Cleanloft is published by Belle Etoile Labs LLC, 30 N Gould St, STE R, Sheridan, WY 82801, United States. We are responsible for the processing described here. For any question or request concerning your data: contact@belle-etoile.dev.
This policy covers the Cleanloft iPhone app, its widgets and this website.
1. Your photos, videos, contacts and calendars
Cleanloft analyzes your media, contacts and calendar events on your iPhone to identify duplicates, similar or blurry photos, screenshots, large videos, contacts to merge and events to clean up. Compression also takes place on the device. We do not receive the contents of your photo library, address book or calendars on our servers, nor do we send them to RevenueCat or a remote AI service. The only information derived from your photos that leaves the iPhone is the rounded coordinate sent to Apple by the Places feature, described in section 4.
Analysis results, your sorting choices, settings, place names already obtained, and contact and calendar backups are stored in the app’s storage on the iPhone. A backup of the contacts concerned is created before each merge or edit. If you use the manual address book export, Cleanloft creates a .vcf file and opens it in the iOS share sheet: you choose where it goes, and that destination is governed by its own policy.
Your Apple services remain separate from Cleanloft. If you use iCloud Photos, iOS may download an original to view or compress it. Changes to your photo library, contacts or calendars may be synchronized through iCloud or your other accounts, depending on your settings. Some local data may also be included in your system backups, except for the vault described below.
2. Permissions and private vault
Cleanloft requests the relevant permissions when you use the corresponding features:
- Photos: analyze, sort, save compressed files and delete items you confirm. Limited access restricts the available items.
- Contacts: find duplicates, back up, merge or edit records according to your actions.
- Calendars (full access): read your calendars and events, delete the events you confirm and restore them from a backup (section 3).
- Notifications: send you reminders scheduled on the iPhone (section 5).
- Camera and microphone: capture photos or videos in the vault, with sound if you allow it.
- Face ID: unlock the vault if you enable this option. Authentication is handled by iOS; Cleanloft does not access your biometric data.
Cleanloft does not request access to your location and does not use your iPhone’s current location. You can change or revoke these permissions in iOS Settings → Apps → Cleanloft, or under Privacy & Security. Revoking permission prevents the corresponding future access; it does not automatically erase previously imported copies or local backups.
Photos, videos and contacts imported into the vault are encrypted on the device. The key is kept in this iPhone’s keychain. The vault is excluded from backups, including iCloud, and we keep no copy of it. Export or restore your items before deleting the app or changing iPhones. We cannot recover the contents of a lost vault. Importing an item does not guarantee that its other copies are deleted: check the originals and recently deleted albums.
3. Calendar cleanup
With your permission for full calendar access, Cleanloft reads on the iPhone, through Apple’s EventKit framework, the calendars and events in the Calendar app, including those of your synced accounts. It identifies duplicate events, old past events, untitled events and subscribed calendars. Events with invitees, birthdays, holidays and read-only calendars are never offered. Nothing is deleted without your confirmation.
Before each deletion, Cleanloft saves a backup of the events concerned (title, dates, time zone, location, notes, link, alerts, recurrence and calendar name) in a protected file in the app’s storage on the iPhone. If this backup cannot be written and read back, nothing is deleted. You can undo right away or restore the events from the history for 30 days; older backups are erased automatically. These backups are never sent to our servers or to third parties; they may, however, be included in your system backups.
Deletions are then synchronized by the account that hosts the calendar. To revoke access, open iOS Settings → Apps → Cleanloft → Calendars, or Privacy & Security → Calendars.
4. Places and Apple’s map services
The Places feature groups your photos and videos by trip using the location coordinates stored in their metadata. Grouping and a first name are computed on the iPhone using a list of cities built into the app. To show a more precise name and the map, Cleanloft uses Apple’s map services (MapKit and reverse geocoding), which requires a connection to Apple:
- Place name: a single coordinate per place is sent to Apple, rounded to one hundredth of a degree (about 1 km). It is the center of the nearest city in the built-in list or, far from any city, the approximate center of that place’s photos, together with the preferred display language. Cleanloft attaches no photo, no date, and no media or device identifier. The name obtained is kept in the app on the iPhone and is not requested again.
- Map: MapKit downloads from Apple the map tiles for the area displayed.
These requests are made when you open the section of the app that shows Places, for places that do not yet have a saved name. They go directly from your iPhone to Apple: we do not receive them. Apple processes them under its privacy policy. Without a connection, the name from the built-in list is kept. Photos without location data are not associated with any place.
5. Local notifications and widgets
If you allow notifications, Cleanloft schedules local reminders, computed and scheduled on the iPhone:
- Trial reminder: the day before a free trial ends, 24 hours before the first charge. It is removed as soon as the trial ends or is canceled.
