Privacy Policy

As of November 2026. Applies to the app UnlockMyApps: Photo Cleaner (German: UnlockMyApps: Foto Cleaner) and the website tk-apps.eu/PhotoCleaner.

1. Controller

2. Data on your device

The app stores its data only locally on your device and does not create copies of your images:

• Your decisions: internal ID of the photo or video, the decision (for example keep, favorite, delete), capture time, time of review, file size and a fingerprint made from capture time and file name. It is used to recognize photos again after you change phones.
• Analysis for duplicates: a fingerprint calculated from the image, a checksum of the file content, measurements of sharpness and brightness, as well as file name, capture time, dimensions and file size.
• Lock: schedule, target number, the threshold for the lock on new photos if set, lock status and the end of a postponement by video, as well as the chosen apps. On Android these are their package names. On iPhone and iPad, Apple's Screen Time manages the selection with anonymous identifiers and the app does not know the names of the apps.
• Progress and settings: statistics, streaks, badges, reminders, the saved state of a running session, what the widget displays and when you accepted the app's privacy notice.
• Pro: whether Pro is active, so it also works offline, and the random identifier for RevenueCat (see 6.4).

This data is not transferred to us. The only exception is information about purchases, which goes through RevenueCat (see 6.4). If you use system backups of your device (such as Google or iCloud), app data may be part of those backups. That runs through your account with the respective provider and we have no access to it.

3. Permissions

The app only asks for permissions it needs for the respective feature. You can revoke them at any time in your device settings. The respective feature is then no longer available.

On all devices

• Photos and videos: to display, analyze, sort into albums and delete them. You can limit access to selected photos and the app then works only with those. The app does not read location information from photos.
• Notifications: for the advance warning, the start of the lock, reminders and, on Android, the persistent status display. All notifications are created on the device. The app does not use push services.

On Android

• Usage access: so the app can tell when you open a locked app. The app uses this information only at the moment of the check on the device and does not transmit it.
• Display over other apps: for the lock screen on top of locked apps.
• List of installed apps: so you can choose what gets locked. The list does not leave the device.
• Foreground service and start after reboot: so the lock runs reliably while it is switched on.
• Media management (optional): moves photos to the trash without an additional system prompt.

On iPhone and iPad

• Screen Time: allows the app to lock the apps you choose. The app does not see which apps they are or how you use them.

4. Sharing and backups

You only pass on photos, progress images and the backup file if you trigger this yourself through your device's system menu. The app or recipient you choose is then responsible for further processing.

• Progress image: contains only numbers, no photos.
• Backup file for changing phones: contains no photos, but it does contain your decisions, fingerprints made from capture time and file name, capture times, file sizes and statistics. Please keep it safe.

5. Legal bases

• Art. 6(1)(b) GDPR (contract): providing the app and its features, including verifying, unlocking and restoring purchases.
• Art. 6(1)(a) GDPR (consent), for advertising in conjunction with § 165(3) Austrian TKG 2021: personalized advertising and storing or reading information on your device for advertising purposes.
• Art. 6(1)(f) GDPR (legitimate interest): app updates, aggregated evaluation of purchases, secure operation of the website, answering requests and limited ads without consent to fund the app.

You are under no legal or contractual obligation to provide us with data. Without the transfers described in section 6, however, no ads can appear, no purchases can be verified and no updates can be loaded. We do not make automated individual decisions under Art. 22 GDPR.

6. Disclosure to third parties

6.1 Advertising (Google AdMob)

The app is funded by advertising: ads in the app and a voluntary video you can watch to postpone a lock by one hour. With Pro, the ads are gone. Only the voluntary video remains, so with Pro the app only loads advertising while a lock is active. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google processes the resulting data as an independent controller.

Data sent to Google: IP address (from which an approximate location can be derived), technical information about device and app, interactions with the app and ads, performance and diagnostic data, device identifiers (Android: advertising ID and app set ID; iOS: app or vendor identifiers, the advertising ID only with your permission) and your choice in the consent dialog. Your photos and videos, their analysis and your locked apps are not part of this. Google may also process data in the USA; Google LLC is certified under the EU-US Data Privacy Framework. Details: Google's privacy policy and how Google uses data from apps.

Consent (EEA, United Kingdom, Switzerland): Before the first ad we ask for your consent through the Google User Messaging Platform; the dialog lists Google and the other advertising partners. With consent, information may be stored on and read from your device and ads may be personalized. These partners may then also receive data such as identifiers and IP address to deliver and personalize ads and measure their performance. Without consent, limited ads may appear: not personalized and without identifiers for personalization or measurement; the IP address is used for delivery, local storage possibly for fraud detection. You can change your choice at any time in the app under Settings → Privacy and legal → Privacy options and withdraw consent with effect for the future.

