Privacy Policy

1. Our Core Privacy Pledge: 100% On-Device Processing

At DFound, we believe phone maintenance and storage cleanup should never come at the expense of your privacy. Cleans was built from the ground up under a strict Privacy-by-Design architecture:

2. Data We Process and Collect

Below is a detailed disclosure of every category of data that Cleans interacts with, why it is accessed, and where it is stored:

a. Media Files (Photos, Videos, Audio)

• What We Access: File metadata (dimensions, file size, timestamps, URIs) and visual pixel buffers via Android MediaStore.
• Purpose:
  1. Duplicate & Similar Photo Detection: Generates 64-bit perceptual hashes (dHash) and computes Hamming distance locally to group identical or near-identical photos.
  2. Blurry Photo Detection: Calculates Laplacian variance across grayscale pixels to detect out-of-focus or motion-blurred shots.
  3. Video Compression: Uses Android hardware MediaCodec to transcode oversized videos into optimized bitrates and resolutions.
  4. Photo Swiper: Provides an intuitive card triage interface to quickly keep or discard clutter month by month.
  5. Secret Space: Securely locks private photos and videos in an encrypted vault.
• Transmission: None. Media files and generated hashes remain strictly on your physical device.

b. Contacts Information

• What We Access: Contact names, phone numbers, and email addresses stored in your device's local address book.
• Purpose:
  1. Detecting duplicate contact entries sharing identical phone numbers or names.
  2. Identifying incomplete contacts missing both numbers and emails.
  3. Merging selected duplicates into a single clean contact card upon your explicit confirmation.
  4. Creating an on-device .vcf (vCard) backup file prior to any deletion or merge, ensuring you can restore your contacts at any time.
• Transmission: None. We do not upload your address book to any external servers or sync it with third-party databases.

c. Secret Space (Encrypted Vault Data)

• What We Access: User-designated photos, videos, and private notes that you explicitly move to Secret Space.
• Protection Mechanism: Vault items are copied into the application's private internal sandbox directory (app-private internal storage) and protected by AES-256 encryption. Access requires your 4-digit master PIN or biometric verification (Fingerprint / Face Unlock).
• Biometric Data: Authenticated exclusively via the Android OS BiometricPrompt. Our application never receives, reads, or stores your biometric fingerprints or facial templates.

d. Installed Applications & Usage Statistics

• What We Access: Package names, application names, launcher icons, APK/storage sizes, and last-time-used timestamps via Android UsageStatsManager and PackageManager.
• Purpose: The "App Manager" feature categorizes unused applications (e.g., zero usage in 30, 60, or 90 days) and large storage consumers to help you reclaim space. Facilitates initiating standard system uninstallation dialogs for apps you select.
• Transmission: None. App lists and usage metrics are computed on-device and never transmitted to external analytics or ad servers.

e. Device Diagnostics, Hardware & Battery Information

• Acoustic Speaker Cleaning: Generates local 165Hz–440Hz resonant frequency audio tones via AudioTrack and synchronized haptic pulses to dislodge water and dust from speaker grilles. We do not record, listen to, or capture audio.
• Battery & Power State: Reads battery level, charging status, temperature, and voltage to render charging animations and notify you when charging completes.
• Anonymous Diagnostics: Aggregated, non-personally identifiable diagnostic information (device manufacturer, model, Android OS version, app version, ANR reports, and crash logs) collected through Firebase Crashlytics and Google Play Console to diagnose technical bugs and improve stability.

f. Advertising & Device Identifiers

• Google Advertising ID (GAID): In the free version of Cleans, third-party advertising SDKs (such as Google AdMob) receive the Google Advertising ID and general device telemetry to deliver advertisements, prevent fraudulent ad clicks, and respect ad frequency caps.
• User Consent: We implement Google User Messaging Platform (UMP) to obtain GDPR/CCPA consent in applicable regions before personalized ads are displayed. You can reset or delete your Advertising ID at any time via Android Settings > Google > Ads.

g. Purchase & Subscription Information

• Google Play Billing: When you purchase Cleans PRO (weekly, annual, or lifetime subscriptions), payments are handled directly by Google Play In-App Billing Library (v8.0.0).
• Payment Data: We never receive, process, or store your credit card numbers, bank account numbers, or billing addresses. Only anonymous transaction tokens and subscription status are verified through Google Play.

3. Permissions Used and Why They Are Needed

Google Play requires transparent disclosure of all sensitive device permissions. Cleans requests permissions strictly on an as-needed basis to execute core utility functions:

4. Scoped Storage Compliance & Safe File Deletion

To ensure you maintain complete authority over what is kept or removed from your device:

• No Silent Deletions: Cleans cannot and will never silently delete your photos, videos, or documents.
• System Consent Dialogs: Whenever you choose to delete duplicates, blurry photos, or large videos, Cleans invokes Android's official MediaStore.createTrashRequest() or MediaStore.createDeleteRequest() API. The Android operating system itself presents a native, non-bypassable confirmation dialog showing the exact thumbnails and count of files to be modified.
• Trash Safeguard: On supported Android versions (Android 11+), deleted files are moved to the system Trash / Recycle Bin, allowing you a 30-day grace period to restore them through your device's Gallery or Files app before permanent erasure.
• Video Compression Safety: When compressing a video, Cleans previews the compressed file side-by-side with file size comparisons before prompting you to confirm whether you wish to replace the original.

