Privacy Policy

Last updated: October 12, 2026

Introduction

Welcome to Phone Diet ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience when using our application. This Privacy Policy explains how we collect, use, and safeguard your information.

Information We Collect

We collect the following types of information:

• Photo Library Access: We access your photo library solely to identify duplicate photos, similar images, blurry photos, dark photos, screenshots, old screenshots, screen recordings, Live Photos, and burst photos for cleanup purposes. Your photos are processed entirely on your device and are never uploaded to our servers.
• Private Vault: When you use the Private vault, photos and videos are encrypted and stored only on your device, protected by your PIN and/or Face ID / Touch ID. Private vault data is never uploaded to us or to any cloud service.
• On-Device AI Processing: We use machine learning models running entirely on your device to detect blurry images and analyze photo quality. No image data is ever sent to external servers for processing.
• Contacts Access (Contact Cleaner): When you open the Contact Cleaner, we read your contacts solely to find duplicate, incomplete, or empty entries and to help you merge or delete them. Contact analysis runs entirely on your device and your contacts are never uploaded to our servers. When you merge or delete contacts, the app keeps a local Recently Deleted snapshot of the affected entries on your device so you can restore them; these snapshots are automatically purged after 30 days and are never uploaded.
• Calendar Access (Calendar Cleaner): When you open the Calendar Cleaner, we read your calendar events solely to identify old, duplicate, or cancelled events you may want to remove. This runs entirely on your device and your events are never uploaded to our servers. Deleted events are kept in a local Recently Deleted snapshot on your device so you can restore them; these snapshots are automatically purged after 30 days and are never uploaded.
• Microphone Access (Speaker Cleaner's Sound Meter): The Speaker Cleaner includes an optional Sound Meter that uses your microphone to show a live decibel reading, so you can confirm your speaker is loud and clear after cleaning. Audio is analyzed live on your device and is never recorded, saved, or uploaded. The microphone is active only while the Sound Meter is running.
• Crash Reports (Firebase Crashlytics): We collect anonymous crash and diagnostic reports — such as device model, OS version, app version, and the stack trace at the time of a crash — solely to find and fix bugs. This is the only third-party data collection in the app.
• No product analytics, no ad tracking: We do not run behavioral/product analytics, we do not use advertising-attribution SDKs, and we do not collect your advertising identifier (IDFA) or track you across other apps or websites. We do not send any statistics derived from your photo library off your device.

Email Cleaner — Any Provider

The Email Cleaner connects directly to your email provider. We do not operate any backend service that touches your mail. The provider list (Gmail, iCloud Mail, Outlook, Hotmail, Live, Yahoo, AOL, and any IMAP host) is handled as follows:

• Gmail — Google OAuth: Sign-in goes through Google's official OAuth flow. We never see your password. Once authorized, the app queries Gmail's official API directly from your iPhone to read email metadata (sender, subject, date, size, list-unsubscribe headers) and to perform the deletes, restores and unsubscribes you explicitly initiate. The app reads only these headers — never the body of your messages. Message content is never sent to us or to anyone else, never used for advertising, and never used to train AI models.
• Gmail — app password (optional): You can instead connect Gmail over IMAP with an app password you create in your Google Account. It is stored only in the iOS Keychain and used only to talk to imap.gmail.com from your iPhone.
• iCloud Mail, Yahoo Mail, AOL Mail — App-Specific Passwords: These providers block IMAP sign-in with your real account password. The app walks you through generating a 16-character app-specific password at your provider's security page. That credential is stored only in the iOS Keychain on your iPhone and is revocable from your provider at any time. Your real account password is never used by the app and is never seen by us.
• Outlook, Hotmail, Live — Microsoft Password or App Password: If 2-step verification is enabled (recommended), the app walks you through generating an app password at account.microsoft.com. Stored in the iOS Keychain on your iPhone.
• Other IMAP servers (Fastmail, ProtonMail Bridge, Zoho, custom domains): You enter your IMAP host, port, email, and password. The credential lives only in the iOS Keychain on your iPhone.
• On-device categorization: All email analysis, sender grouping, subscription detection, and unsubscribe execution happens on your iPhone. We do not run any server that touches your mail.
• No retention of content: Message bodies are not retained off-device. Metadata used for categorization (sender, subject, headers, size, read state) is cached locally only and removed when you disconnect the account or delete the app.
• Auto Clean retention rules: If you set per-category Auto Clean rules (for example, "delete Promotions older than 30 days"), the rules themselves are stored only on your device. The cleanups they trigger run on your iPhone directly against your provider, exactly like a manual cleanup — no rule, schedule, or result is sent to us.
• User Control: Disconnect any account at any time from the in-app account switcher. App-specific passwords can be revoked at the provider's security page even after disconnection.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Smart Albums (On-Device AI Photo Classification)

