Privacy Policy

Effective Date: July 30, 2026

1. Overview

PHYONE PTE. LTD ("we," "us," "our") operates FluxClean(the "App"), an AI-powered storage and email cleaner for iOS. This Privacy Policy describes how we handle your information when you use the App.

Core principle: all photo and file analysis is performed locally on your device. Your photos and files never leave your iPhone. For the optional email cleanup feature, the App accesses your Gmail account via Google APIs with your explicit authorization.

2. Key Privacy Highlights

• Photos & Files: 100% on-device processing. Nothing is uploaded to any server.
• Email Cleanup (optional): Uses Google Sign-In and Gmail API with your explicit consent. Only email metadata (subject, sender, date, size, attachment info) is accessed — email body/content is NOT read or stored.
• No separate account registration is required. For email cleanup, you sign in with your existing Google account; we receive your name and email address from Google for identification within the feature only.
• We do not sell, rent, or share your personal data with third parties.
• We do not track you across other companies' apps or websites, as defined by Apple's App Tracking Transparency framework.
• You can revoke any permission at any time via iOS Settings or your Google Account.

3. Data Collection & Use

3.1 Photo Library & Device Storage

With your permission, the App accesses your photo library and device storage to scan for duplicates, similar photos, blurry images, large videos, and other space-consuming content. All scanning, analysis, and AI processing are performed entirely on your iPhone. No photos, videos, or files are ever transmitted to any server or third party.

Purpose: provide storage analysis, cleanup recommendations, and space recovery.

3.2 Gmail / Email Cleanup (Optional)

If you choose to use the email cleanup feature, you sign in via Google Sign-In and authorize the App to access your Gmail account through the Gmail API. The Google API scopes we request are:

• Read email metadata only: subject line, sender/recipient, date/time, message size, and attachment information (file name and size). We do NOT read or access email body content.
• Manage emails on your behalf: move to trash, delete, or archive messages that you explicitly select and confirm for cleanup.
• Basic account info: your name and email address as returned by Google, used solely to identify your account within the email cleanup feature.

The App uses this access to identify and help you bulk-delete large emails, old messages, spam, and emails with heavy attachments. You choose what to delete — the App never removes anything without your explicit confirmation.

Email metadata is processed on our secure servers. We do NOT read, store, or have any access to the body/content of your emails. Only metadata (subject, sender, date, attachment size) is processed, and solely for the email cleanup feature.

3.3 Device & Usage Data

We may collect anonymized, non-personal technical information: device model, OS version, App version, storage capacity/usage, language setting, and crash/performance data. This helps us improve performance and fix bugs. None of this data identifies you personally.

3.4 Summary of Data Types (per Apple Privacy Nutrition Labels)

For clarity, the following table aligns with Apple's required privacy label categories:

Identifiers (Name, Email): Collected if you use the email cleanup feature (Google Sign-In). Not collected otherwise.

User Content (Photos, Videos): Not collected. All processing is on-device. No files leave your iPhone.

User Content (Email Metadata): Collected if you use email cleanup. Only subject, sender, date, size, attachment info.

User Content (Email Body): Not collected or accessed.

Usage Data: Anonymized product interaction and feature usage statistics.

Diagnostics: Crash logs and performance data.

Contact Info: Not collected.

Health & Fitness: Not collected.

Financial Info: Not collected.

Location: Not collected.

Contacts: Not collected.

Browsing History: Not collected.

Search History: Not collected.

Purchases: Not collected.

4. Google API Services — Limited Use Disclosure

FluxClean's use and transfer to any other app of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• Gmail data is used solely to provide the email cleanup feature you requested.
• Gmail data is not used for advertising, marketing, or building user profiles.
• Gmail data is not transferred to third parties except as necessary to provide the service (e.g., secure cloud hosting infrastructure) or to comply with applicable law.
• Humans do not read your Gmail data unless: (a) you give explicit consent for specific messages; (b) required for security purposes (e.g., investigating abuse); or (c) required by applicable law.
• Our use of Gmail data is limited to what is reasonably necessary to provide and improve the email cleanup functionality.

You can revoke the App's access to your Google account at any time via Google Account > Security > Third-party apps with account access.

