Privacy Policy – CleanPro

Last updated: November 25, 2025

This Privacy Policy describes how AAAI Studio (“we”, “us”, or “our”) collects and uses information when you use the CleanPro – Storage Clean Up mobile application (the “App”) and our related website at getcleanpro.app (together, the “Services”).

We are an independent developer team based in Hanoi, Vietnam, and we are committed to protecting your privacy and complying with applicable data protection laws, including the EU/UK General Data Protection Regulation (“GDPR”) and the California Online Privacy Protection Act (“CalOPPA”), where they apply to our processing of personal data.

1. Data controller

For the purposes of the GDPR and other applicable data protection laws, the data controller is:

AAAI Studio
Independent developer team
Hanoi, Vietnam
Email: support@aaai.studio

2. What information we collect

CleanPro is designed to minimise the data we collect. We do not upload your photo or video library to our own servers, and we do not show advertising inside the App. However, certain third-party SDKs integrated into the App may collect information needed for analytics, subscription management and advertising campaign measurement.

2.1 Information processed on your device

To provide storage clean-up suggestions, the App analyses media stored on your device, such as:

• Photos and videos in your device’s photo library;
• File-related metadata (e.g., file size, creation date, resolution).

This analysis happens on your device only. We do not receive copies of your photos or videos, and they are not uploaded to our own servers as part of the core cleaning functionality.

2.2 Analytics and usage data (via third-party SDKs)

We use third-party services to understand how the App is used and to measure the performance of our marketing campaigns:

• Firebase Analytics (Google Analytics for Firebase) – collects app usage information, such as events triggered in the App, device information (e.g., device model, OS version), coarse location information (e.g., country), app instance identifiers, and may collect advertising identifiers (e.g., IDFA) where available, for analytics and attribution purposes.
• AppsFlyer – attribution and marketing analytics. The AppsFlyer SDK may collect device identifiers (such as IDFA/IDFV), IP address, and installation/engagement events in order to attribute installs and in-app events to advertising campaigns and measure their performance.
• Facebook SDK (Meta) – used to send app events (such as installs or subscription conversions) to Meta in order to measure and optimise advertising campaigns on Meta platforms. The SDK may collect device identifiers and event information associated with your use of the App.
• RevenueCat – subscription management. RevenueCat processes purchase receipts, subscription status (e.g., active, trial, cancelled), and basic device/app information in order to validate and manage in-app purchases and subscriptions.

These services act either as our processors or independent controllers under data protection law. Their processing is subject to their own privacy policies. You can learn more about their practices by visiting:

• Firebase / Google: https://policies.google.com/privacy
• RevenueCat: https://www.revenuecat.com/privacy/
• Meta (Facebook): https://www.facebook.com/about/privacy
• AppsFlyer: https://www.appsflyer.com/legal/privacy-policy/

2.3 Support communications

If you contact us by email or other channels, we will process the information you choose to provide, which may include:

• Your name (if provided) and email address;
• The content of your message and any attachments;
• Technical information you voluntarily send us (such as logs or screenshots).

We use this information only to respond to your request and improve our support service.

2.4 No advertising display and no additional tracking

We do not:

• Display third-party ads inside the App; or
• Sell your personal data to third parties.

Third-party SDKs may still be used to measure the effectiveness of our external advertising campaigns (for example, to know whether an ad click led to an app install or subscription).

2.5 Children’s data

Our Services are not directed to children under the age of 13, and we do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe that a child under 13 has provided us with personal data, please contact us and we will take appropriate steps to delete such information.

3. Legal bases for processing (GDPR)

Where the GDPR applies, we process personal data on the following legal bases:

• Contract (Art. 6(1)(b) GDPR) – to provide and maintain the App and its core functionality, including subscription management and access control.
• Legitimate interests (Art. 6(1)(f) GDPR) – to maintain and improve the App, prevent fraud and misuse, and protect our legal rights. Where we rely on legitimate interests, we balance our interests against your rights and freedoms.
• Consent (Art. 6(1)(a) GDPR) – where required by law, for example for certain analytics or advertising purposes that rely on device identifiers (such as IDFA). In such cases, we (or the underlying platforms) will seek your consent before enabling these features, and you can withdraw your consent at any time via your device settings or within the App if we provide such controls.
• Compliance with a legal obligation (Art. 6(1)(c) GDPR) – where we are required to process data by law (for example, accounting or tax regulations).

