Privacy Policy

Last Updated: August 12, 2026

1. Information We Collect

1.1 Information Accessed Locally

Cleapuzz processes the following information entirely on your device:

• Photo and Video Data: The app accesses and analyzes your photos and videos to identify similar, blurred, large, or old media files. All analysis happens locally on your device using AI and computer vision technology.
• Photo Metadata: File size, creation date, location data (if embedded in photos), and technical properties are analyzed locally to categorize and organize your media.
• Contact Information: When using the Contact Cleanup feature, the app accesses contact information stored on your device to identify and suggest merging duplicate contacts.
• Calendar Data: When using Calendar Cleanup features, the app accesses calendar event information to identify and suggest removal of old, spam, or duplicate events.
• Secret Vault PIN: If you use the Secret Vault feature, your 6-digit PIN is securely hashed and stored only on your device.

1.2 Information Automatically Collected

• Device Information: Basic device information such as device model and operating system version for app compatibility purposes.
• Device Identifier (Subscription): We generate and store a persistent device identifier (a randomly generated UUID kept in the device Keychain) that is used as your anonymous subscriber ID for subscription management. It can persist after reinstalling the app on the same device. It is not used to track you across other companies' apps or websites, and we do not use the Advertising Identifier (IDFA).
• Purchase Data: When you purchase or restore a subscription, transaction and subscription-status information (such as the product purchased, purchase and renewal/expiration dates, and whether a subscription is active) is processed to unlock premium features and verify your entitlement. See Section 1.3 and Section 4.1.
• App Configuration: We retrieve app configuration settings (such as daily usage limits and feature thresholds) from our server to ensure the app functions properly.
• Storage Analysis Data: Information about your device's storage capacity and available space is calculated locally to provide storage optimization recommendations.

1.3 Subscription and Purchase Information

Premium subscriptions are sold through the Apple App Store and managed on our behalf by RevenueCat, Inc., a third-party subscription-management provider. When you purchase, restore, or use a subscription:

• Apple processes your payment. We never receive or store your full payment-card details.
• RevenueCat receives your purchase and subscription-status data together with your app user identifier (the persistent device UUID described in Section 1.2) so that your entitlement can be validated. Eligible purchases can be restored through Apple's purchase-restoration process, including on another device signed in to the same Apple ID.
• We use this information solely to unlock premium features, verify and restore purchases, and measure subscription performance.

RevenueCat acts as a data processor for subscription data. Its handling of this data is governed by its own privacy policy, available at https://www.revenuecat.com/privacy.

1.4 Advertising and Consent Information

Free users may see advertisements supplied by Google AdMob. Premium users are not shown ads. Google Mobile Ads and Google's User Messaging Platform (UMP) may process limited information needed to request, deliver, measure, prevent fraud in, and diagnose ads, including:

• IP address, which may be used to estimate a general location;
• Device and app information, such as device model, operating-system version, app version, language, and device identifiers made available without App Tracking Transparency permission;
• Advertising interactions, such as ad impressions, clicks, and the time an ad was shown; and
• Diagnostics and performance information related to ad delivery.

Cleapuzz does not request Apple's App Tracking Transparency permission in this version and does not access the IDFA. Ad requests are configured for non-personalized treatment, and Google's publisher first-party ID is disabled. We do not use advertising data to track you across apps or websites owned by other companies. Where required by applicable law, UMP determines whether a consent message is required based on Google's geographic determination and the messages configured in AdMob. You can revisit your choices through Settings > Privacy Choices whenever Google requires that option to be available.

Google processes advertising and consent information under its own terms and privacy policy. See Google's Privacy Policy and How Google uses information from sites or apps that use its services.

1.5 Location Information

If you grant permission, the app may access your device's location information exclusively to add GPS coordinates and address information as watermarks on photos and videos when using the Watermark Camera feature. Location data is only used in real-time and is never stored or transmitted.

