Storage Cleaner

Privacy Policy

App name: Storage Cleaner  ·  Contact: cleanmanagerai@gmail.com  ·  Effective date: 18 September 2026

Storage Cleaner (“the App”, “we”, “us”) helps you free up space on your iPhone by finding duplicate photos, similar images, screenshots, selfies, screen recordings, large videos, duplicate or incomplete contacts, and old or duplicate calendar events. Your privacy is central to how the App works. This policy explains exactly what the App accesses, how it is processed, and the limited data shared with one third-party service.

1. What the App accesses

Photo Library — With your permission, the App reads your photos and videos to detect duplicates, similar images, screenshots, selfies, screen recordings, Live Photos, and large videos, and (optionally) to compress videos you select.

Contacts — With your permission, the App reads your contacts to find duplicates and incomplete entries, to let you hide selected contacts behind Face ID within the App, and to let you export a backup as a vCard (.vcf) file.

Calendar — With your permission, the App reads your calendar events (title, date, and which calendar each belongs to) to help you find events that have already passed or that appear to be duplicates, and to delete the ones you select. The App does not read event notes, attendees, locations, or attachments, and does not create or edit events — only lets you review and delete existing ones you choose.

Face ID / Touch ID — Used only locally, by the operating system, to unlock the App’s “Secret Contacts” area. The App never receives your biometric data.

Gmail (optional — only if you use Email Cleaner and choose to sign in) — With your explicit sign-in and consent via Google, the App reads your Gmail messages (sender, subject, date, and a short preview snippet) so you can review and, if you choose, move selected emails to Trash in Gmail. See Section 2 below for full detail.

2. Gmail / Email Cleaner access

Email Cleaner is an entirely optional feature. Nothing described here happens unless you open Email Cleaner and actively choose to sign in with Google.

What we ask for:

• Your name, profile picture, and email address (basic Google sign-in info), so the App can show which account you’re connected as.
• Gmail access (Google’s gmail.modify scope) — used only to: (a) list your messages by category (Inbox, Promotions, Social, Updates, Chats, Large Attachments, Spam) so you can review them in the App, and (b) move messages you explicitly select to Gmail’s Trash. The App never reads full message bodies, never sends email on your behalf, and never permanently deletes anything — “deleting” in the App moves a message to Gmail Trash, exactly like doing so in the Gmail app, and it can be recovered from there within Gmail’s own retention window.

How this data is handled:

• Sign-in uses Google’s own OAuth sign-in flow (industry-standard, via Apple’s ASWebAuthenticationSession) — the App never sees or stores your Google password.
• The authentication tokens Google issues after you sign in are stored only in your device’s encrypted iOS Keychain. They are never sent to us or to any server we operate — the App talks directly to Google’s own Gmail API over an encrypted connection.
• Email subject lines, senders, dates, and preview snippets are fetched only to display the list on screen and are held in memory for that screen only — never written to disk outside the OS’s normal app-memory handling, and never transmitted to us.
• You can disconnect this access at any time — either by tapping “Sign Out” inside Email Cleaner, or by visiting your Google Account’s connected-apps settings and removing Storage Cleaner’s access there.

2.1 How we protect Google user data

The only Google user data the App handles is what Email Cleaner needs to work (your Google sign-in email address and, while you use the feature, the sender, subject, date and unsubscribe-header details of your Gmail messages). We protect it as follows:

• Direct and encrypted. The App talks directly to Google's servers over HTTPS/TLS. This data is never routed through, copied to or stored on any server we operate, so we (and anyone working on the App) have no access to it.
• Secure sign-in. You sign in through Google's own OAuth flow (with PKCE) in a system-managed web session. The App never sees or stores your Google password.
• Protected credentials. Sign-in tokens are kept only in your device's iOS Keychain (encrypted by iOS and protected by your device passcode / Face ID / Touch ID), inside the App's sandbox, and are never sent anywhere except back to Google when making requests.
• Least privilege. The App requests a single Gmail permission (gmail.modify), the narrowest Google offers that allows moving messages to Trash, and uses it only to list messages and move the ones you select to Trash. It never reads message bodies and never sends email.
• No other use. Google user data is not sold, not shared with third parties, not used for advertising or profiling, and not used to train AI or machine-learning models.

