Privacy Policy

1. At a glance

• File analysis is local. Scans, hashes, duplicate detection, supported image analysis, and storage results are not uploaded to Boxobo Labs or provided to advertisers.
• The free version uses Google AdMob. Advertising services process network, device, interaction, and diagnostic data as explained below. This means the app must not be described as collecting no data.
• Google Play processes Pro purchases. We use purchase information to check and restore your ad-free entitlement. We do not receive payment card details.
• Feedback is an intentional upload. Your submitted message, reply email, and selected attachments are sent to our Cloudflare-hosted support system.
• You control file actions. No user files are automatically deleted. Sharing, exporting, and opening a map may send the selected content to another service at your request.
• No CleanUPIX account is required. Pro is associated with the purchasing Google Play account, rather than an account created with us.

2. Information processed on your device

With your chosen access, CleanUPIX reads file names, locations, sizes, dates, types, thumbnails, and file contents where needed to scan, preview, compare, search, copy, compress, archive, or clean files. Supported photo metadata may include camera information and embedded GPS coordinates. File hashes and visual fingerprints are calculated locally.

Supported text recognition, barcode recognition, and image classification run on the device with bundled models. We do not upload scanned media, extracted text, your installed-app inventory, or analysis results to our support service or AdMob.

Local app storage can contain preferences, scan caches, selected items, protected folders, job status, cleanup history, storage statistics, reminder schedules, privacy choices, purchase state, and feedback drafts. Feature-use and ad-frequency counters help control the experience locally. Developer crash diagnostics stay on the device unless you deliberately export or send them; AdMob has its own diagnostics described in section 4.

The optional vault encrypts selected files using Android Keystore-backed encryption. Temporary decrypted copies may be needed for viewing or explicit export. The location-free camera does not request your live GPS position; captured media is checked for supported location metadata before being saved. Pictures or sounds themselves can still identify people or places.

3. Permissions and device access

Permissions are requested for the features you use. Availability differs by Android version, distribution, and device. Denying access can limit a feature; inaccessible storage is not represented as scanned.

• Photos, videos, audio, and selected folders: read or manage accessible files through Android media and document APIs. Optional all-files access lets the core file management and on-device search tools inspect shared-storage documents, APK installers, archives, downloads, and media without asking you to select each folder. Android requires you to enable this access in system settings. It does not grant access to other apps’ private storage. File names, contents, fingerprints, and scan results stay on your device; this permission is not used to collect information for advertising.
• Photo location metadata: Android media-location access reads GPS embedded in an existing image for inspection, map opening, or removal. This is not live location tracking; CleanUPIX does not request precise or approximate device-location permissions.
• Camera and optional microphone: capture photos and videos; microphone access is used when recording video with sound.
• Installed apps and optional usage access: show app/storage information, permission information, and supported management tools locally. CleanUPIX does not silently uninstall apps or upload the inventory.
• Notifications and background work: show progress, user-enabled scan/reminder notifications, and scheduled work. With your choice and the required file access, an initial quick scan can run automatically, followed by a deeper scan when device conditions allow. Local checkpoints help interrupted scans resume when you reopen the app. You can stop a scan or disable startup scans and feature suggestions in settings. Background scans do not automatically delete user files.
• Biometric authentication: use Android authentication for the vault or app lock. We do not receive or store biometric templates.
• Clipboard: read content when you invoke a relevant foreground tool, such as link cleaning or clipboard clearing; no background clipboard monitoring is performed.
• Internet and advertising identifiers: support ads, consent, Play services, website access, and voluntary feedback. Internet access does not upload your scan contents.

Optional Gmail cleanup

When you explicitly connect a Google account, Google Play services handles account selection and consent for the full Gmail scope (https://mail.google.com/), required by Google for permanent deletion. CleanUPIX never asks for or receives your Google password. This broad scope permits reading, composing, sending, and permanently deleting Gmail messages; our tool retrieves only message identifiers, sender and subject headers, dates, labels, estimated sizes, and supported List-Unsubscribe links. It does not fetch email bodies, attachments, or remote email images, send email, or create automatic deletion filters. It permanently deletes individual messages through the API only after your explicit selection and confirmation; this action cannot be undone.

