Privacy Policy

1. Who we are

Phone Cleaner (the "app") is an Android application published by StudioX Nexus Ltd ("we", "us"), the data controller for the personal data described in this policy. Our registered address is Long Stone House, Unit #5, Main St, Charlestown, St. Kitts & Nevis, PO Box 1200, and you can reach us at techteam@studiox-dev.com.

This policy explains what the app does with information on your phone, what leaves the phone, who receives it and what you can do about it. It covers the Android app and this website. It does not cover Google Play itself, which is governed by Google's privacy policy.

2. What stays on your device

The app's entire purpose is to look at storage. All of that looking happens on the phone, in the app's own sandbox, and none of it is transmitted anywhere. Specifically, the following are processed locally and never sent to us or to any third party:

• File names, folder paths and file contents.
• Photos, videos and the thumbnails generated to display them.
• MediaStore identifiers and the perceptual fingerprints the app calculates to group exact and visually similar copies.
• The list of applications installed on the device, and any uninstall queue you build.
• The content of notifications. The notification cleaner dismisses items through Android without reading or storing their text.
• Battery, memory, speaker and network readings shown by the diagnostic tools.

The local index, the cleanup journal and your settings are stored in the app's private storage. Android's backup rules for the app exclude the file index, the cleanup journal, package identifiers and any saved draft from cloud or device to device transfer. Uninstalling the app removes all of it.

The app does not request access to all files on the device, does not request the full list of installed packages, and does not use an accessibility service.

3. What we collect

Three categories of data leave the device. This matches the Data safety section of our Google Play listing.

Analytics events and diagnostics carry a randomly generated session identifier, the app version, the Android API level, the language of the interface and the coarse category of the outcome. They never carry a file name, a path, a URI, a thumbnail, a fingerprint, the name of a third party app, the text of a notification, or your precise location.

We do not collect your name, email address, phone number, contacts, messages, precise location or payment details. The app has no account system, so there is nothing for this data to be attached to.

4. Permissions and why they are asked

Every permission is requested at the moment you open the feature that needs it, never on the launch screen, and the app keeps working with reduced functionality if you decline.

5. Advertising and our partners

The app is free and carries advertising. Ads are mediated through AppLovin MAX, which runs an auction between the advertising networks below and shows the winning ad. These partners are independent controllers of the data they receive and may use your advertising identifier, a coarse location derived from your IP address, device and connection characteristics and ad interaction data to select and measure advertising, subject to your consent where consent is required.

• Google AdMob and the Google User Messaging Platform. How Google uses data
• AppLovin (MAX mediation). Privacy policy
• Pangle. End user privacy policy
• Liftoff Monetize. Privacy policy
• Meta Audience Network. Privacy policy
• Mintegral. Privacy policy
• TradPlus. Privacy policy

Advertising partners never receive your files, thumbnails, file fingerprints, the list of apps installed on your device or the content of your notifications. Those never leave the phone at all, so they are not ours to share.

Ads appear in two fixed places: one full screen ad between a finished operation and its result, and one compact ad on the result screen. No ad is placed inside a selection list or inside a confirmation, so an ad can never be mistaken for a control that deletes something.

6. Your consent and choices

European Economic Area, United Kingdom and Switzerland

On first launch the app shows a consent form built with Google's User Messaging Platform, which operates under the IAB Transparency and Consent Framework. You choose whether our advertising partners may use your data for personalised advertising and the related purposes listed in the form. If you decline, the app still works and still shows ads, but they are not personalised.

You can change or withdraw your answer at any time in the app under Settings, where the same form can be reopened. Withdrawing consent does not affect processing that already took place.

United States

Depending on your state, sharing your advertising identifier with advertising partners may count as a "sale" or as "sharing" for cross context behavioural advertising. Residents of states that grant this right can opt out through the privacy options in the app's Settings, or by writing to techteam@studiox-dev.com. We do not knowingly process sensitive personal information, and we do not use it for inferring characteristics about you.

Everywhere

Android itself gives you two controls that apply to every app: you can reset the advertising identifier, and on Android 12 and later you can delete it entirely, which sends advertisers a string of zeros instead. Both live in the system settings under Privacy and Ads.

7. Analytics and crash reporting

Product analytics exist to answer whether a screen is understood and whether an operation finished, not to profile you. The event schema is a fixed list: an event that is not on the list is not sent, and our build fails if an unreviewed field is added. Counts, sizes and durations are reported as ranges such as "11 to 50 items" or "100 MB to 1 GB", never as exact values that could identify a specific file set.

Crash and performance reports contain the stack trace, the app version, the Android version and the device model. They are processed by our diagnostics provider strictly on our instructions, and they are not used to build advertising profiles.

8. Legal bases for processing

If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on the following legal bases under the GDPR and the UK GDPR.

• Consent (Article 6(1)(a)) for personalised advertising and for any advertising purpose covered by the consent form you are shown.
• Legitimate interests (Article 6(1)(f)) for non personalised advertising that keeps the app free, for security and fraud prevention, for crash diagnostics and for aggregate product analytics. We have assessed that these uses are limited, expected and low risk, and you may object to them at the contact address below.
• Performance of a contract (Article 6(1)(b)) for delivering the app functionality you asked for, including responding to feedback you choose to send us.

9. How long data is kept

• Data stored on your device, including the local index, the cleanup journal and your settings, remains until you clear the app's data or uninstall it.
• Analytics events are retained in aggregated form for up to 14 months and then deleted.
• Crash and performance reports are retained for up to 90 days.
• Feedback messages you send are kept for as long as needed to answer you and for up to 12 months afterwards.
• Retention by advertising partners is governed by their own policies, which are linked in section 5.

10. Children

The app is not directed to children. It deletes files and initiates app uninstalls, which is not an activity we want in the hands of a child, and the Google Play listing declares an adult target audience. We do not knowingly collect data from anyone under the age of majority in their country. If you believe a child has used the app and that data was collected, write to us and we will delete what we hold.

11. Your rights

Subject to your local law, you can ask us to give you a copy of the personal data we hold about you, correct it, delete it, restrict or object to how we use it, or receive it in a portable format. You can also withdraw consent for advertising at any time, as described in section 6.

Because the app has no account, the only identifier we can match a request against is your advertising identifier. Include it in your request if you want us to locate analytics or diagnostics records; you will find it in your device settings under Privacy and Ads. Without it we can confirm what categories of data we hold, but we cannot single out your records.

Send requests to techteam@studiox-dev.com. We answer within 30 days. If you are in the European Economic Area or the United Kingdom and you are unhappy with our answer, you may complain to your national data protection authority.

12. Deleting your data

There are two independent ways to remove everything.

1. On the device. Uninstalling the app deletes the local index, the cleanup journal, your settings and any saved draft. Nothing survives the uninstall, because none of it was ever copied off the phone. Clearing the app's storage in Android settings has the same effect without removing the app.
2. On our side. Email techteam@studiox-dev.com with the subject line "Data deletion" and include your advertising identifier. We will delete the analytics events, diagnostics records and any feedback correspondence associated with it, and confirm to you when it is done, within 30 days.

To have advertising partners delete what they hold, use the links in section 5. Each of them operates its own deletion process, which we cannot run on your behalf.

13. Security

All network traffic uses HTTPS, and cleartext traffic is disabled at the platform level. Data stored by the app lives in Android's private application sandbox, which other apps cannot read. Our server responses can never instruct the app to delete a file or to start a system action, so a compromised network cannot turn the app into a tool against you. No system is perfectly secure, but the smaller the amount of data that leaves your phone, the smaller the consequences of any failure, which is the main reason so little of it does.

14. International transfers

We operate from Saint Kitts and Nevis. Our advertising, analytics and diagnostics providers operate globally, so data described in section 3 may be processed in countries other than yours, including the United States. Where data is transferred out of the European Economic Area, the United Kingdom or Switzerland, the transfer relies on the European Commission's Standard Contractual Clauses, on the UK International Data Transfer Addendum, or on an adequacy decision, depending on the provider. The linked policies in section 5 set out each partner's own transfer mechanism.

15. Changes to this policy

If we change how the app handles data we will update this page and the version number and date at the top. Changes that materially reduce your protection, such as adding a new category of collected data or a new advertising partner, will be announced in the app before they take effect, and where the change requires consent we will ask for it again.