USA: In US states with their own privacy laws, you can opt out of the sale and sharing of your data for personalized ads under the same menu item. The menu item only appears in regions for which Google provides consent or an opt-out. Details are in section 12.

Profiling: For personalized ads, Google derives your likely interests from this data. In the EEA, the United Kingdom and Switzerland this only happens with your consent, and in US states it stops once you opt out.

iPhone and iPad: Google receives the advertising ID (IDFA) only if you allow the app, through Apple's system dialog, to track your activity across apps and websites of other companies. You can change this under Settings → Privacy & Security → Tracking.

Android: You can reset your advertising ID in the Android settings and delete it from Android 12 (usually under Privacy → Ads).

6.2 App updates (Expo)

When it starts and, at most once an hour, when you return to it, the app checks through the Expo service (650 Industries, Inc., USA) whether an update is available and downloads it if so. Technical data such as IP address, app version and platform, as well as a random identifier of this app installation, are sent to Expo's servers, including in the USA. Expo is certified under the EU-US Data Privacy Framework and, according to Expo, keeps this information only as long as the service requires. The Expo privacy policy applies.

6.3 App stores

When you download the app from Google Play or the Apple App Store, these providers process data for this under their own responsibility. We receive aggregated statistics and possibly crash reports from them, but nothing that would let us identify you personally.

On Android, the app also asks Google Play whether a new version is available in the Play Store and offers to install it (in-app updates). This runs through the Play Store app on your device and your Google account under Google's responsibility. We receive no data about you in the process.

6.4 Purchases and Pro (RevenueCat)

You buy UnlockMyApps Pro through Google Play or the Apple App Store. The respective store handles purchase and payment under its own responsibility and privacy policy. We do not receive payment details such as card or account numbers.

To verify purchases and unlock Pro, the app uses the RevenueCat service (RevenueCat, Inc., 1032 E Brandon Blvd #3003, Brandon, FL 33511, USA). RevenueCat processes the data on our behalf as a processor under Art. 28 GDPR.

Purpose: having the store confirm a purchase, unlocking Pro, keeping the status of subscriptions up to date (renewal, cancellation, expiry) and restoring purchases on a new device or after reinstalling. RevenueCat also shows us aggregated reports, such as the number of purchases and subscriptions and the revenue.

Data sent to RevenueCat: a random identifier that is created in the app and stored on the device (a new one is created after reinstalling), the store's purchase records (a purchase token for Google, the receipt for Apple), which RevenueCat uses to look up the product, price, term and status of the purchase with the store, as well as technical information such as device type, operating system, language and region settings, currency and time of last use. RevenueCat may use the IP address to determine the country and, according to RevenueCat, does not store it afterwards. The app only syncs the status while it is open, and also when you buy nothing, for example to show the offers.

Not sent to RevenueCat: your name, your email address, payment details, the advertising ID, your photos and videos, their analysis and your locked apps. So RevenueCat learns nothing about your photos. The app does not create an account for you at RevenueCat.

Legal basis: Art. 6(1)(b) GDPR, because without this processing we cannot verify purchases or provide Pro. For the aggregated reports we rely on our legitimate interest in planning the offer economically (Art. 6(1)(f) GDPR).

Transfer to the USA: RevenueCat stores the data with Amazon Web Services in the USA and uses further sub-processors in the USA. The transfer is based on the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR), which are part of RevenueCat's Data Processing Addendum. More in RevenueCat's privacy policy.

Storage period: RevenueCat stores the data for as long as we use the service.

7. This website

The website is hosted on GitHub Pages, a service of GitHub Inc., 88 Colin P Kelly Jr St, San Francisco, CA 94107, USA. When it is accessed, GitHub automatically records server log data such as IP address, date and time, browser and operating system, and the previously visited page. We have no access to this data. The legal basis is our legitimate interest in stable operation (Art. 6(1)(f) GDPR). GitHub is certified under the EU-US Data Privacy Framework. More in GitHub's privacy statement.

The website sets no cookies and uses no analytics or advertising services. Fonts, images and videos are loaded from this website itself. Your browser only remembers for the current session whether you closed the note about the other language version. The photo round you can try runs entirely in your browser and uses only sample images. It does not access your photos.

