Effective date: 2026-08-17
Breachly respects your privacy. This Privacy Policy explains what information may be collected when you use Breachly, how that information may be used, and what choices you have.
We may collect limited information required to operate, maintain, and improve Breachly. This can include technical diagnostics, app usage information, device information, and information you voluntarily send to us for support.
The password you check is never sent anywhere. Breachly computes the SHA-1 hash of the password on your device and sends only the first five characters of that hash to the Have I Been Pwned range service. The service replies with every leaked hash beginning with those five characters, and the comparison against your password happens entirely on the device. Five characters of a hash match hundreds of thousands of different passwords, so the request does not identify which password you checked. The strength analysis and the password generator make no network requests at all.
We may use collected information to:
The app keeps a short history of your checks on the device only. Each entry holds the five hash characters that were sent, the date, how many times the password appeared in breaches, and the strength score. It never holds the password or its full hash. You can delete a single entry or clear the whole history from the app at any time, and deleting the app removes all of it.
We do not sell your personal information. We may share information with service providers that help us operate the app, or when required by law.
We retain information only for as long as needed to provide the app, resolve disputes, enforce agreements, and meet legal requirements.
Breachly is not directed to children under 13, and we do not knowingly collect personal information from children under 13.