Privacy Policy
The short version
- Your photos and videos never leave your device. CleanLeaf checks them on your phone or tablet. Nothing is uploaded, and nothing from them is used for ads. On Android the same is true for files and contacts.
- No account, no servers of our own. We do not ask for your name or email, and we cannot see how you use the app.
- Nothing is deleted until you confirm. On Android, items go to the trash first. On iPhone and iPad, they go to Recently Deleted in the Photos app. You can bring them back from there for 30 days.
- Ads are provided by Google AdMob on the free plan only, with the consent required in your region. With Premium the ad service never starts. On iPhone and iPad, CleanLeaf does not ask for permission to track you.
- Payments are handled by Google Play or the App Store. RevenueCat tells the app that you have Premium using a random ID. We never see your card details.
- We do not sell your personal data.
1Who we are
CleanLeaf is an app for Android, published on Google Play, and for iPhone and iPad, published on the App Store, by DuruSoft, based in Türkiye (“we”, “us”). For the limited personal data described here that we decide about, we are the data controller. Google acts as a separate controller or as our processor for the Google services below, and RevenueCat as our processor for purchases. Apple handles App Store payments as a separate controller under its own policy. You can reach us at duru.sofft@gmail.com.
The two versions do not offer exactly the same features, because Android and iOS allow apps to do different things. Where something applies to only one of them, this policy says so (“On Android”, “On iPhone and iPad”).
2Data at a glance
Every type of data the app touches, where it goes and why. It matches what we declare in the Google Play “Data safety” section and in the App Store “App Privacy” section.
| Data | Where it goes | Purpose |
|---|---|---|
| Your photos and videos, and what the scan finds in them (copies, similar and blurry shots, screenshots, bursts, Live Photos, large videos) | Your device only | Finding what you can clean; you decide what goes |
| On Android: files and folders (only if you allow file access) | Your device only | Storage browser, large and duplicate files, empty folders |
| On Android: contacts (only if you allow contacts access) | Your device only; changes you make sync to your contacts account by Android, as any contacts app would | Finding and merging duplicate contacts; backups before a merge or delete stay in the app’s private storage |
| On Android: app list, app sizes and when an app was last used (only if you allow usage access) | Your device only | Showing which apps take space and are unused, so you can uninstall them |
| On Android: private vault items, PIN and recovery code | Your device only, encrypted | Keeping the photos you move there private |
| Settings, selections, cleaning statistics, trash records; on iPhone and iPad also a small summary for the widgets (storage figures, the date of the last scan, your streak) | Your device only (some of it also in your device backup, see section 8) | Running the app and its widgets, and showing your own history |
| Advertising identifiers (on Android the advertising ID; on iPhone and iPad not the advertising identifier IDFA, see section 5), IP address and the approximate location it reveals, device and app information, ad interactions, diagnostic data of the ads software, consent choices (free plan only) | Google (AdMob, User Messaging Platform) | Showing and measuring ads, preventing fraud, asking for and storing your consent |
| Purchase information (product, purchase token or transaction, state), a random app user ID, device model, system and app version, store country, IP address | Google Play or the App Store, RevenueCat | Selling, checking and restoring Premium |
| IP address when the app checks for updates | GitHub (GitHub Pages hosts our version file) | Knowing whether a newer version exists |
| Crash reports | Google Play or Apple | Fixing problems, if you allow your device to share diagnostics with app developers |
| Your email and what you write to us | Our inbox | Answering you |
The app does not use any analytics or crash-reporting service of its own, does not request your location, and never reads the content of your messages.
Legal bases. Ads: your consent where the law requires it (EEA, UK, Switzerland), otherwise our legitimate interest in funding the free plan. Purchases: performing our contract with you. Update check and security: our legitimate interest in keeping the app working and safe. Messages you send us: answering your request. Under Türkiye’s Personal Data Protection Law (KVKK), the same uses rely on Article 5(2)(c) and (f), and on your explicit consent under Article 5(1) where it is needed.
3What stays on your device
CleanLeaf keeps the following in its private storage on your device. We cannot access it.
- Scan results: which photos and videos were checked, their size and date, and the groups the scan found. Images are looked at on the device to measure sharpness and similarity; no image or part of one is stored outside your photo library.
- Your choices: what you selected or kept, excluded folders (Android) or albums (iPhone and iPad), theme and other settings, notification choices.
- Trash records and statistics: what you cleaned and when, and how much space each cleanup moved to the trash or to Recently Deleted.
- Widget summary (iPhone and iPad): a few numbers for the Home Screen and Lock Screen widgets, shared only between the app and its own widgets on your device.
- Contact backups (Android): a copy of contacts made before a merge or delete, so you can undo it. Up to 10 automatic backups are kept.
- Private vault (Android): photos and videos you move there are encrypted with a key that stays on your device. Your PIN and recovery code are never sent anywhere.
- Premium status: your last known plan, so the app works offline.
Uninstalling removes this data. On Android this includes the private vault: export what you want to keep from the vault before you uninstall.
4Permissions and why
Every permission is asked for only when you open the feature that needs it, after a short explanation in the app. You can refuse or withdraw any of them in your device’s Settings; the rest of the app keeps working.
On Android
- Photos and videos: to scan your gallery and move what you choose to the trash.
- All files access (some versions only): to show your storage and find large, duplicate and leftover files.
- Delete without asking (media management, Android 12 and later, optional): so Android does not ask again for every cleanup you already confirmed in the app.
- Contacts: to find and merge duplicate contacts and delete the ones you choose.