If you email us, we use your details only to answer your request and keep them only as long as needed for that. Statutory retention obligations remain unaffected.

8. Storage period

Local data stays stored until you uninstall the app or delete its data. Your photos and videos remain in your gallery unless you have deleted them yourself. Deleted photos stay in your system's trash for around 30 days depending on the device, after which the system removes them. Your choice in the consent dialog stays stored until you change it or uninstall the app. How long Google stores advertising data is governed by Google's privacy policy. For update checks at Expo, see 6.2, for purchase data at RevenueCat, 6.4.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection to processing based on legitimate interests (Art. 21) and withdrawal of consent (Art. 7(3)). Apart from the purchase data at RevenueCat, we do not store any data about you, so you can exercise most rights directly in the app and on your device. For purchase data at RevenueCat, please contact us (section 1). For data that Google, Apple or Expo process as independent controllers, please also contact these providers directly.

Right to object under Art. 21 GDPR: You can object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest (Art. 6(1)(f) GDPR).

Withdrawal: You can withdraw consent to advertising at any time with effect for the future in the app under Settings → Privacy and legal → Privacy options. This does not affect the lawfulness of processing before the withdrawal.

10. Right to complain

You can complain to the Austrian Data Protection Authority: Barichgasse 40-42, 1030 Vienna, dsb@dsb.gv.at, www.dsb.gv.at. You can also contact the supervisory authority in the country where you live or work.

11. Data security

Connections to Google, RevenueCat and Expo are encrypted (HTTPS). The app's data is kept in its protected storage area on your device, which other apps cannot access. Since we run no servers of our own, we hold no data from the app. RevenueCat, as a processor, protects the purchase data with technical and organizational measures under Art. 32 GDPR. The backup file for changing phones is not encrypted, so please keep it safe. This website can only be reached over an encrypted connection (HTTPS).

12. Notice for US states

This section supplements the policy for people in US states with their own privacy laws, such as California (CCPA as amended by the CPRA), Colorado, Connecticut, Utah and Virginia, to the extent these laws apply.

What data we collect (including in the past twelve months), where it comes from and who receives it:

• Identifiers: IP address, advertising ID and app set ID (Android) or app and vendor identifiers (iOS), the random identifier for RevenueCat and the installation identifier for Expo. They come from your device and go to Google (ads), RevenueCat (purchases) and Expo (updates).
• Purchase data: the plan purchased, price, term and status. It comes from Google Play or the Apple App Store and goes to RevenueCat.
• Activity in the app: interactions with the app and ads, as well as performance and diagnostic data. It goes to Google.
• Approximate location: derived from the IP address. Google uses it for ads, RevenueCat only determines the country from it.
• Inferences: Google may derive interests from this data for personalized ads.

The purposes are described in section 6: delivering, personalizing and measuring ads, verifying purchases and unlocking Pro, and providing updates. Your photos and videos, their analysis and your locked apps do not leave the device. We do not collect sensitive personal information as defined by these laws, such as precise location.

Sale and sharing: We do not sell data for money. However, Google receiving identifiers, IP address and activity in the app for personalized ads may count under these laws as a “sale”, as “sharing” for advertising based on your activity across different apps and websites, or as targeted advertising. The recipients are Google and its advertising partners. The data sent to RevenueCat and Expo is used only for purchases and updates, not for advertising. The website does not sell or share any data.

Opt-out: You can opt out of this sale, sharing and targeted advertising (“Do Not Sell or Share My Personal Information”) in the app under Settings → Privacy and legal → Privacy options. Google then processes your data only in a restricted way and no longer for personalized ads. The menu item appears in the states for which Google provides such a form. You can also email us about this (section 1). Independently of this, you can delete the advertising ID on Android and decline tracking on iPhone and iPad (see 6.1).

Your rights: Depending on your state, you have the right to know what data we process about you, and the rights of access, to a copy, to correction and to deletion, to opt out of sale, sharing and targeted advertising, and not to be discriminated against for exercising these rights. To do so, send us an email (section 1). Since we do not know who you are, we need details that let us match the data, such as the purchase date and plan. You can also have an authorized agent make the request for you. We may then ask for proof of authorization.

Appeal: If we decline your request in whole or in part, you can appeal by email. We will then review the request again and tell you the result and the reasons. If you disagree, you can contact the Attorney General of your state.

Retention: as described in sections 8 and 6.4. People under 16: We have no actual knowledge that we sell or share data of people under 16.

13. Children

The app is not intended for children under 14.

14. Changes

We update this policy when the app or the law changes. The current version is always on this page.