5. Google API Services User Data Policy & Limited Use Requirements

If you connect your Google Account or utilize features powered by Google APIs (including Gmail APIs with scope https://www.googleapis.com/auth/gmail.modify):

• Limited Use Disclosure: Cleans' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• No Third-Party Data Transfer: Information received from Google APIs is never transferred to any third party, data broker, or external server.
• No Advertising Use: We strictly do not use or transfer Google user data for serving advertisements, including personalized, re-targeted, or interest-based advertising.
• No AI Model Training: We strictly do not use or transfer Google user data to train, retrain, or improve generalized artificial intelligence (AI) or machine learning (ML) models.
• No Human Inspection: No humans read your email messages or Google user data unless:
  1. We have obtained your explicit prior consent for specific messages (e.g., tech support troubleshooting);
  2. It is strictly necessary for security purposes (e.g., investigating a bug or system abuse);
  3. It is required to comply with applicable law or legal obligations; or
  4. The data is aggregated and anonymized for internal technical operations.
• Revoking Access: You can disconnect and revoke Cleans' access to your Google Account at any time via Google Account Permissions Settings.

6. Third-Party SDKs and Services

Cleans integrates trusted industry-standard SDKs to provide billing, error diagnostics, and advertising. These third parties may collect anonymous device information in accordance with their respective privacy policies:

• Google Play In-App Billing: Handles subscription payments, renewals, and transaction verifications securely. (Google Privacy Policy)
• Google Play Services: Core Android system library ensuring compatibility and security. (Google Play Services Privacy Policy)
• Google Mobile Ads (AdMob) & UMP: Displays banner, interstitial, and rewarded advertisements in the free tier and manages user privacy consent. (Google AdMob Privacy Policy)
• Firebase Crashlytics & Analytics: Collects aggregated crash logs, non-fatal errors, and basic app launch telemetry to maintain app stability. (Firebase Privacy Policy)

7. Data Security and Safeguards

We implement rigorous technical, administrative, and physical security measures to safeguard your information:

• Encrypted Vault (Secret Space): Files stored in Secret Space are protected by AES-256 symmetric encryption, with master keys generated and managed securely on-device.
• Hardware Keystore: Security tokens, PIN hashes (salted SHA-256 / PBKDF2), and cryptographic secrets are stored within Android's hardware-backed Keystore or secure app sandbox.
• TLS/HTTPS Encryption: All network communications with Google Play Billing, AdMob, and Firebase servers are encrypted in transit using industry-standard TLS 1.3 / HTTPS.
• Zero Screen & Audio Retention: Audio frequencies and speaker cleaner utilities do not record microphone data.
• Ephemeral Memory Execution: Image decoders and Laplacian blur matrices exist only in volatile RAM during active scanning sessions and are purged immediately after calculations conclude.

8. Data Retention & How to Request Data Deletion

In accordance with Google Play Data Safety policies, users have full control over data retention and complete rights to request data deletion:

a. On-Device Data Deletion

• App Cache & Scanned Indexes: You can clear all cached metadata, thumbnails, and duplicate clusters at any time via Android Settings > Apps > Cleans > Storage & Cache > Clear Storage.
• Secret Space Files: You can unlock your vault and permanently delete or export any stored photos, videos, or notes at will.
• Contact Backups: Saved .vcf backup files can be removed from inside the Contacts Cleaner screen or cleared with app data.
• Uninstalling the App: Completely removing Cleans from your device immediately purges all application databases, preferences, cached indexes, and encrypted vault files stored in app-private storage.

b. Requesting Data Deletion

Because Cleans does not require user account registration and does not store personal files on external cloud servers, there are no remote server profiles or personal media to purge.

If you have communicated with us via email support and wish to have your email correspondence, support tickets, or diagnostic crash traces permanently deleted from our records, please submit a request to:

📧 Email: duanelucky97@gmail.com
Subject: Data Deletion Request - Cleans

We will verify and honor your deletion request within thirty (30) days without undue delay.

9. Your Privacy Rights (GDPR & CCPA / CPRA)

Depending on your geographic location, you enjoy specific statutory privacy rights regarding your personal data:

a. European Economic Area (EEA) & United Kingdom (GDPR)

• Right of Access: The right to know whether personal data is processed and request copies of such data.
• Right to Rectification: The right to correct inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): The right to request that your data be deleted.
• Right to Restrict or Object to Processing: The right to limit or object to our processing of your diagnostic data.
• Right to Withdraw Consent: You can withdraw ad consent or permission grants at any time without penalty.
• Supervisory Authority: You have the right to lodge a complaint with your local data protection supervisory authority.

b. California Residents (CCPA / CPRA)

• Right to Know & Access: You may request disclosure of categories of personal information collected, sources, and commercial purposes.
• Right to Delete: You have the right to request deletion of personal information collected from you.
• Right to Opt-Out of Sale / Sharing: We do NOT sell or share your personal information. We do not engage in cross-context behavioral advertising using your private files.
• Right to Non-Discrimination: You will never be denied services or charged different rates for exercising your privacy rights.

10. Children's Privacy (COPPA Compliance)

Cleans: Phone Storage Cleaner is a general-audience device utility tool and is not targeted toward children under 13 years of age (or under 16 in certain jurisdictions).

We do not knowingly collect, solicit, or maintain personal information from children under 13. If we discover that personal information of a child under 13 has been inadvertently transmitted to us (e.g., via a support email), we will take prompt steps to permanently delete the information. Parents or guardians who believe their child may have contacted us may write to duanelucky97@gmail.com.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect enhancements to our features, Android operating system updates, or evolving regulatory standards. When updates occur, we will revise the "Effective Date" at the top of this page.

We encourage you to review this Privacy Policy periodically. Continued use of Cleans following any published modifications constitutes your acknowledgment of the updated terms.

12. Contact Us

If you have any questions, suggestions, feedback, or concerns regarding this Privacy Policy or our data handling practices, please contact our data protection team: