Privacy Policy

1. Who we are

iPhone Cleaner: Clean Storage ("the app") is published by Miguel Ridruejo Mendoza, trading as Royal Miri ("we", "us"). We are the data controller for the limited personal data described below.

Contact: admin@royalmiri.com

2. What stays on your device

The app's core function is analysing content that is already on your iPhone. All of the following is processed locally, on the device, and is never transmitted to us:

• Photos and videos — including the image analysis used to detect duplicates and visually similar shots, which runs through Apple's on-device Vision framework.
• Contacts — matching and merging duplicate entries, and any address-book backup you create, which is stored on the device.
• Email content — where you connect a Gmail account, message data is retrieved from Google directly by your device and processed there to group messages by sender and identify newsletters.
• Private vault contents — stored in the app's protected local storage and excluded from device backups.
• Scan results and usage counters — such as how many items you have cleaned and how much space you have recovered. These are kept in local app storage for features like the Home Screen widget and are not transmitted.

We do not operate a server that receives your photos, contacts or email. There is nowhere for that content to go.

3. What is processed, and by whom

We do not use advertising networks, tracking SDKs or third-party behavioural analytics. The app does not track you across other companies' apps or websites, and we do not sell or share personal information for advertising purposes.

4. Permissions the app asks for

Each permission is requested only when you first open the feature that needs it, and declining one disables only that feature.

• Photos (Full Access) — required to compare images against one another and to delete or compress the items you select. Limited access exposes only photos you hand-pick, which makes duplicate detection impossible.
• Contacts — required to find and merge duplicate entries and to create backups.
• Face ID — used solely to unlock the private vault on your device. Biometric data never leaves the Secure Enclave and is never available to the app.
• Google Sign-In — only if you use the email cleaner. Authentication uses OAuth 2.0, so we never see your Google password. The resulting access token is stored in the iOS Keychain on your device.
• Notifications — optional reminders about scan results.

You can change any of these at any time in iOS Settings, and revoke Gmail access from your Google Account permissions page.

5. Google API Services disclosure

The app's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically: Gmail data is used only to provide the email cleaning features you request; it is not transferred to anyone else except as necessary to provide those features; it is not used for advertising; and no human reads it. Message data is processed on your device and is not retained on any server operated by us.

6. Legal bases (UK and EU users)

• Performance of a contract — processing purchase and subscription data so we can provide the paid features you bought.
• Consent — device permissions such as Photos, Contacts and Gmail access, which you grant explicitly and can withdraw at any time in iOS Settings.
• Legitimate interests — keeping the app secure and functional, and preventing fraudulent or abusive use of subscriptions.

7. How long data is kept

• On-device data — kept until you delete it or delete the app. Removing the app removes everything it stored, including the private vault and any contact backups.
• Subscription records — retained by Apple and RevenueCat for as long as needed to administer your subscription and to meet accounting and tax obligations.
• Support emails — kept only as long as needed to resolve your enquiry.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent. Because we hold almost no personal data about you, most of these are exercised directly on your device:

• Delete everything — delete the app. Move anything you want to keep out of the private vault first, as vault contents are stored only on the device.
• Revoke Gmail access — from your Google Account permissions page.
• Subscription data — contact us and we will assist with any request relating to data held by Apple or RevenueCat.

To make a request, email admin@royalmiri.com. You also have the right to complain to your local data protection authority.

9. California residents

We do not sell or share personal information as those terms are defined under the California Consumer Privacy Act. We do not use personal information for cross-context behavioural advertising. California residents may exercise their rights to know, delete and correct by contacting us at the address above; we will not discriminate against you for doing so.

10. International transfers

Our service providers, Apple, RevenueCat and Google, may process the limited data described in section 3 in countries outside your own, including the United States. Each provides appropriate safeguards for such transfers, including standard contractual clauses where required.

11. Children

The app is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Security

Because your content stays on your device, it is protected by iOS itself — device encryption, app sandboxing and the Secure Enclave. Authentication tokens are stored in the iOS Keychain. Vault contents are held in protected app storage and excluded from iCloud and computer backups.

13. Changes to this policy

If we change this policy we will update the date at the top of this page, and for significant changes we will give notice in the app. Continuing to use the app after a change takes effect means you accept the updated policy.

14. Contact

Questions about this policy or your data: admin@royalmiri.com. We aim to reply within one business day.