The Smart Albums feature uses Apple's Vision framework (the same on-device classifier behind Apple's Visual Look Up and the People & Pets album) to categorize your photos by content (Pets, Food, Travel, Family, Nature, Architecture, Vehicles, Documents). Classification runs entirely on your iPhone's Neural Engine. Photos are not uploaded; the resulting category assignments are cached locally only and cleared when you delete the app.

HEIC Converter

The HEIC → JPEG / PNG converter reads HEIC photos from your photo library, decodes them with Apple's on-device imaging APIs, and writes the converted JPEG or PNG copy back to your photo library. No photo or metadata leaves your iPhone during conversion.

Speaker Cleaner

The Speaker Cleaner plays specially-tuned tones (and synced vibration) through your iPhone's speaker to push out trapped water, and includes a Speaker Test sweep and an optional Sound Meter. The Sound Meter uses your microphone to display a live decibel level only — audio is analyzed live on your device and is never recorded, saved, or uploaded, and the microphone is active only while the meter is running. The Speaker Cleaner does not require an internet connection and sends no data off your iPhone.

Private Vault (Hidden Photos & Videos)

The optional Private vault lets you hide private photos and videos behind a PIN and Face ID. Everything you add is encrypted on your device with AES-GCM and stored only in the app's protected storage — it is never uploaded to us or synced off your iPhone. To help you detect unauthorized access, an optional Intruder Capture feature (toggleable in the vault's settings) uses the front camera to silently take a photo after repeated failed unlock attempts. Any such photo is encrypted, stored only on your device, shown to you in the in-app Intruder Log, and is never uploaded. The camera is used solely for this purpose and only after failed unlock attempts.

Safari Content Blocker

If you turn on the Phone Diet content blocker in Settings → Safari → Extensions, it gives Safari a list of ad and tracker rules to apply. Content blockers cannot see the pages you visit or your browsing history; Safari applies the rules itself, and nothing is sent to us.

No Account Needed

Phone Diet has no accounts and no sign-in of its own. Earlier versions offered an optional Sign in with Apple; if you used it, the anonymous identifier and the name or email it stored on your device are deleted automatically when you update. We never operated an account server and never received this information.

iCloud Sync (Optional)

iCloud Sync is off unless you turn it on in the app (Settings → Account & Premium → iCloud Sync & Data). When it is on, selected settings (appearance, haptics, duplicate matching, video-compression defaults, protected-item rules, Recover retention, and your weekly email goal) and cleanup statistics for each of your devices (device type and model, space freed, number of items cleaned by category, number of emails cleaned, and last cleanup date) are stored in your own iCloud account using Apple's iCloud key-value storage, so your other devices signed in to the same iCloud account can read them. This data is held by Apple in your iCloud account; we do not operate a server for it and cannot access it. No photos, videos, emails, email accounts or passwords, contacts, calendar events, Private vault items, or Recover files are ever synced. You can turn it off at any time (this device's statistics are then removed from iCloud) or remove all synced data from the same screen, and Delete All Data on that screen also clears it.

Device Diagnostics & Speed Test

Phone Diet includes several diagnostic tools that read values your iPhone already exposes to apps, on-device only:

• Device Health Score & Battery Monitor: These read system-reported storage, battery, and device-status values locally to show you a health score and how your storage is used. The Battery Monitor also keeps a history of your charge sessions (when charging started and stopped, and the battery levels involved) so it can show honest per-session statistics; this history is stored only on your device. None of this information is uploaded or shared.
• Speed Test: The network Speed Test measures your connection by transferring test data to and from Cloudflare's public speed-test endpoints. It also loads a small test page from apple.com to check that you are online. Apart from the connections described elsewhere in this policy (your email provider, Google's APIs, crash reports, and the App Store), this is the only feature that connects to the internet. It sends no personal data, no photo-library data, and no identifiers — only the throwaway test payload needed to measure download/upload speed and latency. Results are stored on your device only.
• Widgets: The Home/Lock Screen widget reads storage and battery levels on your device and sends them nowhere.

