Privacy Policy

Version 1.0 · Last updated 2026-10-24 · Effective date 2026-10-24

1. Who we are

CleanBeam ("the App", "we", "us") is a photo and video library cleanup app for iPhone, published by Lu Li (the "Developer"). We are the data controller for the limited personal data described in this policy.

Contact: support@gougou.me · Website: https://gougou.me

2. The short version

• Your photos and videos stay on your iPhone. The App analyses them on the device. We do not upload, view, collect or store your photos, videos, thumbnails or the people in them.
• No account. You do not create an account and we do not ask for your name, email or phone number to use the App.
• No ads, no third-party analytics, no cross-app tracking. We do not use the Advertising Identifier (IDFA), we do not request App Tracking Transparency permission, and we do not sell or "share" personal information for behavioural advertising.
• The only data that leaves your device is what Apple and our subscription provider RevenueCat need to sell, validate and restore a purchase.
• You stay in control. "Clear Local Data" in Settings deletes the App's analysis database, skip list, compression jobs and temporary files at any time.

This summary is for convenience only. The rest of this policy explains the details.

3. What we do not collect

4. What the App processes on your device

All of the following is stored only in the App's private container on your iPhone (and, if you back up your device, in your own Apple backup). We cannot read it remotely.

4.1 Photo library metadata

With your permission, the App reads metadata for the items in your photo library: local asset identifier, filename, media type (photo / video / Live Photo / screenshot), pixel dimensions, duration, file size, capture date, modification date, burst identifier, favourite flag, HDR/panorama flags, and, if present in the asset, the embedded latitude/longitude value.

4.2 Derived analysis data (no pixels)

To find duplicates, blurry shots and large files, the App computes and stores:

• a sharpness score and a combined quality score;
• a similarity vector (Vision feature print) and, for some items, a small body-pose signature and a 128-bit layout hash;
• a metadata "analysis signature" (a SHA-256 hash of the asset identifier, modification date, dimensions and algorithm version) used to skip unchanged items on later scans;
• status flags (analysed, skipped, in-app trash, swipe reviewed), skip-list entries and group assignments.

These are derived values, not copies of your images, and they never leave the device.

4.3 Location metadata

The App does not request location permission. If a photo already contains GPS metadata, the App may read that value and store it in its local database. It is never transmitted to us or to any third party, is not used for advertising, and is deleted together with the rest of the local database by "Clear Local Data".

When you compress a photo or video, the App can preserve the original GPS metadata in the output (or strip it, depending on your setting).

4.4 Settings and anti-abuse state

• Preferences (blur sensitivity, similarity mode, keep-location, background scan, tutorials) are stored in iOS UserDefaults.
• The free daily allowance record (bytes cleaned, window start) is stored in the iOS Keychain so that deleting and reinstalling the App does not reset the free allowance. It contains no personal identifiers.
• The App stores no other identifiers.

4.5 Local diagnostics

The App writes technical messages (for example, a failed compression or a scan error) to the iOS system log and to its own log, on your device. They are not automatically sent anywhere. If you choose to email us a diagnostic report, it may contain file names and error codes; you decide whether to send it.

4.6 Temporary files

Compressed photos/videos and extracted Live Photo stills are written to the App's temporary directory while a job runs, and are deleted when the job finishes, when you abort, or at the next launch.

5. Photo library permission

The App asks for read/write access to your photo library because it must be able to analyse items and, when you ask it to, create compressed copies, save Live Photo stills and delete items you selected.

• Full access: the App can see the whole library.
• Limited access: the App sees only the items you selected. You can add more at any time from the App or from iOS Settings.
• Denied: the App cannot analyse anything; you can change this in iOS Settings → Privacy & Security → Photos.

The App does not set PHPhotoLibraryPreventAutomaticLimitedAccessAlert, so iOS may occasionally remind you that the App has limited access. This is a system behaviour and respects your choice.

6. Purchases and subscriptions

Purchases are processed by Apple through the App Store. We never receive your name, payment card, billing address or Apple ID password. Apple provides us (and our subscription provider) with a transaction identifier, the product purchased, the purchase date and the subscription status.

