1. Introduction
Welcome to StormClean (“we,” “our,” or “us”). We are fully committed to protecting and respecting your privacy. This Privacy Policy describes how we collect, use, and safeguard your information when you download, install, and use our mobile application, StormClean (the “App”).
By using the App, you consent to the practices described in this Privacy Policy. If you do not agree with these terms, please do not use the App.
2. Information We Process
When you use the App, we may collect the following information and data:
2.1 Information That Is Processed Automatically
To ensure the stable functionality and security of the App, we may collect certain technical information, including your IP address, system logs, device model, operating system version, and approximate location. This data is processed strictly for essential technical purposes: identifying crashes and errors, conducting performance analysis, ensuring data security, and maintaining compliance with applicable legal requirements.
2.2 Permissions on Your Device
To provide our product’s functions and services, we may need you to allow certain permissions on your device. These include:
- Read and delete contents on storage
- Contacts
- Photos / Videos (for Fast Clean, AI Albums, and duplicate detection)
- Wi-Fi and Network State
Note: Allowing these permissions will be deemed as your consent to allow us to collect and use relevant information to realize those functions. When you deny or disable permissions, we will be unable to provide you with the corresponding features. To the extent allowed by applicable laws, your decision to deny a permission does not affect or invalidate our previous handling of information based on your prior consent.
You can revoke these permissions at any time through your device’s system settings. Please note that revoking permissions may limit the functionality of the App.
2.3 Subscription and Purchase Information
All transaction, billing, and subscription data are processed securely via Apple’s App Store system. We do not collect, view, or store your credit card or financial details.
3. Google User Data
StormClean’s Email Cleaner feature uses Google Sign-In to request your authorization to access certain data in your Gmail account, in order to provide email cleaning-related functionality.
3.1 Gmail Data We Access
Read-Only Access (gmail.readonly): We retrieve metadata including sender information, subject, date received, labels, message size, and List-Unsubscribe information. This is used solely to help you identify subscription emails, old messages, large messages, and unwanted messages.
Modify Access (gmail.modify): Only after you explicitly select messages and confirm an action, the App may apply the TRASH label or remove the INBOX/UNREAD labels to move messages to Gmail Trash.
3.2 What We Do NOT Do with Gmail Data
- We do not permanently delete your messages outside of Gmail’s Trash system.
- We do not sell, rent, or share your Gmail data.
- We do not use your Gmail data for advertising purposes or building ad profiles.
- We do not take any action on your emails without your explicit confirmation.
3.3 Google API Compliance & Data Retention
StormClean’s use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. We do not store any Gmail data on our servers. All Gmail data is processed locally on your device in real time. You can revoke access at any time by uninstalling the App or via your Google Account Permissions, which will instantly clear any locally cached data.
4. How and Why We Use This Information
4.1 Personal Information
We may process certain technical data (such as IP address, device identifiers, and usage analytics) that may constitute personal information under certain laws (e.g., GDPR). We process this data on the following legal bases:
- Contractual Necessity: To provide the features and services you request from the App.
- Legitimate Interests: To improve our services, analyze usage patterns, and ensure app stability and security.
- Consent: Where you have explicitly consented to specific processing activities (e.g., promotional communications).
4.2 Non-Personal Information
We may use Non-Personal Information (aggregated or anonymized data) to:
- Personalize user experience: Understand demographics, customer interests, and usage trends.
- Develop our service: Maintain, improve, and modify the App, and develop new features.
- Business development: Support promotional and marketing purposes.
5. Third-Party Service Providers (SDKs)
To optimize app performance, analyze user behavior, measure marketing campaigns, and provide essential services, we integrate trusted third-party Software Development Kits (SDKs). These third parties may collect, store, and process anonymous technical data independently in accordance with their own privacy policies. They have no access to your personal photos, videos, or email content.
5.1 Firebase (Google LLC)
- Purpose: Used for crash reporting (Crashlytics), app performance monitoring, and product analytics.
- Data Collected: Device identifiers (e.g., IDFV), installation UUIDs, crash logs, device models, OS details, and usage statistics.
- Privacy Policy: https://firebase.google.com/support/privacy/
5.2 AppsFlyer (AppsFlyer Ltd.)
- Purpose: Used for mobile attribution and marketing analytics to measure campaign effectiveness.
- Data Collected: IP address, device identifiers (such as IDFA), device type, operating system, carrier, and download sources.
- Privacy Policy: https://www.appsflyer.com/legal/services-privacy-policy/
5.3 Facebook SDK / Meta Ads (Meta Platforms, Inc.)
- Purpose: Used for ad attribution and marketing performance optimization.
- Data Collected: Device identifiers (such as IDFA), IP address, app installation status, launch events, and custom in-app events.
- Privacy Policy: https://www.facebook.com/privacy/policy/
5.4 Note on iOS Tracking
We strictly adhere to Apple’s App Tracking Transparency (ATT) framework. The collection and sharing of your IDFA for tracking and attribution purposes by AppsFlyer and Facebook will only occur if you explicitly grant permission via the iOS tracking prompt.
6. Data Security
We implement strict industry-standard technical and organizational measures to ensure the security of your data. All core photo scanning and evaluation features are designed based on On-Device Processing (local execution). Your media files are never uploaded or stored on any external cloud servers, eliminating cloud transmission risks.
We regularly review our security practices and update our measures to protect against unauthorized access, alteration, disclosure, or destruction of your data.
7. Data Retention
We retain your data only for as long as necessary to provide the services you have requested, or as required by applicable law. Specifically:
- Device data (photos, videos, contacts): Stored only on your device. We do not retain copies on our servers.
- Gmail data: Processed in real time on your device. No data is stored on our servers.
- Technical/analytics data: Retained for up to 26 months in aggregated, anonymized form for performance analysis purposes.
- Subscription data: Retained for the duration of your subscription plus any legally required retention period.
You may request deletion of any non-essential data we hold by contacting us at the email provided in Section 9.
8. Your Rights (GDPR / CCPA / Other Privacy Laws)
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data, subject to legal obligations.
- Right to Data Portability: Request transfer of your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
- Right to Restrict Processing: Request restriction of processing of your personal data.
- CCPA/CPRA Right: California residents have the right to know what personal information is collected, used, shared, or sold. We do not sell your personal information. To exercise your CCPA/CPRA rights, please contact us at the email provided in Section 9.
To exercise any of these rights, please contact us at the email provided in Section 9. We will respond within 30 days.
9. International Data Transfers
The App is operated from the United States. If you are accessing the App from the European Economic Area (EEA), United Kingdom, or other regions with data protection laws that require a legal basis for international data transfers, please note that your information may be transferred to, stored, and processed in the United States or other jurisdictions where our service providers operate. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
10. Children’s Privacy
Our App is not intended for children under the age of 13. We do not knowingly collect personal data from children. If we learn that we have inadvertently gathered personal data from a child, we will promptly erase such information upon notice.
11. Changes to This Privacy Policy
We may update our Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Any modifications will be effective immediately upon posting the updated policy on this page, with a revised “Last Updated” date. We encourage you to review this Privacy Policy periodically.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us via email:
Email: [email protected]