Privacy policy

Effective May 16, 2026. Plain-English version below; this is the policy.

1. The short version

CleanSpacePhone does not collect, transmit, or share any personal data. There is no account, no login, no analytics SDK, no advertising SDK, and no third-party tracker in the app. Every scan and every operation runs locally on your iPhone or iPad.

2. What we don't do

• We don't have a server that receives your photos, videos, contacts, files, or any other content.
• We don't include Firebase, Sentry, Amplitude, Segment, AppsFlyer, Adjust, Branch, Crashlytics, Mixpanel, or any other analytics or attribution SDK.
• We don't show ads.
• We don't sell, rent, or share data with any third party. There is no data to sell.
• We don't profile users.
• We don't ask for an email address.

3. What stays on your device

The following data is read and processed entirely on your device by Apple's frameworks:

• Photos & videos via PHPhotoLibrary — to detect duplicates, similar shots, screenshots, and large videos. Thumbnails are computed locally and discarded after scoring.
• Contacts via CNContactStore — to find likely duplicates.
• Calendar events via EventKit — to find duplicate events.
• Files via UIDocumentPicker with security-scoped bookmarks — only inside folders you explicitly pick.
• Vault items — encrypted with AES-256 GCM (CryptoKit); the symmetric key is stored in the iOS Keychain with kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly.

4. Permissions and why we ask

Each permission is requested only when you use the feature that needs it, and only for the minimum needed. You can revoke any permission in iOS Settings at any time without losing access to the rest of the app.

• Photos — required for the photo cleaner. Limited Photos is supported.
• Contacts — required for the contacts duplicate finder.
• Calendar — required for the calendar duplicate finder.
• Notifications — only used for the optional "storage habit" local reminder. We never push remote notifications.
• Face ID / Touch ID — gates the Secure Vault.

5. Deletion semantics

CleanSpacePhone never silently removes data:

• Photo and video deletions go through PHPhotoLibrary, which means items land in Photos › Recently Deleted, recoverable for 30 days.
• File deletions only occur inside folders you picked, after explicit confirmation.
• Contact deletions are committed via CNContactStore after you review each duplicate group.

6. Children

CleanSpacePhone is not directed at children under 13. Because we do not collect any data, no special children's data policy is required.

7. Changes

If we ever change this policy, the change will be reflected here with a new effective date. If we ever add anything that could reasonably be considered data collection, we will surface that change prominently in the app before it activates.

8. Contact

Questions: hello@cleanspacephone.com.

iPhone, iPad, iCloud, Face ID, Touch ID are trademarks of Apple Inc. CleanSpacePhone is an independent app and is not affiliated with Apple.