- Usage access: to show app sizes and when each app was last used.
- Request to uninstall apps: Android asks you to confirm each app you choose to remove.
- Notifications (optional): a weekly summary, a reminder 2 days before a free trial ends (on by default; you can turn it off), other reminders you turn on, and progress while a long task runs.
- Fingerprint or face unlock (optional): to open the private vault. Android handles the check; the app only learns whether it succeeded.
- Internet: for ads, purchases and the update check.
On iPhone and iPad
- Photos (full access or only the photos you select): to scan your photo library and delete what you choose. If you give access to selected photos only, CleanLeaf scans just those. Every deletion is confirmed by iOS itself.
- Adding to Photos: to save a compressed video, the still version of a Live Photo, or a share image you choose to save.
- Notifications (optional, asked after your first cleanup or when you turn on a reminder): a weekly summary, reminders you turn on, and a reminder 2 days before a free trial ends. All notifications are created on your device; we do not send push notifications.
- Background refresh: iOS may let the app briefly update its counts (for example the number of screenshots) so reminders are correct. No photo leaves your device.
- Siri and Shortcuts: if you use them, Apple handles your voice request under its own privacy policy; CleanLeaf only receives the action, such as “start a scan”.
5Advertising and your consent
On the free plan, CleanLeaf shows ads from Google AdMob. Ads never use your photos, files or contacts. In the European Economic Area, the United Kingdom and Switzerland, Google’s consent form (User Messaging Platform) asks for your choice before any ad is requested; “Do not consent” is a valid answer and the app works the same. You can change your choice at any time in Me › Settings › Privacy & ads › Privacy options. Where required, US state privacy choices are offered the same way.
Google may collect the data listed in section 2 to show, measure and protect ads. See how Google uses data from apps that use its services. With Premium, the ad service is never started and receives nothing.
On Android, you can reset or delete your advertising ID in Android Settings › Privacy › Ads.
On iPhone and iPad, CleanLeaf does not ask for permission to track you (App Tracking Transparency), so the ads software cannot read your device’s advertising identifier (IDFA), and we do not link data from this app with data from other companies’ apps or websites for advertising. Google may still use an identifier that is limited to apps from the same developer, together with the data in section 2, to show non-tracking ads and measure them.
6Purchases (Premium)
Premium is sold through Google Play on Android and through the App Store on iPhone and iPad. Google or Apple handles payment and your payment details; we never see them. RevenueCat checks with the store whether you have Premium, using a random app user ID that is not linked to your name or email. It receives the purchase information listed in section 2. See RevenueCat’s privacy policy and, for App Store purchases, Apple’s privacy policy.
7Update check
When the app starts, it may read a small public file from our website (hosted by GitHub Pages) to learn the latest version and a few settings such as the daily free limit. GitHub sees your IP address, as with any web request. No data about you is sent with it.
8Device backup
On Android, if Android backup is on, only your CleanLeaf settings are included (for example theme and excluded folders). Scan results, statistics, trash records, contact backups and the private vault are never included.
On iPhone and iPad, your iCloud or computer backup may include your CleanLeaf settings, cleaning statistics and the widget summary, as for any app. Scan results are never included; the app rebuilds them on the device.
9Crash reports
We do not use a crash-reporting service. If you allow your device to share diagnostics with app developers, Google Play (on Android) or Apple (on iPhone and iPad) may send us anonymous crash reports.
10When you contact us
If you write to us (for example from Me › Settings › Support), we receive your email address and what you write. On Android, the app pre-fills the app and Android version, device model, language, your plan and whether photo access is allowed, to help us; you can remove them before sending. On iPhone and iPad, the app adds the device model, iOS and app version and language only if you choose to include them. We use this only to answer you and fix the issue you report, and delete it when no longer needed, at the latest two years after our last exchange.
11Sharing and selling
We do not sell or rent your personal data. Data reaches only the services named in this policy, for the purposes stated, and we work only with services that commit to protecting it at least as well as this policy and the store rules require. We may disclose information if the law requires it.
12Retention and deletion
Data on your device stays until you clear the app’s data or uninstall it. On Android, items you move to the trash are deleted for good by Android after 30 days, or earlier if you empty the trash. On iPhone and iPad, items you delete stay in Recently Deleted in the Photos app for 30 days, unless you empty it earlier; CleanLeaf cannot empty it for you. Google, Apple and RevenueCat keep data according to their own policies. How to delete everything: Delete your data.
13Your rights
Depending on where you live, you may have the right to access, correct, delete or restrict the use of your personal data, to receive it in a portable form, to object to its use, and to withdraw consent. If you are in Türkiye, you have the rights in KVKK Article 11. Because we hold almost nothing about you, most of these are done on your device: clear or uninstall the app, change ad choices in the app, or (on Android) reset your advertising ID. For data held by Google, Apple or RevenueCat, write to us and we will help. You can also complain to your data protection authority.
14Children
CleanLeaf is meant for adults and is not directed at children under 13 (or the minimum age in your country). We do not knowingly collect data from children.
15Security
Your media and contacts are processed on your device. On Android the private vault is encrypted on the device, and connections to Google, Apple and RevenueCat use encryption in transit. No method is perfect, but we keep what leaves your device to the minimum.
16International transfers
Google, Apple and RevenueCat may process data in other countries, including the United States, under safeguards such as standard contractual clauses.
17Changes to this policy
If this policy changes, we update the effective date above, and for important changes we tell you in the app.
18Contact
DuruSoft · duru.sofft@gmail.com