The short version

clean365 is a storage cleaner that runs on your phone. Finding duplicates, detecting blurry shots, spotting screenshots, tidying contacts and deleting anything all happen on your device. Your photos, videos and contacts are never sent to us or to anyone else.

You can use every feature of the app without an account. If you never sign in and never subscribe, the app sends no personal data off your device at all.

Who is responsible for your data

clean365 is published by Mohammad Albaddawi, trading as reSnap, of [REGISTERED POSTAL ADDRESS]. Where this policy describes personal data being processed, that entity is the data controller under the UK and EU GDPR and the business under the California Consumer Privacy Act.

For any privacy question, or to exercise the rights described below, write to support@clean365.app.

Your media stays on your device

When clean365 scans your library it reads your photos and videos locally to build an index and compare them for duplicates, blur and screenshots. That index lives in a database inside the app on your phone. We do not copy, transmit or store your photos or videos, and we do not receive fingerprints or hashes of them either.

The same is true of your contacts. clean365 reads them to find duplicates and incomplete entries, and a contact backup is written as a .vcf file into the private storage of the app on your device. That file is only ever shared if you deliberately send it somewhere yourself using your phone's share sheet. It is not uploaded to us.

Your keep-list, your settings, your Secret Library and your cleanup history are all stored on your device only. Nothing about them is synced to an account.

When you clean up, the deletion itself is performed by your operating system, and the two platforms behave differently. On iOS removed items move to Recently Deleted in the Photos app, where you can restore them for 30 days. On Android there is no equivalent holding area: the system removes the items from the device as soon as you confirm, and clean365 cannot bring them back. Keep your own backup of anything you cannot afford to lose.

On either platform clean365 only ever deletes what you have selected and confirmed. Nothing is removed in the background.

What we actually receive

Account data, and only if you choose to sign in: your email address, an account identifier and the date the account was created. Your password is set and verified by our authentication provider and is never visible to us.

Subscription data, and only if you buy clean365 Pro: our payments provider receives a record of the purchase from Apple or Google, along with a device-generated identifier and your platform, app version and store country. We use it to know whether Pro is active. We never see your card number or billing address.

Connection data: any request your device makes to our account service arrives with an IP address, a timestamp and a basic device description, and is written to our hosting provider's server logs. This is inherent to any internet request and we use it only to keep the service running and secure.

What we do not collect

We do not collect your photos, videos, contacts, location, health data or biometric data. Face ID and fingerprint unlock are performed by your operating system, which tells clean365 only whether the check passed.

This version of clean365 contains no analytics and no advertising software. It sends no usage events and no behavioural telemetry. There are no advertising identifiers, no ad networks and no third-party trackers, so no App Tracking Transparency prompt is needed.

It does send crash reports. When the app crashes or hits an error it should have handled, a diagnostic report goes to Sentry so we can fix it: the error, where in the code it happened, the app version and your device model and OS version, plus a session-health signal recording whether the app ran or crashed. It never includes your photos, videos or contacts — file paths and email addresses are stripped from every report before it leaves your device. If you are signed in the report carries your account identifier, never your email address, so we can connect it to a support request you send us.

We do not sell or share your personal information, we do not use it for cross-context behavioural advertising, and we make no automated decisions that have legal or similarly significant effects on you.

Why we are allowed to process it

Account data and subscription status are processed to perform the contract you enter into when you create an account or buy a subscription (UK and EU GDPR Article 6(1)(b)). Without them we cannot give you an account or restore your purchase on a new device.

Server and security logs are processed under our legitimate interests in keeping clean365 available, debugging failures and preventing abuse (Article 6(1)(f)). We keep them brief and we do not use them to profile you.

We use a small number of processors and no one else. Supabase provides our authentication, database and hosting, in ap-northeast-1 (Tokyo). RevenueCat processes subscription receipts on our behalf. Sentry receives the crash reports described above, on servers in the European Union. Apple and Google process the purchase itself as independent controllers under their own terms, and they tell us only whether a subscription is active.

Each processor is bound by a data processing agreement and may only act on our instructions. Where data reaches the United States, transfers rely on the Standard Contractual Clauses or an equivalent approved mechanism.

We will disclose personal data to an authority only where we are legally required to, and we would have very little to give: we hold no media, no contacts and no message content.

How long we keep it

Your account record and subscription status are kept for as long as your account exists. When you delete your account, they are erased immediately and any residual copies in our provider's routine database backups roll off within 30 days.

Server logs are retained by our hosting provider for a short operational window and in no case longer than 30 days.

Records of a purchase held by Apple, Google and our payments provider are kept under their own terms and the tax and accounting rules that apply to them, which is typically several years. Those records are outside our control.

Anything held on your device is kept until you delete it or uninstall the app.

Your rights

If you are in the UK, the EEA or Switzerland you have the right to access your personal data, to have it corrected, to have it erased, to restrict or object to how we process it, and to receive it in a portable form. Where we rely on consent you can withdraw it at any time without affecting what happened before.

If you are in California you have the right to know what we collect and why, to have it deleted, to have it corrected, and not to be discriminated against for exercising any of those rights. We do not sell or share personal information, so there is nothing to opt out of.

The fastest way to erase everything is in the app: Settings, then Delete Account. You can also do it from the account page on this site, or email support@clean365.app from the address you signed up with. Deleting your account removes your account record, your subscription record and anything stored under it, and cannot be undone.

We answer rights requests within 30 days, and within 45 days for requests made under California law. If you are unhappy with our answer you may complain to your local data protection authority; in the UK that is the Information Commissioner's Office.

Security

Everything sent between the app and our services travels over TLS. Passwords are stored only as salted hashes by our authentication provider. Your Secret Library PIN never leaves your device: only a salted hash of it is kept, in the secure hardware-backed keystore your phone provides.

Children

clean365 is a general-audience utility and is not directed to children under 13, or under 16 where local law sets that age. We do not knowingly collect personal information from children. If you believe a child has created an account, write to us and we will delete it.

Changes to this policy

If we update this policy we will revise the date below and, for meaningful changes, surface a notice in the app. Continuing to use clean365 after an update means you accept the revised policy.

Contact us

Questions about privacy? Email support@clean365.app and a real person will reply.