2. How We Use Your Information

We use the accessed information for the following purposes:

• Provide Core Features: To analyze and identify duplicate contacts, similar photos, blurred photos, large videos, screenshots, old photos, and other cleanable content locally on your device.
• Storage Optimization: To calculate storage usage and provide recommendations for freeing up space on your device.
• AI-Powered Organization: To automatically categorize photos into smart albums using on-device AI and computer vision (Apple Vision framework).
• Photo and Video Processing: To perform similarity detection, blur detection, scene classification, and quality analysis entirely on your device.
• Photo Editing: To provide photo editing features including subject cutout, filters, adjustments, mosaic, doodle, and text overlay.
• Security: To protect your Secret Vault with PIN and biometric authentication.
• App Configuration: To retrieve feature settings and usage limits from our server to ensure proper app functionality.
• Subscriptions: To process, validate, and restore premium subscriptions and unlock paid features.
• Advertising: To fund the free version by displaying, measuring, securing, and diagnosing ads, subject to applicable consent choices.

3. Data Processing and Storage

3.1 Local Processing

The following operations are performed entirely on your device using Apple's frameworks (Vision, CoreImage, Photos, Contacts, EventKit):

• Photo and video similarity detection using perceptual hash algorithms
• Blur detection and quality analysis using CoreImage
• AI-powered photo classification and scene recognition using Apple Vision framework
• Subject cutout and segmentation using Vision framework
• Contact deduplication analysis
• Calendar event spam and duplicate detection
• Storage usage calculation
• Media file compression
• Photo editing (filters, adjustments, watermarks, mosaic, text overlay)
• Secret Vault encryption using AES-256-GCM

3.2 Network Services

The app makes network requests only for the following purposes:

• App Configuration: The app retrieves configuration settings (such as daily usage limits, feature thresholds) from our server to ensure proper functionality.
• Subscription Management: Subscription purchases, validation, and restoration are processed through Apple's App Store and through our subscription provider, RevenueCat (see Section 4.1). RevenueCat receives transaction and entitlement data along with a device identifier used as your subscriber ID.
• Advertising and Consent: For free users, Google AdMob requests and displays ads, and Google UMP determines whether a regional consent message is required and stores the resulting consent state.

We do NOT:

• ❌ Upload your photos, videos, or any media content
• ❌ Upload your contacts or calendar data
• ❌ Upload the contents of your Secret Vault
• ❌ Sell your personal information
• ❌ Send your photos, videos, contacts, calendar entries, or Secret Vault contents to advertising providers
• ❌ Access the IDFA or track you across other companies' apps or websites in this version

4. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share information only in the following circumstances:

4.1 Service Providers

We work with the following third parties:

• Apple App Store: All subscription payments are processed by Apple. Your payment information is subject to Apple's privacy policy.
• RevenueCat: We use RevenueCat to manage and validate in-app subscriptions and to restore purchases across your devices. RevenueCat processes your subscription/transaction data and a device-based identifier (used as your anonymous subscriber ID). RevenueCat acts as our data processor for subscription management. See RevenueCat's privacy policy at https://www.revenuecat.com/privacy/.
• Google AdMob and User Messaging Platform: Google supplies ads to free users, measures ad delivery, prevents fraud, and manages consent messages where required. Google may process the limited advertising information described in Section 1.4. See Google's Privacy Policy.
• Open Source Libraries: The app uses the following open-source libraries for UI and functionality:
  • Lottie (by Airbnb) - for animations
  • Lucide Icons - for UI icons
  • Nuke - for efficient image loading and caching
  • Pow - for UI animations and transitions
  These libraries do not collect or transmit your data.

We do NOT use:

• ❌ Marketing attribution / ad-tracking services (e.g., Adjust, AppsFlyer)
• ❌ IDFA-based or other cross-app/cross-website tracking in this version

4.2 Legal Requirements

We may disclose information if required by law or in response to valid requests by public authorities, including to meet national security or law enforcement requirements.

4.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Your Privacy Rights and Choices

5.1 Access and Control

You have the following rights regarding your information:

• Access: You can access your account information and settings within the app.
• Correction: You can update or correct your account information at any time.
• Deletion: You can delete your account and associated data by contacting us or using the in-app deletion feature.
• Data Portability: You can request a copy of your data in a structured, machine-readable format.