Mailbox requests go directly from your device to Google over HTTPS. Google processes these requests under its own policies. CleanUPIX does not upload Gmail data or access tokens to Boxobo Labs, Cloudflare support, advertisers, analytics, or AI services. Gmail data is not sold, used for advertising, or used to train AI models. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Only explicitly selected individual messages are changed after confirmation. Archiving, marking read or unread, reporting spam, moving to Trash, and restoring to Inbox synchronize with Gmail on other devices. Starred, important, sent, and draft messages are protected from cleanup; protected messages can still be restored from Trash. Gmail normally removes Trash permanently after 30 days. You may explicitly confirm immediate permanent deletion from Trash or another folder. A rejected request is not reported as a successful deletion; missing responses are checked without replaying the deletion. Email cleanup affects Google account storage; archiving does not free storage, and neither action is counted as freed phone storage.

The last connected email address is remembered in private preferences on your device, excluded from app-data backup and device transfer, so the account can reconnect silently after reopening while Google authorization remains valid. Network failures do not erase this preference. Access tokens, reviewed message metadata, selection, and the last-operation undo record remain in application memory and are not written to app files, backups, or diagnostic logs; they disappear on local disconnect or process termination. Google Play services independently manages its authorization token cache. No refresh token or mailbox copy is stored on our servers. Disconnecting locally removes the remembered account and clears in-memory Gmail data. It does not revoke Google permission; you can revoke it through Google account connections. No pending mailbox change is replayed automatically after a restart.

Subscription lists cover only reviewed messages with supported HTTPS unsubscribe headers. A sender-provided page opens in your browser only after your confirmation; the link may identify your email address to that sender, whose privacy policy applies. You complete any required steps yourself. Opening the page does not establish that you have unsubscribed. Opening a message in Gmail shares the account/message reference with Google through your browser. Other CleanUPIX tools remain available without connecting a Google account.

3a. Optional contacts management

When you open Contacts in Tools and grant permission, CleanUPIX reads contact names, phone numbers, email addresses, account labels, notes, addresses, groups, photos and other contact fields to display your address book, suggest duplicates and create local backups. Read access and editing access are requested separately. Contact data is processed on your device. We do not automatically send address-book data to Boxobo Labs, our feedback service or advertisers. Information you intentionally include in a feedback attachment or share with another app follows the relevant feedback or sharing practices described in this policy.

Merge and deletion require your explicit selection and confirmation. A recovery backup must be saved before these changes. Merging links original Android records; deleting a synced contact can also affect the source account and your other devices through the account provider. Read-only account fields are preserved: local linking can group their records without editing those fields, while bulk deletion and field changes are blocked for protected records. Restore creates local copies and skips matching existing details; it does not overwrite contacts or restore account sync settings.

Contact recovery backups are encrypted with an Android Keystore key and excluded from Android app-data backup. You can browse and delete these backups in the app. Uninstalling the app or clearing its data removes these local backups and keys, so export a vCard outside the app if you need an independent copy. A vCard export is an unencrypted file containing selected personal contact information and may include photos. When you share or import a vCard, the app you choose receives the file and applies its own privacy practices. Temporary vCard copies remain available for recipient apps and become eligible for cleanup after seven days on a subsequent export pass.

4. Advertising and privacy choices

The free version can display banner, interstitial, app-open, and optional rewarded ads through Google AdMob (Google Mobile Ads SDK). Local usage history and cooldowns coordinate placement and frequency. Core file operations do not depend on an ad loading successfully.

When advertising services operate, Google may collect and share the device IP address (including an approximate location inferred from it), advertising ID and app-set ID where available, other applicable device/account identifiers, app and ad interactions such as launches, taps and video views, and diagnostics such as startup time, performance, hangs, and energy use. These services use this information for advertising, measurement/analytics, and fraud prevention. Ad data is transmitted using encrypted connections.

