Privacy Policy

In short

Cleava cleans your iPhone on your iPhone. Your photos, videos, contacts and calendar are read and changed on the device and are never uploaded. There are no accounts.

The app does send some data: usage analytics, crash reports, bug reports and feature requests you choose to send, ads from Google AdMob in the free version, and purchase records through Adapty if you buy PRO. Each is explained below.

What stays on your iPhone

Photos and videos. Finding duplicates and similar photos, sorting by size and compressing videos all happen on the device. Anything you delete goes to the Recently Deleted album in the Photos app.

Contacts and calendar. Cleava reads, merges and deletes contacts, events and reminders on the device. A contacts backup file is only shared if you share it yourself.

Secret Space. Hidden photos, videos and contacts are stored only inside the app on this iPhone. Photos and contacts are encrypted, videos are protected by iOS file protection, and the Secret Space is not included in iCloud backups. Your PIN is kept in the iPhone's Keychain.

What leaves your iPhone

Usage analytics (Google Firebase Analytics). In the App Store version, Cleava records which screens and features are used, together with the device model, iOS version, app version, device memory, language and region. Events carry a random ID created by the app and kept in the Keychain, so a reinstall counts as the same install. This ID is not linked to your name or email.

Crash reports and diagnostics (Google Firebase Crashlytics and Performance Monitoring). If the app crashes, a crash report is sent. On the next launch the app also sends its diagnostic log for the session that crashed, with the device model, iOS version and app version. The log describes what the app was doing, such as "scan finished". It does not contain your photos, contact names or file names.

App settings (Google Firebase Remote Config). The app checks for settings such as the minimum supported version.

Bug reports, only when you send one. A report contains what you write, any screenshots you choose to attach, the app's diagnostic log, and your device model, iOS version, app version, region and language. Reports are stored under a random ID. Support may later ask your device for a fresh log; the app asks you first and sends nothing unless you agree.

Feature requests and votes, only when you send one. These are stored with the device model, iOS version, app version, region, language and an anonymous identifier for this app on this device, so each device votes once. The title and description of a feature request are visible to other Cleava users.

Speed test. The speed test downloads and uploads test data with Cloudflare's speed test service. Like any website, Cloudflare sees your IP address.

Ads (Google AdMob). The free version shows ads. To show them, Google may collect your IP address, device and app information, and how you interact with ads. Google uses your device's advertising identifier only if you allow tracking when iOS asks. In the EEA, the UK and Switzerland, Google asks for your consent before showing personalised ads, and you can change it later in Cleava under Settings → Ad Privacy Choices.

Subscriptions (Adapty). If you buy or restore PRO, Apple handles the payment. Adapty receives the purchase record and subscription status together with an anonymous ID, device information and your IP address, so the app knows whether PRO is active. Cleava never sees your payment details.

Service providers

These companies process data for Cleava under their own privacy policies:

• Google Firebase for analytics, crash reports, app settings, bug reports and feature requests
• Google AdMob for ads
• Adapty for subscriptions
• Cloudflare for the speed test

Cleava does not sell your personal data.

Your choices

• Turn off tracking for all apps in the Settings app → Privacy & Security → Tracking.
• Change ad consent in Cleava → Settings → Ad Privacy Choices, where it applies.
• Change access to Photos, Contacts and Calendars in the Settings app → Cleava.
• Bug reports, feature requests and log requests are only sent if you choose to.

Keeping and deleting data

Bug reports, feature requests and diagnostic logs are kept until they are no longer needed to fix problems or plan the app, or until you ask for them to be deleted. Analytics and crash data are kept according to Google Firebase's retention settings.

Because Cleava has no accounts, we can't look you up by name. To have something deleted, email us and describe it, for example when you sent a bug report and what it said.

Children

Cleava is not directed at children under 13, and we do not knowingly collect personal information from them.

Changes and contact

If this policy changes, the new version will be posted on this page with a new effective date.

Questions or requests: mactyagi@icloud.com.