Privacy Policy
Updated
CleanX is a phone cleaner for iPhone and Android. It has no user accounts and no servers of its own: your photos, videos and contacts are analyzed on your phone. This policy explains what the app accesses, why, and where data goes when it has to leave your phone.
In short
- Photos, videos, contacts and your app list are processed on your phone and aren’t sent to us or anyone else.
- If you connect Gmail, the app talks directly to Google to show and clean up your email. We don’t receive or store your emails.
- Purchases go through Apple or Google. RevenueCat checks whether you have CleanX Pro, using a device-specific ID.
- No ads, no analytics, no tracking, and we don’t sell data.
Who we are
CleanX is the developer of the CleanX app and is responsible for the personal data described in this policy. You can reach us at support@phonecleanx.com.
Photos, videos and contacts
With your permission, CleanX reads your photo library to find duplicate, similar, blurry and large items, and your contacts to find duplicates and incomplete entries. This analysis runs on your phone. On iPhone, iOS may download your own iCloud Photos originals or previews from Apple so they can be analyzed; that traffic goes to Apple, not to us.
The app keeps some results on your phone so it doesn’t have to scan everything again: a scan cache (identifiers and fingerprints of photos), the list of items you moved to the CleanX trash, and your settings. Contact backups you create are saved inside the app on your phone. On iPhone, the Home Screen widget shows scan totals stored on your phone. Nothing is deleted or changed without your confirmation.
Installed apps (Android)
On Android, the Apps tab lists the apps you installed. If you allow Usage access in Settings, CleanX reads each app’s real size and when you last used it, to sort the list. This information stays on your phone. Uninstalling happens through Android’s own confirmation.
Gmail and your Google data
Email cleanup is optional. If you sign in with Google, CleanX asks for these Gmail permissions: read your email (gmail.readonly) and manage your email (gmail.modify). Google Sign-In also shares your email address, name and profile picture so the app can show which account is connected.
CleanX uses this access only for the email features you see in the app:
- Reading: message lists, senders, subjects, preview snippets, sizes, unsubscribe headers, label counts and your profile, to group emails by sender and category; the full message only when you open it.
- Cleaning up: moving the emails you select to Gmail’s Trash. CleanX doesn’t permanently delete email.
- Unsubscribing: when you tap Unsubscribe, the app sends the sender’s unsubscribe request, either an unsubscribe email from your account or a one-click request to the sender’s unsubscribe address, or opens the sender’s unsubscribe page in your browser.
How your Google data is handled
The app communicates with Google’s servers directly from your phone. Your emails aren’t sent to us; we have no server that could receive them. CleanX doesn’t save your emails to its own storage on your phone; besides the app’s memory while you use it, responses may only sit briefly in the operating system’s temporary network cache. Your Google sign-in is stored by Google’s sign-in library on your device.
We don’t use Google user data for advertising, don’t sell it, don’t transfer it to third parties except when you ask (for example, an unsubscribe request to a sender), and don’t use it to train AI models. No person at CleanX reads your email. All connections to Google and RevenueCat use encrypted HTTPS. When you open an email, images in it may load from the sender’s servers, as in other email apps.
CleanX’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
To disconnect, sign out of Gmail in the app. To remove CleanX’s access completely, go to your Google Account’s third-party connections and remove CleanX.
Purchases
CleanX Pro is sold through the App Store or Google Play; Apple or Google processes your payment, and we never see your payment details. To check whether you have CleanX Pro and whether you can get a free trial, the app uses RevenueCat, which receives your purchase information and a device-specific ID (Apple’s identifier for vendor on iPhone, the Android ID on Android). RevenueCat’s SDK also sends RevenueCat standard technical data such as your IP address, device model, OS and app version, and language. CleanX doesn’t send RevenueCat any other information about you.
Vault
Files you add to the vault are encrypted on your phone with AES-256. The key is derived from your passcode and a secret stored only on this device; your passcode itself is never stored. This means we can’t open your vault or recover a forgotten passcode, and vault files can’t be opened on another device.
Permissions
CleanX asks only for permissions its features need, and you can turn them off in Settings at any time:
- Photos: to find and delete duplicate, similar and large photos and videos, and to save compressed videos.
- Contacts: to find, merge and delete duplicate contacts and to create and restore backups.
- Motion sensors: to lock the vault when you place the phone face down, if you turn this on.
- Usage access (Android): to show app sizes and when you last used each app.
- Notifications: for reminders scheduled on your phone; they don’t come from a server.
No ads, analytics or tracking
CleanX contains no advertising, analytics or crash-reporting services and doesn’t track you across other companies’ apps or websites. It doesn’t use the advertising identifier.
Device backups
On iPhone, app data such as settings, the scan cache and contact backups made in CleanX can be included in your iCloud or computer backup, which is handled by Apple. Encrypted vault files can be included too, but can’t be opened on another device. On Android, CleanX’s app data is excluded from Google backups.
Who receives data
CleanX shares data only with these services, and only for the purposes described above:
- Google: your Gmail data, if you connect it, so the app can show and clean up your email.
- Apple and Google Play: your purchases, which they process as the app stores.
- RevenueCat: your purchase information and a device-specific ID, to check your CleanX Pro access.
- Authorities: only if the law requires it.
Why we may process data (legal bases)
Where data protection laws such as the GDPR or Türkiye’s KVKK apply, the processing described here relies on performing our agreement with you (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)): providing the features you choose to use, including the permissions you grant on your phone and email cleanup you turn on, and verifying purchases. You can stop any of it at any time by turning off a permission in Settings, disconnecting Google or deleting the app.
International transfers
Data processed on your phone doesn’t leave it. Data that goes to Google, Apple or RevenueCat may be processed in the United States and other countries. RevenueCat processes purchase data on our behalf; Google and Apple process data under their own policies and transfer safeguards.
Security
Your photos, videos and contacts never leave your phone for our analysis. Vault files are encrypted with AES-256, and connections to Google and RevenueCat use HTTPS. No method is perfectly secure, so keep your phone protected with a passcode.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict processing, to withdraw consent and to complain to a data protection authority (in Türkiye, the KVKK Board, with these rights set out in Article 11 of the KVKK). Since we don’t hold your photos, contacts or emails, you exercise most of these directly on your phone or in your Google Account; for anything else, email us. We don’t sell or share personal information for targeted advertising, including as defined by California law.
Keeping and deleting your data
Because data stays on your phone, you control it:
- Delete everything: uninstalling CleanX removes its data from your phone, including contact backups and vault files, except small items iOS keeps in the Keychain, such as the vault key secret and your Google sign-in. Move anything you want to keep out of the vault first.
- Vault: resetting the vault in its settings deletes its files and key.
- Gmail: sign out in the app, and remove access in your Google Account as described above.
- Purchase records are kept by Apple or Google and RevenueCat under their own policies.
Children
CleanX isn’t directed at children under 13, and we don’t knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we’ll delete it.
Changes to this policy
If we change how CleanX handles data, we’ll update this page and the date at the top. If a change affects how Google user data is used, we’ll ask for your consent in the app before it applies.
Contact
Questions or requests about privacy: support@phonecleanx.com.