- Cleanup reminders: 1, 3 and 7 days after you last opened the app, then once a week, in the early evening. They quote the numbers from your latest analysis on this iPhone (storage used, similar photos and duplicates, videos, screenshots, duplicate contacts). To keep them up to date, iOS may briefly launch the app in the background so that it rereads these numbers on the device.
No push notification server is used and the content of the reminders is not sent to anyone. You can turn off cleanup reminders with the Cleanup reminders option in the app’s settings, and all notifications or background refresh in iOS Settings → Apps → Cleanloft.
The Home Screen widgets show the iPhone’s storage space and battery status, read directly by the widget on the device. They do not access your photos, contacts or calendars and send no data.
6. Purchases and data sent to RevenueCat
You do not need to create a Cleanloft account. Purchases are processed by Apple. We use RevenueCat, Inc. to validate purchases, verify your Pro entitlements and restore your purchases.
The SDK transmits, among other things:
- a random customer identifier created by RevenueCat on the iPhone, which is not linked to your name, email address or Apple Account, and the device’s identifier for vendor (IDFV), which the SDK attaches to its requests;
- purchase history: products, transactions, dates, status, price, currency and storefront;
- technical information needed for the connection, including app, SDK and iOS versions, and the IP address;
- an event indicating that the subscription screen was displayed, with the identifier of the offer shown, so that RevenueCat can match a purchase to the offer displayed.
We use this data only to operate purchases and the subscription in the app. We do not associate it with your identity and do not use it for advertising or tracking. The app turns off the SDK’s automatic collection of attribution identifiers and its diagnostics. We do not receive your payment card details. The app does not include advertising, audience analytics or attribution SDKs, does not use the IDFA advertising identifier and does not track you across other companies’ apps and websites. We do not sell your data.
RevenueCat processes data on our behalf under its data processing agreement, which governs confidentiality, security, subprocessors and deletion. Our providers must ensure protection consistent with the commitments in this policy and applicable obligations. Also see RevenueCat’s information and Apple’s policy.
7. Support and website use
If you write to us, we receive your email address, message and any attachments you choose to send. We use them to respond and resolve the issue. Do not send your vault passcode, Apple password or private files that are unnecessary for diagnosis.
The website has no advertising trackers or built-in audience analytics tools. When you visit, the servers delivering the site receive information needed for the connection, such as your IP address, the requested page and browser information. This is used to provide and secure the website. A link to Apple or another service takes you to a site governed by its own policy.
8. Purposes, legal bases and transfers
Where the GDPR applies, processing necessary to provide requested features, including Places, purchases and support is based on performance of the contract. Security and the prevention of fraud and abuse are based on our legitimate interests, subject to your rights. Notifications are based on your consent, given through the iOS permission; you can withdraw it at any time. Certain information may be retained to meet a legal obligation.
Our company, RevenueCat and Apple are in the United States. For applicable transfers from the European Economic Area or the United Kingdom, RevenueCat’s DPA provides for standard contractual clauses and applicable safeguards. You can ask us for information about these safeguards. Places map requests are processed by Apple as the provider of that service. We disclose data only to providers needed for the service or where required by law.
9. Retention and deletion
- Local data: it remains available for as long as you keep it in the app. Calendar backups are erased automatically after 30 days; contact backups and place names remain in the app until it is deleted. Deleting the app erases its local storage, but not media in Photos, contacts and calendars in your accounts or existing system backups. Keychain items may be managed separately by iOS.
- Vault: delete items within the vault or export them before uninstalling Cleanloft. Restoration from our servers is not possible.
- Purchases and subscriptions: data needed to manage entitlements, restore purchases, handle disputes and meet legal obligations is retained for as long as necessary for these purposes. We can ask RevenueCat to erase data that is no longer needed. Apple retains its own records under its rules.
- Support and website technical data: retained for the time needed to handle the request, maintain security and, if necessary, resolve a dispute or comply with a legal obligation.
To request deletion of data held on our behalf, write to contact@belle-etoile.dev. We may ask for a purchase reference or a useful identifier to locate the correct record, without asking for your Apple login credentials. Deleting the app or requesting data erasure does not cancel a subscription. Manage it in your Apple account settings.
10. Your rights
Depending on your country, you may request access, rectification, erasure or portability of your data, restriction of processing, or object to processing based on our legitimate interests. You may withdraw consent without affecting earlier processing. Contact us at the address above; we respond within applicable legal deadlines, generally within one month for a request under the GDPR.
You can lodge a complaint with your country’s data protection authority, including the CNIL in France.
11. Security, children and updates
We limit the data processed to what is necessary for the service and use iOS protections, protected files for local backups, vault encryption and secure connections for purchases. No system can guarantee absolute security.
Cleanloft is not intended for children under 13. If you believe a child has provided us with personal data, contact us so that we can consider its deletion.
This page will be updated if our practices change. Significant changes will be communicated appropriately; consent will be requested where required by law.