5.2 Permissions

You can control app permissions through your device settings. Cleapuzz requests the following permissions:

• Photo Library (Required): Essential for analyzing, organizing, and cleaning your photos and videos.
• Contacts (Optional): Only required if you use the Contact Cleanup feature.
• Calendar (Optional): Only required if you use the Calendar Cleanup feature.
• Camera (Optional): Required for camera features including Watermark Camera, Dual Camera, and Secret Vault photo capture.
• Microphone (Optional): Required for recording videos with audio in camera features.
• Location (Optional): Only used for adding GPS coordinates and address watermarks in the Watermark Camera feature. Location is never stored or transmitted.
• Face ID / Touch ID (Optional): Used only for unlocking the Secret Vault feature for enhanced security.

5.3 Advertising Privacy Choices

Free users may receive ads from Google AdMob. Cleapuzz does not request ATT permission or access the IDFA in this version and does not use advertising data to track you across other companies' apps or websites. In regions where Google UMP reports that consent or privacy options are required, Google presents the applicable message and Cleapuzz provides a Privacy Choices entry in Settings so you can revisit your selection. Withdrawing consent does not affect the lawfulness of processing performed before withdrawal.

6. Data Security

We implement strong security measures to protect your information:

• Encryption: Subscription validation and configuration requests to our and our providers' servers use HTTPS (SSL/TLS) encryption.
• Local Storage: All your photos, videos, contacts, and calendar data remain on your device and are protected by iOS's built-in security.
• Secret Vault Security: Files stored in the Secret Vault are protected with:
  • AES-256-GCM military-grade encryption
  • 6-digit PIN or Face ID / Touch ID authentication
  • Auto-lock after 30 seconds in background
  • 60-second lockout after 5 failed PIN attempts
  • Encrypted thumbnail generation
• No Cloud Backup: Your sensitive data is not backed up to iCloud or any cloud service.

7. Data Retention

We retain information only as long as necessary:

• Local Data: All photos, videos, contacts, and calendar data accessed by the app remain on your device and are controlled by you. We do not store or retain this data.
• Secret Vault Data: Encrypted files in Secret Vault remain on your device until you delete them or uninstall the app.
• App Settings: Your preferences and settings are stored locally in your device until you uninstall the app.
• Deleted Data: When you delete data through the app, it is permanently removed from your device and cannot be recovered by us or anyone else.

8. Children's Privacy

Cleapuzz is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will delete that information immediately.

9. International Data Transfers

Your photos, videos, contacts, and calendar data are processed entirely on your device and are never transferred internationally or otherwise. Subscription data may be processed by RevenueCat, and limited advertising and consent information may be processed by Google, on servers located in countries other than your own. Where required by law, such transfers are carried out using appropriate safeguards (such as the European Commission's Standard Contractual Clauses).

10. Third-Party Services

Cleapuzz may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through the app.

10.1 Apple Technologies

The app uses the following Apple frameworks that operate entirely on your device:

• Photos Framework: For accessing and managing your photo library
• Vision Framework: For AI-powered image classification, scene recognition, and subject segmentation
• CoreImage: For image processing, filters, and quality analysis
• Contacts Framework: For contact deduplication
• EventKit: For calendar cleanup
• AVFoundation: For camera features and video processing
• CoreLocation: For GPS watermarking (location never leaves your device)

10.2 Third-Party SDKs and Libraries

The app uses the following third-party software:

• RevenueCat (by RevenueCat, Inc.): Manages subscription purchases and entitlements. Receives a device-based app user identifier and purchase/transaction data. See RevenueCat's Privacy Policy.
• Google Mobile Ads and User Messaging Platform: Delivers ads to free users and manages legally required consent and privacy-choice messages. See Google's Privacy Policy.
• Lottie (by Airbnb): For animations (no data collection)
• Lucide Icons: For UI icons (no data collection)
• Nuke: For efficient image caching (operates locally only)

11. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt-out of the sale of personal information (Note: We do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

12. European Privacy Rights

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right of access, correction, and deletion of your personal data
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent at any time
• Right to revisit applicable advertising consent through Settings > Privacy Choices
• Right to lodge a complaint with a supervisory authority

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by:

• Posting the updated Privacy Policy in the app
• Updating the "Last Updated" date at the top of this policy
• Sending you a notification through the app or via email

Your continued use of the app after changes are posted constitutes your acceptance of the updated Privacy Policy.

14. Contact Us