Privacy Policy

Last updated 24 August 2026

Sweepr does not collect your photos, your videos or anything derived from them. There is no server to send them to. This page explains, in plain language, exactly what does and does not happen.

The short version

• Your photos and videos never leave your device. Not the files, not thumbnails, not filenames, not metadata.
• There is no Sweepr account. Nothing to register, nothing to sign in to.
• There is no analytics SDK, no crash reporter reading your library and no advertising identifier. Sweepr does not ask for tracking permission and does not track you across apps or websites. Its privacy manifest declares no collected data types and no tracking domains.
• Compression is computed on your iPhone or iPad. Reviewing, deleting and compressing anything already on the device works with no network at all.
• Two third parties are involved, and only in purchases: Apple, and RevenueCat. Neither of them receives a photo.

What Sweepr stores, and where

Everything Sweepr remembers is kept on your device, in the app's own storage:

• Which photos you have already reviewed, so the app can pick up where you stopped.
• Your settings: sort order, compression format and quality, size threshold, video quality and frame rate, haptics, the Wi-Fi only switch.
• Your statistics: space freed, photos reviewed, photos compressed, and the streak of consecutive days.

None of this is transmitted anywhere. Deleting the app deletes all of it.

Photo library access

Sweepr asks iOS for access to your photo library because it cannot show you your photos otherwise. It asks for full access rather than limited access for one reason: with limited access iOS silently refuses every deletion, so the app's main function stops working with no error message. Access is used only to display, compress and delete the items you choose. Every deletion is confirmed by a system dialog that iOS presents, not by Sweepr.

iCloud photos

If a photo lives in iCloud rather than on the device, Sweepr asks iOS to fetch it, exactly as the Photos app does. That request travels between your device and Apple, under your own iCloud account and Apple's privacy policy. Sweepr is not a party to it and never sees your Apple Account credentials. The Wi-Fi only setting in Sweepr stops those downloads from happening over cellular.

Purchases

Payment is handled entirely by Apple. Sweepr never sees your card, your billing address or your Apple Account.

To know whether your subscription is active, Sweepr uses RevenueCat, a purchase infrastructure provider. RevenueCat receives a randomly generated anonymous identifier created on your device, the App Store receipt for this app, and basic technical facts such as the app version, the operating system version, the device model and the country of your App Store storefront. Like any server, it also sees the IP address your request comes from, which it uses to work out the country and to stop abuse, and which it does not use to build a profile of you. It also receives Apple's AdServices attribution token, which is what allows a purchase to be credited to an Apple Search Ads campaign if the install came from one. That token is issued by Apple, is not the advertising identifier, and does not follow you between apps.

RevenueCat does not receive your name, your email address, your Apple Account or anything at all from your photo library. The identifier is not linked to your identity. RevenueCat processes this data on Sweepr's behalf under its own privacy policy.

What Sweepr never does

• No advertising inside the app, no advertising identifier, no ad networks and no App Tracking Transparency prompt, because there is nothing to ask for.
• No sale or sharing of personal information, under any definition, to anyone.
• No profiling, no automated decision making, no cross-app or cross-site tracking.
• No email list. Writing to support does not subscribe you to anything.

Children

Sweepr is not directed at children under 13 and knowingly collects nothing from anyone, of any age.

Why we are allowed to process the little there is

Under the GDPR the controller is Davyd Hruts, contactable at the address below. There is one processing purpose and one legal basis:

• Knowing whether your subscription is active. Legal basis: performance of a contract, Article 6(1)(b). Without it the app cannot tell whether you have paid.
• Crediting an Apple Search Ads campaign with an install, where there was one. Legal basis: legitimate interests, Article 6(1)(f), namely knowing which advertising works. You can object to this at any time using the address below.

No special category data is processed, there is no automated decision making and there is no profiling.

Where it goes and how long it stays

RevenueCat, Inc. is based in the United States and processes this data there on Sweepr's behalf, under its own Data Processing Addendum and the European Commission's Standard Contractual Clauses. Apple processes your payment under its own privacy policy and its own transfer safeguards.

The purchase record is kept for as long as the purchase can still be restored, which for a Lifetime purchase is indefinitely, because that is the point of it. Transaction records that tax law requires Apple and the developer to retain are kept for the period that law sets. Nothing on your device is retained anywhere else at all, and deleting the app deletes all of it.

Your rights

Under the GDPR, the UK GDPR, the CCPA and comparable laws you have the rights of access, rectification, erasure, restriction of processing, portability and objection, and the right to withdraw consent where processing rests on it.

Almost everything Sweepr knows is already on your device and already yours: open the app and look at it, or delete the app and it is gone. For the anonymous purchase record held by RevenueCat, write to the address below with the approximate date and the storefront of your purchase, and it will be provided, corrected, restricted or deleted, subject only to the transaction records Apple and tax law require to be kept. There is no charge and no account to prove.

You also have the right to complain to a data protection supervisory authority. In the European Union that is the authority of the country you live in; in the United Kingdom it is the Information Commissioner's Office. Please write to the address below first if you can, since a solo developer can usually fix the thing faster than a regulator can ask about it.

Changes

If this policy changes, the date at the top of this page changes with it and the previous version is replaced. Material changes will also be described in the App Store release notes.

Contact

Davyd Hruts, sole developer.
Email: hruts.david@gmail.com

This document describes Sweepr version 1.2.0 and later. It is written to be accurate rather than to be a template, but it is not legal advice.