Privacy Policy

Effective October 25, 2026

Summary: Core device cleaning and health features are designed to process files locally. Cloud features collect only the account, Premium, monitoring/removal, notification and support information needed to provide those services. Free users may receive AdMob ads.

Local device maintenance

The App may inspect file/media metadata, sizes, user-selected locations, exact-duplicate hashes, app-owned cache size, storage/free-space readings, available memory, battery state, Android/device information and supported Settings destinations. Private file contents are not uploaded merely to provide local cleaning, duplicate detection or device-health recommendations.

Other-app cache review: The Apps screen lists launchable apps visible under Android's limited package visibility rules. If you explicitly grant Usage Access in Android Settings, the App can read other apps' cache-size and total app-storage estimates locally for sorting and display. This permission is optional. Installed-app names and cache statistics are not uploaded, sold, or used for ad targeting. Quantum Shield Cleaner cannot silently clear other apps' caches or force-stop their processes; it opens Android's system settings for user-controlled actions.

Quick Clean file selection: The user can open Android's system file picker to select individual documents for optional removal. Quantum Shield reads names, size metadata and provider deletion capability locally. Deletion is attempted only after an explicit warning and the user's confirmation. Only those selected files for which the provider permits deletion are processed; selected cloud files may be deleted from their cloud provider and removal may not be reversible. Files, contents, selected file lists and cleanup details are not uploaded for local cleaning, and a displayed free-space change is an observation rather than a promise of reclaimed bytes. No unrestricted storage permission is requested for this feature.

Account information

If you create an account, the service processes email address, verification state, password hash/verifier, sessions, consent and privacy/notification settings, optional profile details, verified monitored identifiers, subscription entitlement information, exposure/removal history and generic notification history.

Identity monitoring

Premium monitoring requires explicit consent and verified identifiers. When configured, verified-email exposure checks may use Have I Been Pwned. Quantum Shield stores sanitized breach/source metadata and does not display raw stolen passwords or crawl criminal/private breach sources. A zero-result search is not proof that an identity has never been exposed.

Removal assistance

Quantum Shield can help with legitimate removal/opt-out processes for the user’s own verified information. A submitted request is not proof of removal and the service cannot guarantee deletion from systems outside the provider’s control.

Advertising

Free users may receive Google AdMob ads. Google Mobile Ads SDK may process IP address, app/ad interactions, diagnostic information and device/account identifiers for advertising, analytics and fraud prevention. UMP provides regional consent/privacy choices where required. Premium users with a valid entitlement are intended to receive no ads.

Notifications

Firebase Cloud Messaging is used for optional generic notifications. Sensitive exposure details are kept out of push payloads and lock-screen copy; open the authenticated App for details.

Service providers

Google Play / Google Play Developer API — subscription management
Google AdMob and UMP — advertising and consent
Firebase Cloud Messaging / Installations — notifications
Have I Been Pwned — verified-email exposure checks when enabled
Resend — implemented email delivery integration when configured
Cloudflare Pages — public policy/support/deletion website hosting
PostgreSQL hosting provider — account data storage; the final production host must be reflected before Play submission

Retention

Current backend defaults include 365 days for audit/security and notification events, 30 days for diagnostics, 730 days for resolved exposure findings/completed removal requests, and 90 days for deletion receipts. See the Data Retention and Deletion Policy for details.

Deletion

Users can initiate deletion in the App and through the Account Deletion page. Account deletion does not cancel a Google Play subscription.

Security

The production design requires HTTPS, server-side authorization, hashed sessions/passwords, encryption for selected sensitive identifiers/tokens, validation and rate limiting. Service-account/database/provider credentials are not stored in the Android app.

Contact

Use the Support page or Settings > Support & Feedback in the App. Do not send passwords, raw leaked credentials or unnecessary sensitive information.

Before Google Play production submission, add the final Play Console developer/business name here if it differs from the app name and confirm all named production processors.