What CleanMe touches, and where it goes.

Everything CleanMe does with your photo library, address book and the folders you pick happens on the device. Thumbnails, perceptual descriptors, blur scores, file hashes and size measurements are computed locally and kept in memory for the session; nothing is uploaded, and there is no CleanMe server to upload to.

Deletions go through iOS’s own confirmation sheet and land in Recently Deleted, where iOS keeps them for 30 days. Contact merges and file deletions happen through the system frameworks and are equally yours to undo where iOS allows it.

If you connect a Gmail account, CleanMe signs you in with Google’s own OAuth flow and asks for the gmail.modify scope. With it, the app reads message envelopes — sender, subject, date, size, labels, the List-Unsubscribe headers and Gmail’s one-line preview snippet — directly from Google’s API to your phone. It does not download message bodies or attachments.

Two things write back: moving messages you chose to Gmail’s Trash, and, if you press Unsubscribe on a sender, either one unsubscribe request to that sender’s advertised endpoint or one unsubscribe email sent from your own account. Nothing is sent without a tap from you.

Your Google sign-in tokens are stored in the iPhone Keychain and nowhere else. Disconnecting the mailbox revokes CleanMe’s access at Google and deletes the tokens from the device.

CleanMe’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Mail data is used only to show you the clean-up categories and act on your selections; it is never sold, used for advertising, or transferred to anyone but Google.

An Outlook.com, Hotmail or Microsoft 365 mailbox connects through Microsoft’s own sign-in with the Mail.ReadWrite, Mail.Send, User.Read and offline_access permissions. CleanMe reads message envelopes and attachment sizes from Microsoft Graph, moves what you choose to Deleted Items, and sends a mailto unsubscribe only when you press the button. It does not download message bodies or attachments.

Tokens are stored in the iPhone Keychain. Microsoft offers no way for an app like this to revoke its own access, so disconnecting deletes the token from the phone; to remove the grant itself, open account.microsoft.com → Privacy → App access.

Lifetime and Pro are bought through Apple. CleanMe receives a receipt from StoreKit that says which plan is active and nothing about you. There is no CleanMe account, and no purchase data leaves Apple’s systems.

With Pro’s weekly report turned on, CleanMe counts screenshots and large videos in the background once a week and shows one local notification. The count is computed on the device; no push service is involved.

The Home and Lock Screen widgets read a small summary of the last scan — reclaimable bytes, storage used, and the top categories — from a container shared between the app and the widget on your phone.

The waitlist stores the email address you type and the time you submitted it, so we can send one email when the app ships. It is not shared, sold, or used for anything else, and it is deleted on request — reply to the mail or write to the address below.

The site sets no analytics cookies and loads no third-party scripts.

To be explicit, because most cleaners do the opposite:

Questions about any of this: privacy@cleanme.app. Changes to this policy are dated at the top of the page.