Google's User Messaging Platform (UMP) manages applicable advertising consent and privacy messages. Ad requests follow its eligibility checks. Where a privacy-options entry is required, you can revisit advertising choices through the app's privacy controls. Personalization and data use depend on your choices, region, Android settings, and Google's applicable rules. Non-personalized or limited ads may still process data needed to deliver, measure, or protect advertising; declining personalization does not necessarily mean no data is processed.

You can manage or delete the advertising ID through Android settings. An active Pro entitlement stops new ad requests and removes ad placements, including ordinary rewarded-ad requirements. Purchasing Pro does not retrospectively delete information already processed by advertising providers.

See Google's Privacy Policy, Google's advertising information, and Google Mobile Ads data disclosures for provider practices and controls.

5. One-time Pro purchases

CleanUPIX Pro is a one-time, non-consumable Google Play purchase that removes advertising in this app. It is not a recurring subscription. Price and payment terms are displayed by Google Play before confirmation.

Google Play handles checkout, payment methods, and the purchasing account. CleanUPIX receives purchase/product identifiers, purchase tokens, purchase state, acknowledgement status, and signed purchase information to validate, acknowledge, and restore Pro. Relevant entitlement information is stored locally and checked through Google Play Billing; we do not operate a separate developer purchase-validation server. We do not receive your card number, bank credentials, or full payment-method details.

Pending, cancelled, failed, refunded, or revoked purchases are handled according to the purchase state returned by Google Play. A pending purchase is not an active Pro entitlement. Restore purchases using the same purchasing Google Play account on compatible Android devices. Entitlements do not automatically transfer to a different account or platform.

Google retains purchase and account records under its own policies. Uninstalling CleanUPIX does not cancel or erase a Google Play transaction. Purchase or refund requests may require Google Play's own support and account controls.

6. Feedback and support

When you press Send in the feedback form, we receive the selected category, title, description, reply email address, app version, app language/locale, a random submission identifier, and the images you deliberately attach. The service also records submission/update times and internal support status, notes, and priority. Up to five images can be submitted; supported attachments are converted and resized for upload, with location metadata removed during preparation. Visible image content can still contain personal information.

This information is transmitted over HTTPS to our Cloudflare Workers and D1 service. Boxobo Labs uses it to investigate bugs, respond to requests, improve the app, and manage support. Attachments are accessible through the authenticated support dashboard, not public image links. We do not automatically attach scanned files, your gallery, or local diagnostics.

The infrastructure necessarily processes connection information such as IP addresses and request metadata. The support API uses hashed IP-based short-lived rate counters to prevent abuse. Administrative access and changes are audited. Sending email to our contact address separately gives us your email, message, and any attachments you include, processed through the email provider.

Send only information relevant to your request. Avoid passwords, payment details, or private images of other people. To request deletion of a submitted ticket or attachment, contact crypcryptonic@gmail.com, preferably from the reply email used for that submission, with enough information to locate it.

7. Sharing, maps, reviews, and other services

When you share a file, archive, report, diagnostic log, or app link, Android's sharing interface passes the selected content to the application you choose. That recipient's processing is governed by its own privacy policy. CleanUPIX grants temporary read access to shared content where required; opening a chooser does not prove a recipient has completed delivery.

Location-removal sharing creates a separate copy of supported images; it does not change the original. Supported GPS metadata, and additional identifying metadata when selected, are removed and checked. Unsupported files are not claimed to be sanitized. Metadata removal cannot remove information visible within an image or guarantee anonymity.

Opening embedded photo coordinates in a map passes those coordinates to the map application or website you select. Opening store pages, leaving a review, restoring purchases, or viewing other Boxobo Labs apps uses Google Play. In-app reviews are handled by Google; we do not receive your individual review through the review API, and published reviews may be public.

Exports and saved camera files remain in the destination you choose. Other applications, Android backups, or cloud gallery services you enable may process these files independently of CleanUPIX.

8. Website and service providers

This public website is hosted on Cloudflare. Requests expose ordinary connection and request information, such as IP address, browser/device information, requested URL, and timing, to the hosting infrastructure for delivery, security, and operational diagnostics. We do not add public-site advertising pixels or analytics trackers. The public pages do not require a login or set a language preference.

