- No password. Signing in goes through Google, and REZ only ever receives a token saying that it worked.
- No phone number, no contacts, no location, and no advertising identifier.
- No analytics and no behavioural tracking. REZ does not record which photographs you look at or how long you look at them.
- No advertising. REZ does not currently show any. If that ever changes, this page will say so before it does, and it will not be paid for with anything described on this page.
04 Why REZ is allowed to hold it
Under UK and EU data protection law, the lawful bases are:
- Performing our agreement with you. An account, a handle, your photographs and your follows exist because you asked for an app that does this. Without them there is no service to provide.
- Legitimate interests. Keeping REZ usable and safe: acting on reports, enforcing the rules, preventing abuse, and keeping the thing running. These interests are balanced against your rights, and none of this involves profiling you.
- Legal obligation. Where a law requires something to be kept or handed over.
05 Who can see it
Other people using REZ
Your handle, your picture, your bio, the photographs you post, your captions, your notes, and who you follow and who follows you are public to anybody signed into REZ. Treat everything you post as public.
Your email address, your block list and your reports are not shown to anybody else.
REZ runs on Google Firebase, which handles sign-in, stores the data above, and receives a report when the app crashes. Google acts as a processor: it holds the information in order to run the service and not for its own purposes. Signing in also means Google knows you use REZ.
Nobody else
Your information is not sold, rented, or shared with advertisers or data brokers. It may be disclosed if the law requires it, or where it is necessary to investigate abuse or protect somebody's safety.
06 Where it is kept
On Google Cloud infrastructure in Europe. Where that is outside the UK or the EEA, Google's transfer safeguards apply, described in Firebase's own privacy documentation.
07 How long it is kept
- Until you delete it. A photograph stays until you remove it or delete your account.
- Deleting your account removes it straight away - the photographs, the profile, the notes and keeps you left elsewhere, the palettes, and the follows. There is no waiting period and no way to undo it.
- Your handle is held for 60 days after the account goes, and is then available to somebody else. It is held so that nobody can take the name immediately and be mistaken for you.
- Reports are kept after the account that sent them is deleted, because a report is a record about somebody else's conduct.
- Backups. Deleted information may persist in Google's routine backups for a short period before they roll over.
One technical honesty: deleting a photograph leaves behind the rows that recorded who kept it and who wrote on it. They are unreachable in the app and hold nothing but internal identifiers, and they are removed when the account is deleted.
08 Your rights
You can ask to:
- see what is held about you;
- correct anything wrong - your bio and picture you can change yourself, in Settings;
- delete it - you can do this yourself, in Settings, and it is immediate. See Deleting your account;
- get a copy in a portable form;
- restrict or object to what is done with it.
Ask at hello@brokoz.com. There is no charge and the answer comes within one month.
If you are not satisfied, you can complain to the UK Information Commissioner's Office at ico.org.uk, or to the supervisory authority where you live.
09 Age
REZ is for people aged 13 or over, and older where the country you live in sets a higher age for consenting to online services. If an account is found to belong to somebody younger it is removed. If you believe a child has an account, write to hello@brokoz.com.
10 Changes
This page will change as REZ does. The date at the top says when it last did. Anything that materially changes what is collected or who sees it will be announced in the app before it takes effect, not after.