2.2 Retention and deletion of Google user data

• What we retain: nothing on our side. We do not collect or store Google user data on any server, so there is nothing for us to retain or delete.
• On your device. Message details shown in Email Cleaner are held in memory only while that screen is in use and are discarded when you leave it or close the App. They are never written to disk. Your sign-in tokens are kept in the iOS Keychain until you sign out or revoke access.
• Deleting it yourself. Tap Sign Out inside Email Cleaner to delete the stored tokens immediately. You can also revoke the App's access at any time at myaccount.google.com/permissions, which makes the tokens unusable at once.
• Emails you move to Trash. These stay in your Gmail Trash, where you can restore them, and Gmail deletes them automatically on its own schedule (about 30 days). They are never permanently deleted by the App.
• Questions or deletion requests: cleanmanagerai@gmail.com.

3. How your data is processed

• Duplicate and similar-photo detection uses on-device perceptual-hashing algorithms (computed locally with Apple’s Accelerate framework).
• Photo quality analysis (blur / closed-eyes / best-photo selection) uses Apple’s on-device Vision framework.
• Contact duplicate detection uses local name and phone-number matching.
• Old-event and duplicate-event detection compares event titles and dates locally, using Apple’s EventKit framework — the same framework the built-in Calendar app uses.
• Scan results — file sizes, creation dates, similarity scores — are held in memory only for the duration of a scan and are never written to disk or transmitted.
• The list of contacts you choose to mark as “Secret” is stored only in your device’s local app storage (as identifiers), never transmitted.

Email Cleaner works differently, since reading Gmail inherently requires talking to Google’s own servers over your sign-in — see Section 2 above for exactly what that involves. It is the one feature in the App that is not purely on-device, and it only runs if you choose to use it.

4. Third-party services

The App uses two third-party services: Google Firebase Remote Config and, only if you use Email Cleaner, the Gmail API (see Section 2). Firebase Remote Config is used solely to retrieve non-personal app configuration values (for example, which paywall layout to display) and does not access your photos, videos, contacts, calendar, Gmail, or any other personal content.

Google’s handling of any technical data required to deliver this configuration is governed by Google’s Privacy Policy.

Apart from Firebase Remote Config and the optional Gmail API connection, the App uses only Apple’s own system frameworks (PhotoKit, Contacts, EventKit, StoreKit, Vision, LocalAuthentication). The App does not integrate any advertising SDKs, third-party analytics, crash-reporting SDKs, or data brokers.

5. Subscriptions and purchases

Storage Cleaner offers auto-renewable subscriptions (Weekly and Yearly) and a one-time Lifetime purchase. All payments, receipts, renewals, and refunds are handled entirely by Apple through StoreKit. We never receive or store your payment details. Subscriptions renew automatically unless cancelled at least 24 hours before the end of the current billing period; you can manage or cancel any time in your Apple Account settings.

6. Data retention and deletion

The App stores no personal data on any server, so there is nothing for us to retain or delete on our side. Local app data (such as your “Secret Contacts” list and daily-usage counters) is removed when you delete the App from your device. If you used Email Cleaner, your Google sign-in tokens are removed from the device’s Keychain the moment you tap “Sign Out” (iOS can keep Keychain items after an app is deleted, so please sign out before deleting the App), and you can independently revoke the App’s Gmail access at any time from your Google Account settings (see Section 2).

7. Children

The App is not directed at children under 13 and does not knowingly collect any information from children.

8. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the effective date above.

9. Contact

Questions about this policy: cleanmanagerai@gmail.com