The private support dashboard uses authentication and security cookies for authorized administrators. These are separate from the public website and do not create a CleanUPIX user account. Provider handling, infrastructure locations, and provider retention are described in Cloudflare's Privacy Policy.

Google provides advertising, consent, billing, and store/review services. Cloudflare provides website and support hosting/database services. Email support uses the email provider. Your selected sharing or map recipients receive only the content you choose to send to them. We do not sell your scanned files or provide file-analysis contents to advertisers.

Service providers may process information in countries other than yours under their applicable safeguards. We may disclose limited information when necessary to comply with law, protect the service, or respond to a valid legal request.

9. Retention, deletion, and security

• Local app records: settings, caches, history, draft feedback, and entitlement state are kept as needed for the feature until cleared, replaced, or removed by uninstalling/clearing app data. Relevant in-app controls can clear history, diagnostics, or temporary privacy files. Submitted drafts are cleared after confirmed success; failed submissions remain available for retry.
• Temporary sharing copies: sanitized image copies are eligible for cleanup after 24 hours and removed on a subsequent cleanup pass, or through the app's temporary-file controls. They are not deleted immediately when the share screen closes, so recipients can read them.
• Vault and exports: encrypted vault files remain until your action or app-data removal. Temporary decrypted viewing copies are cleaned on screen exit where possible and by age-based housekeeping. Export vault content before uninstalling or clearing data; loss of its key can make remaining encrypted data unreadable. User-saved files are not removed merely by clearing app records.
• Submitted feedback: tickets, attachments, and support notes are retained for support follow-up until deleted by an authorized administrator or in response to an applicable verified deletion request. There is no automatic ticket expiry in the current system.
• Support security records: rate counters are eligible for expiry after approximately 48 hours; admin audit entries after 180 days. Scheduled maintenance removes expired entries. Active session records expire or are revoked. Infrastructure logs and backups follow provider retention and may take additional time to expire after primary-data deletion.
• Google services: advertising, consent, purchase, and review records held by Google follow Google's retention and deletion policies. Removing local CleanUPIX data does not remove those provider records.

We use HTTPS for support submissions, restricted authenticated access for support attachments, hashed administrative passwords, and Android-backed encryption for the vault. No storage or transmission system is guaranteed completely secure. We restrict support access to service administration and do not publish submitted feedback.

10. Your choices and privacy rights

You can change permissions in Android settings, limit selected folders, disable optional schedules, manage advertising privacy choices where available, purchase ad-free Pro, clear supported local records, and choose not to submit feedback. You can keep using supported local tools without creating an account or sending us a support message.

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, or object to processing of personal information, obtain a copy, or withdraw consent where processing relies on consent. Contact crypcryptonic@gmail.com to exercise rights relating to information held by Boxobo Labs. We may request limited information to verify the request and locate your submission. We respond under applicable law; some information may need to be retained for legal or security reasons.

Where applicable, processing relies on consent for relevant advertising, providing requested support or services, and legitimate interests in service security and maintenance, subject to your rights. Withdrawing consent does not invalidate earlier lawful processing. You may also contact your local data-protection authority. For data held by Google, Cloudflare, or a sharing recipient independently, use the relevant provider's privacy controls or contact channels.

CleanUPIX does not offer user-account registration, so there is no CleanUPIX account to delete. This does not limit your ability to request deletion of feedback or other personal information we hold.

11. Children

CleanUPIX is a general-purpose storage utility and is not specifically directed to children under 13, or the applicable minimum age in their country. We do not knowingly seek children's personal information through support. If you believe a child has submitted personal information to us, contact us so we can review and remove it as appropriate. Google Play and Google services also apply their own age and parental-control rules.

12. Updates and contact

We update this policy when features or data practices change. The effective date above identifies the current version. Where required, material changes will be accompanied by additional notice or consent.

Developer: Boxobo Labs
App: CleanUPIX
Privacy, support, and deletion requests: crypcryptonic@gmail.com