Privacy Policy

1. Who is responsible

Sweepo is published by:

• Trevionix LTD
• International House, 12 Constance Street, London, E16 2DQ, United Kingdom
• [email protected]

In this policy, “we” means Trevionix LTD and “the App” means Sweepo: Clean Up Storage, for iPhone. This policy covers the App and this website at sweepoapp.com.

2. Short version

This section summarises how the App handles data. The App Privacy section of the App’s App Store listing describes the same practices.

We do not sell personal data. The App does not display advertising and does not request access to the Advertising Identifier (IDFA).

3. How each tool works

• Photo Manager & Smart Cleanup. The App reads your Photos library through Apple’s Photos framework to group similar shots, duplicates, selfies and screenshots. Comparison happens on your device; nothing is uploaded to generate a group or a suggestion.
• Device Security. Reads basic system status — whether a passcode is set, whether an ad blocker is active, whether credential protection is configured — directly from iOS, on your device. No third-party service is involved.
• Safari Content Blocker. The App includes a Safari content blocker that you enable in Settings > Apps > Safari > Extensions. Blocking rules are applied by Safari on your device; the App does not see your browsing history.
• Account Safety. This is the one feature that sends data off your device. See section 4 for details.

4. Account Safety, in detail

Account Safety checks whether an email address or password has appeared in a known data breach. To do that, it has to ask a service that maintains breach records — there’s no way to check this without a request leaving your device. We limit what is involved as follows:

• You choose what to check. Nothing is checked automatically or in the background. The check runs only when you enter an address or password and confirm.
• Only what’s needed is sent. For an email check, the address you enter is sent to Have I Been Pwned (haveibeenpwned.com). For a password check, the password is hashed on your device and only the first 5 characters of its SHA-1 hash are sent, using Have I Been Pwned’s k-anonymity range API. Your password itself never leaves your device. Nothing else from the App is included.
• We don’t store a history of what you’ve checked. The result is shown to you and is not stored by us.

Breach data is provided by Have I Been Pwned. Its handling of requests is described in its own privacy policy at haveibeenpwned.com/Privacy.

5. What Apple handles

• Purchases. Subscriptions are sold and billed entirely through Apple’s In-App Purchase system (StoreKit). We never see your card details. Apple shares with us only whether a purchase or subscription is active.
• Diagnostics you opt into. If you’ve enabled “Share With App Developers” in iOS Settings → Privacy & Security → Analytics & Improvements, Apple may pass us crash logs in de-identified form.
• App Store metrics. Apple provides us with aggregated, anonymous figures — downloads, subscription counts — through App Store Connect.

6. Analytics, crash reporting and attribution

• AppsFlyer (install attribution). When the App is first opened, the AppsFlyer SDK sends technical data such as the vendor identifier (IDFV), IP address, device model, OS version and app version to AppsFlyer, so we can understand which marketing campaigns lead to installs. AppsFlyer may share attribution results with the advertising networks we use to run those campaigns. See appsflyer.com/legal/privacy-policy.
• Google Firebase Analytics. Records how the App is used, such as screens viewed and features used, to help us improve it. This data is not linked to your name or email address. See firebase.google.com/support/privacy.
• Google Firebase Crashlytics. Collects crash reports and related technical information to help us fix bugs.

7. Permissions and why they’re asked for

• Photos. Required for Photo Manager and Smart Cleanup to find and group duplicate or similar items.

Every permission can be withdrawn at any time in iOS Settings → Privacy & Security. Withdrawing a permission stops the feature that depends on it from working; nothing else changes.

8. Legal bases

Where the UK GDPR or EU GDPR applies to you, we rely on:

• Performance of a contract: providing the App’s features and managing your subscription and purchases through Apple.
• Your consent: the iOS prompt for Photos access, and the decision to run an Account Safety check, both of which you control directly.
• Our legitimate interests: responding to support emails, keeping the App working reliably, measuring the effectiveness of our marketing (AppsFlyer), understanding how the App is used (Firebase Analytics), and fixing crashes (Crashlytics).

9. Who data is shared with

We don’t sell or rent personal data. The parties involved in running the App are:

• Apple: App Store distribution, In-App Purchase billing, and optional crash diagnostics you’ve enabled in iOS.
• Have I Been Pwned: only the email address or partial password hash you submit to Account Safety, only when you run a check.
• AppsFlyer: device and technical data for install attribution, as described above.
• Google (Firebase): app usage events and crash reports.
• Our email provider, for correspondence you choose to send us.
• Our website hosting provider, which may keep standard server access logs (such as IP address and request time) for security and availability of this website.

10. How long data is kept

• Photos, videos and Device Security results. Held on your device only, for as long as you keep them there.
• Account Safety checks. We don’t keep a log of addresses or passwords you’ve checked or results returned.
• Analytics, crash and attribution data. Retained by AppsFlyer and Google according to the retention settings of our accounts with them, after which it is deleted or aggregated.
• Purchase and subscription status. Held by Apple for as long as your Apple Account requires.
• Support email. Kept for as long as needed to resolve your request, then deleted.

11. Your rights

If the UK GDPR or EU GDPR applies to you, you have the right to request access to any personal data we hold about you, to have it corrected or erased, to restrict or object to processing, to receive it in a portable form, and to withdraw consent where processing is based on consent.

Write to [email protected] from the address concerned, and we’ll answer within one month (or tell you if we need longer, as the law allows). Your photo library and Account Safety checks never reach us in a form we retain, and your purchase records are held by Apple. A request may concern support correspondence we hold, and analytics or attribution data associated with your device’s identifiers, which we can ask our providers to delete.

If you believe we’ve handled your data improperly, you can complain to your national data protection authority — for example the Information Commissioner’s Office (ico.org.uk) in the UK. You are welcome to contact us first at the address above.

12. Children

Sweepo is not directed at children in a way that involves collecting personal data from them. If you believe a child has used the App in a way that raises a concern, write to [email protected].

13. Security

Any connection this website or the App makes travels over encrypted HTTPS. The strongest measure here is structural rather than technical: because your photo library and device checks stay on your device, and because we don’t retain a log of Account Safety checks, the amount of data relating to you that we or our providers hold is limited. No method of transmission or storage is completely secure, and we don’t claim otherwise.

14. Changes to this policy

If the App changes in a way that affects this policy, we’ll update it before or alongside that release, and the date at the top will change with it. The current version always lives at sweepoapp.com/privacy.

15. Contact

Privacy requests: [email protected]
Everything else: [email protected]
Publisher: Trevionix LTD, International House, 12 Constance Street, London, E16 2DQ, UK