Privacy Policy

The short version

Photos and videos are read, scanned and compressed on your phone. They are not uploaded to us and we keep no copy of your library. There is no account and no sign-in. The app shows ads through Google AdMob and sends anonymous usage counts, and you can switch the counts off in Settings.

This page covers the current development build as well as the version we plan to publish. Where something is planned rather than live — real ad units, for example — it is marked as such.

1. What stays on your device

SlimSweep processes the following locally and does not transmit it:

• Your photos and videos, and the thumbnails used to display them.
• Duplicate fingerprints, duplicate groups and scan results.
• Compressed copies of photos and videos, and their before/after sizes.
• The contents of the encrypted vault and its encryption key.
• Deleted items held in SlimSweep's trash, and your app preferences and daily counters.

The app has no user account and no cloud sync. We cannot see your library, restore a deleted photo for you, or open your vault.

2. Photo library permission

On iOS, SlimSweep asks for access to your photo library when you start a scan. On Android it requests READ_MEDIA_IMAGES and READ_MEDIA_VIDEO, plus a legacy read permission on older Android versions. The permission is used to read the files you ask it to scan, to create compressed copies, and to delete the items you select.

On iOS you can allow only selected photos, and SlimSweep works with that selection. Android uses the system photo and video permissions. You can revoke access or change the scope at any time in system settings; if you do, the app keeps working but can no longer see the library until access is granted again.

SlimSweep does not request access to your camera, microphone, contacts or precise location, and it does not read photo metadata for advertising.

3. The encrypted vault

The vault is a local, premium feature. Your PIN is stretched with PBKDF2 to derive a key; vault contents are encrypted with AES-GCM-256; the key is stored in the iOS Keychain or the Android Keystore. The vault does not sync and the key is never sent to us.

Because we never receive the PIN or the key, we cannot recover a forgotten PIN, reset the vault or decrypt an export for you. Removing the app also removes the key and the vault. The app warns about this and offers an export so you can keep a copy — please use it before reinstalling or changing phones.

4. Ads

The free plan is supported by ads served through Google AdMob. The current development build uses Google's test ad unit IDs, which show test ads only. Production builds will use real ad units and will show real ads. Premium is ad-free.

To serve and measure ads, the Google Mobile Ads SDK may collect device and app information such as the advertising identifier where permitted, IP address, device type, operating system, app version, and ad impressions or clicks. That processing is governed by Google's privacy policy and its partner policies. We do not pass your photos, videos, file names, vault contents or scan results to the ad SDK.

Where required, production builds will ask for tracking permission on iOS and for consent in the EEA, the UK and Switzerland before personalised ads are requested. You can change ad personalisation in your device settings. Ads in SlimSweep are frequency-capped: none in the first session, at most one interstitial a day after a successful action, and a banner on the home screen only.

5. Anonymous usage counts

SlimSweep sends a small set of anonymous events to a CyberBoon telemetry endpoint. They help us see whether scanning, compression and the paywall work, and where the app fails. The eight product events are:

• scan_start and scan_complete: that a scan started, how many items were scanned, how many groups were found, and how long it took.
• delete_success: how many items were deleted and how many bytes were freed.
• compress_success: the kind of media, how many files, and the measured bytes saved.
• trash_restore: how many items were restored.
• paywall_view and purchase_start / purchase_success: which screen opened the paywall, the plan ID, and whether a purchase started or completed.

We also receive a simple app-open count and, if the app crashes, an error code. Events carry only fixed fields such as counts, durations, bytes and plan or source labels. They do not contain photos, videos, file names, album names, vault contents, your PIN, free-text input, contacts or location. Each installation has a random install ID that is not your advertising ID and rotates every 90 days; it is used only to group events from the same install.

Telemetry is on by default in builds that include a telemetry key, and you can turn it off at any time in SlimSweep's Settings. When it is off, no events are queued or sent. Data is sent over HTTPS and kept for product analysis; it is not sold and not used to build an advertising profile.

6. Purchases

Premium will be sold through the App Store or Google Play as a single yearly subscription. The store processes the payment and holds your payment details; we never see your card number. The app may receive whether a subscription is active so that premium features unlock, and the store may share a purchase receipt or transaction identifier with us for validation and restore.

Deleting the app does not cancel a subscription. Manage or cancel it in your App Store or Google Play account settings.

7. What we do not collect

• No account, email address or phone number is required to use the app.
• No photo or video is uploaded, and no copy of your library is stored on our servers.
• No contacts, calendar, health data, precise location or microphone access.
• No free-text content from the app, and no PIN or vault key.
• No browsing history. SlimSweep is not a browser or a keyboard.

8. Retention and deletion

Deleted items stay in SlimSweep's trash for 30 days on the free plan and 90 days on premium, then the app removes them. Videos larger than 200 MB exceed the trash limit; the app warns before removing one, and those files do not enter the trash. You can empty the trash earlier. Your phone's own Recently Deleted album is separate and may keep a copy for up to 30 days.

App data — preferences, counters, vault and trash — lives on your device and is removed when you delete the app or clear its data. Anonymous telemetry is not linked to an identity, so we cannot pick out one person's events to delete; turning the switch off stops future events. If you have written to support, you can ask us to delete that correspondence.

See Delete your data for the step-by-step version.

9. Children

SlimSweep is a general-audience utility and is not directed at children under 13. We do not knowingly collect personal information from children. The app has no account and no user-generated content.

10. Security

Network requests for ads and telemetry use HTTPS. The vault uses PBKDF2 for key derivation, AES-GCM-256 for encryption and the platform keystore for the key. No method is perfect, but the design keeps the sensitive part — your library — on hardware you control.

11. Changes to this policy

We will update this page when the app changes, for example when real ad units replace test IDs or when a new permission is added. The date at the top is the current version. Material changes will be noted in the app's release notes.

12. Contact

CyberBoon is the data controller for the limited processing described here. For privacy questions or requests, email us. We usually reply within a few business days.