4. How we use the information

We use the information described above to:

• Provide the App’s core features (detecting duplicates, similar photos, screenshots and large videos on your device);
• Process and validate in-app purchases and subscriptions via Apple and RevenueCat;
• Monitor App performance, stability and usage in order to improve the App and fix bugs;
• Measure the performance of our marketing campaigns and understand how users discover the App (e.g., AppsFlyer, Facebook SDK, Firebase);
• Respond to your support requests and communicate with you;
• Comply with legal and regulatory requirements.

5. Data retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including to comply with legal, accounting or reporting requirements.

• On-device media analysis data stays on your device and is subject to your device’s own storage and deletion settings.
• Analytics and attribution data are retained by our third-party partners in accordance with their retention policies.
• Support communications are typically retained for as long as needed to manage your request and for a reasonable period thereafter.

6. Sharing of information

We do not sell your personal data. We may share limited information with:

• Service providers and partners – including Firebase, RevenueCat, Facebook/Meta, AppsFlyer and other providers that help us deliver analytics, subscription management, hosting or support services.
• Authorities and legal counsel – if required to comply with a legal obligation, protect our rights, or respond to lawful requests from public authorities.
• Business transfers – if we are involved in a merger, acquisition or sale of assets, your information may be transferred as part of that transaction, where permitted by law.

7. International transfers

Our third-party service providers may process your personal data in countries outside of your country of residence (including outside the European Economic Area and the United Kingdom). Where required by law, we will ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or other equivalent mechanisms.

8. Your rights under GDPR (EEA/UK residents)

If you are located in the European Economic Area or the United Kingdom, you have certain rights regarding your personal data, subject to exceptions and limitations under applicable law:

• Right of access – to obtain confirmation of whether we process your personal data and a copy of that data;
• Right to rectification – to have inaccurate or incomplete data corrected;
• Right to erasure – to request deletion of your personal data in certain circumstances;
• Right to restriction of processing – to request that we restrict the processing of your data in certain cases;
• Right to data portability – to receive your personal data in a structured, commonly used and machine-readable format, and to transmit it to another controller where technically feasible;
• Right to object – to object to processing based on our legitimate interests or for direct marketing;
• Right to withdraw consent – where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing before the withdrawal.

To exercise any of these rights, please contact us at support@aaai.studio. We may need to verify your identity before fulfilling your request.

You also have the right to lodge a complaint with a data protection authority, in particular in the country where you live, work, or where you believe a violation has occurred. If you are in the EEA or UK, you can find contact details for your local authority on the website of the European Data Protection Board or the UK Information Commissioner’s Office.

9. California privacy rights & CalOPPA

If you are a resident of California, the California Online Privacy Protection Act (“CalOPPA”) requires us to provide additional information about how we collect and use your “personally identifiable information” (“PII”).

9.1 Categories of information we collect

As described above, we may collect the following categories of PII, either directly or through our third-party service providers:

• Contact information (such as your email address) when you contact support;
• Device identifiers (such as device ID, advertising identifiers like IDFA, AppsFlyer ID, and similar identifiers) via analytics and attribution SDKs;
• Usage and event data relating to your interactions with the App.

9.2 “Do Not Track” signals

Some browsers transmit “Do Not Track” (“DNT”) signals. Because there is no universally accepted standard for DNT signals, we currently do not respond to DNT signals from browsers. On mobile devices, you can control certain tracking and advertising settings (for example, limiting ad tracking or resetting the advertising identifier) through your device’s privacy settings.

9.3 Reviewing and requesting changes to your information

You may request access to, or deletion of, personal information that we hold about you by contacting us at support@aaai.studio. We will respond to your request within a reasonable time and in accordance with applicable law.

10. Security

We take reasonable technical and organisational measures to protect the information we process from unauthorised access, loss, misuse or alteration. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Third-party links

The App or our website may contain links to other websites, apps or services that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We are not responsible for the content or privacy practices of such third parties and encourage you to review their privacy policies.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. In some cases, we may also provide additional notice (for example, in-app or on our website).

Your continued use of the App after any changes become effective constitutes your acceptance of the updated Privacy Policy.

13. Contact us

If you have any questions, comments or requests relating to this Privacy Policy or our data practices, please contact us:

AAAI Studio
Independent developer team
Hanoi, Vietnam
Email: support@aaai.studio
Website: https://getcleanpro.app