Background Processing & Notifications

If you turn on Gmail Auto Clean (off by default), iOS may let the app run it in the background about once a week. It works directly against Gmail exactly like a manual cleanup — starred mail is always kept, and no rule, schedule or result is sent to us. Nothing in your photo library is removed in the background. Phone Diet does not send notifications: items close to expiring in Recover are flagged inside the Recover screen instead.

Share Phone Diet

If you share the app with a friend, the app keeps only a count of completed shares on your device. Sharing does not unlock anything, and we do not collect your contacts or your friends' personal information.

Email Newsletter (Website Only)

If you enter your email address in a signup form on cleanupmyphone.com, we collect that address, the date you subscribed, and a label identifying which of our websites you signed up from. This happens only on the website — the app itself does not collect your email address for marketing, and no app feature is gated behind subscribing.

• What we send: Occasional emails about new iPhone storage guides we publish and notable updates to the app. We do not send third-party advertising.
• Who processes it: Our newsletter is operated by Mailchimp (Intuit Inc., United States), which stores the list and sends the emails on our behalf. See the Intuit Privacy Statement.
• Unsubscribing: Every email contains a one-click unsubscribe link. You can also email us and we will remove you.
• How long we keep it: Until you unsubscribe or ask us to delete it.
• Never mixed with app data: This list is not linked to your photos, contacts, calendar, mail accounts, or anything else the app touches. None of that data ever leaves your device, so none of it can reach the mailing list.

How We Use Your Information

We use the collected information to:

• Provide and maintain our photo cleanup services
• Improve and optimize our app's performance
• Provide customer support
• Comply with legal obligations

Data Storage and Security

Your privacy is our priority:

• All photo, video, contact, and calendar analysis is performed locally on your device using Apple's Vision, Core ML, Contacts, and EventKit frameworks.
• We do not upload, store, or have access to your photos, videos, contacts, calendar events, or email content. There is no backend service operated by us that touches any of this content.
• When you delete photos and videos, the app keeps a safety copy in Recover on your device for 30 days by default (you can choose 7, 30, or 60), and iOS also moves the originals to Recently Deleted for its standard retention. Recover copies never leave your device.
• Private vault files are encrypted with AES-GCM using a 256-bit key held in the iOS Keychain, stored only on your device, and protected by Face ID / Touch ID / PIN.
• Email IMAP / app-specific passwords are stored only in the iOS Keychain on your iPhone. They are never transmitted to our servers because we do not operate any servers that handle email.
• We use industry-standard security measures to protect any anonymous device / app diagnostics we do collect.

Third-Party Services

Our app may use third-party services that collect information:

• Apple App Store: For subscription management and processing payments.
• Google APIs: For Gmail integration in the Email Cleaner feature (only when you choose to connect your Google account). Used directly from your iPhone — we do not relay through any of our infrastructure.
• Email providers (Apple iCloud Mail / Microsoft Outlook / Yahoo / AOL / your IMAP host): Connected directly from your iPhone over the provider's standard IMAP-over-TLS endpoint when you choose to connect an account.
• Mailchimp (Intuit): Operates our optional website email newsletter — it stores subscriber email addresses and sends the emails. Used only if you submit a signup form on cleanupmyphone.com; it is not part of the app. See the Intuit Privacy Statement.
• Google Firebase Crashlytics: Receives anonymous crash reports so we can fix bugs; see "Crash Reports" above. No photo, contact, calendar, or email data is included.
• Cloudflare: Used only by the Speed Test feature to measure your connection. No personal data is sent; see "Device Diagnostics & Speed Test" above.

These services have their own privacy policies governing the use of your information.

Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

Children's Privacy

Our app is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: matsdegerstedt@gmail.com