We use RevenueCat, Inc. ("RevenueCat") to manage entitlements, validate receipts, restore purchases and understand aggregate subscription performance. RevenueCat receives an app-specific user ID generated by its SDK (not your Apple ID), purchase and transaction data, and technical information such as device model, operating system version, locale, and IP address. It does not receive your photos or your library contents.

• RevenueCat privacy policy: revenuecat.com/privacy
• Apple privacy policy: apple.com/privacy

We do not receive or store your payment details, and we do not use purchase data for advertising.

7. Notifications

If you enable reminders, the App schedules local notifications through iOS. They are created on your device; we do not use a push server and do not collect a push token. You can turn notifications off at any time in iOS Settings.

8. What leaves your device

We do not sell personal information, do not share it for cross-context behavioural advertising, and do not use it for profiling or automated decision-making with legal effects.

9. Service providers

Apple and RevenueCat act as our service providers/processors (Apple also acts as an independent controller for App Store payments). They are bound by their own terms and data protection commitments. We do not use any other third-party SDK that collects data.

10. Retention and deletion

"Clear Local Data" (Settings → Data) deletes the analysis database, skip list, compression jobs, cached remote configuration, undo history and temporary files. It does not delete your photos, cancel your subscription, or clear the Keychain allowance record. To remove the Keychain record you can delete the App and erase the device, or contact us and we will tell you how to reset it.

Deleting the App removes its container, subject to iOS backup behaviour and the Keychain note above.

11. Security

We use iOS Data Protection for the local database (available after first unlock), HTTPS for all network calls, and we keep the App's data inside its sandbox. Because your photos never leave the device, the main risk to them is your device passcode, not our servers. No method of storage is 100% secure, but we design the App to minimise what could be exposed.

12. Your privacy rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing, to data portability, to withdraw consent, and to lodge a complaint with your local authority.

Because we do not have an account and do not hold your photos:

• On-device data: you can inspect it by using the App and delete it with "Clear Local Data" or by deleting the App.
• Purchase data: contact Apple for Apple-held data and RevenueCat or us for RevenueCat-held data. We will forward your request where appropriate.
• Support emails: ask us to delete them.

To exercise any right, email support@gougou.me. We respond within 30 days (45 days for California requests) and may need to verify your request; because we hold little data, verification is usually limited to the email thread or the app-specific user ID.

EEA/UK (GDPR/UK GDPR): our legal bases are performance of a contract (providing the App and purchases), legitimate interests (security, fraud prevention, keeping the free allowance fair) and consent (notifications, photo access). You may object to legitimate-interests processing and complain to your supervisory authority.

California (CCPA/CPRA): in the past 12 months we have not sold or shared personal information, and we do not knowingly sell or share the personal information of consumers under 16. You have the right to know, delete, correct and opt out of sale/sharing; we do not discriminate against you for exercising these rights. You may use an authorised agent.

Mainland China (PIPL): the App processes your photo library on your device and does not transmit its contents. Purchase-related processing by Apple/RevenueCat may involve a cross-border transfer; it is necessary to perform the contract you enter into when you buy a subscription. You may contact us to exercise your rights under PIPL.

Other regions: we honour applicable mandatory consumer and privacy laws even if they are not listed here.

13. International transfers

We are based in China. Apple and RevenueCat may process data in the United States and other countries. Where required, transfers rely on Standard Contractual Clauses or an applicable adequacy decision (for example, the EU–US Data Privacy Framework for participating providers). You can ask us for more information.

14. Children

The App is not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

Photos in your library may include children. They are processed only on your device and are never sent to us.

15. Third-party links

The App and these pages may link to Apple, RevenueCat or other sites. Their privacy practices are governed by their own policies, not this one.

16. Changes to this policy

We may update this policy when the App changes or the law requires it. We will post the new version with a new "Last updated" date and, for material changes, notify you in the App before they take effect. Continued use after the effective date means you accept the updated policy.

17. Contact

Lu Li
Email: support@gougou.me