Google's own privacy practices are described at policies.google.com/privacy. We encourage you to review them.

5. Data Sharing & Disclosure

We do not sell, rent, or trade your personal information. We may share data only:

• With service providers (e.g., secure cloud hosting, crash analytics) bound by contract to process data solely on our behalf.
• If required by applicable law, court order, or governmental request.
• In connection with a merger, acquisition, or asset sale — you will be notified before any personal data is transferred.

We do not share data for cross-context behavioral advertising. We do not engage in any "sale" or "sharing" of personal information as defined under the CCPA/CPRA.

6. Data Storage & Retention

Photo/file analysis data: stored locally on your device only. Deleted automatically when you uninstall the App.

Gmail metadata (subject, sender, date, attachment size): stored on secure servers for the duration of your active session. Permanently deleted within 30 days after you revoke Google access, or uninstall the App.

Anonymized analytics/crash data: retained for up to 24 months for product improvement. Cannot be linked to any individual user or device.

7. Security

We implement industry-standard safeguards: on-device processing for all photo/file data; TLS/SSL encryption for all server communications; access controls and regular security reviews. While no system is 100% secure, we continuously work to maintain strong protection for your data.

8. Your Rights & Choices

8.1 Device Permissions

You control all permissions. To grant or revoke access:

• Photo Library: iOS Settings > Privacy & Security > Photos > FluxClean
• Google Account: Google Account > Security > Third-party apps with account access > FluxClean> Remove Access
• Analytics: iOS Settings > Privacy & Security > Analytics & Improvements > Share with App Developers (toggle off)

8.2 Your Privacy Rights

Depending on your jurisdiction, applicable laws may grant you rights to access, correct, delete, or port your personal data, and to object to or restrict certain processing. This includes rights under:

• GDPR (EEA, UK, Switzerland): rights of access, rectification, erasure, restriction, portability, and objection. Legal basis for processing: your consent (Art. 6(1)(a)) for email cleanup; legitimate interest (Art. 6(1)(f)) for anonymized analytics and service improvement.
• CCPA/CPRA (California): rights to know, delete, correct, and opt out of sale/sharing. We do not sell or share personal data as defined by these laws.

To exercise any of these rights, contact us at phyonetech@protonmail.com. We will verify your identity and respond within the timeframe required by applicable law (typically 30 days). You also have the right to lodge a complaint with your local data protection supervisory authority.

9. Children's Privacy

The App is not directed to children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will delete it promptly. Parents or guardians who believe their child has provided such information should contact us at phyonetech@protonmail.com.

10. International Data Transfers

Photos and files: processed entirely on-device. No cross-border transfer occurs.

Email metadata (Gmail cleanup users): processed on secure servers. Where cross-border data transfers occur, we rely on Standard Contractual Clauses (SCCs) or equivalent mechanisms as recognized by applicable data protection laws.

11. Third-Party Services

The App integrates with the following third-party services:

• Google Sign-In & Gmail API (Google LLC) — used for the optional email cleanup feature. Subject to Google's Privacy Policy (policies.google.com/privacy) and Terms of Service.
• Apple App Store & associated Apple services — used for app distribution, crash reporting (if enabled), and analytics. Subject to Apple's Privacy Policy (apple.com/legal/privacy).

We are not responsible for the privacy practices of these third parties. We encourage you to review their respective privacy policies.

12. Apple App Store Compliance

This App is distributed exclusively through Apple's App Store and complies with the Apple Developer Program License Agreement and App Store Review Guidelines. Specifically:

• Privacy nutrition labels in the App Store accurately reflect the data types and purposes described in Section 3.4 of this policy.
• Photo library access is requested only when needed for a specific cleanup task, using iOS standard permission dialogs. The App remains functional even if you deny this permission.
• The App does not use device fingerprinting or any technology to identify your device across other apps or websites.
• The App does not track users as defined by Apple's App Tracking Transparency framework. No data collected by the App is linked to third-party data for targeted advertising or advertising measurement, nor is it shared with data brokers.
• All data collection is limited to what is necessary for the App's core features (storage cleanup and email cleanup).

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting a prominent notice within the App at least 7 days before the changes take effect, and update the "Effective Date" above. Your continued use of the App after the effective date constitutes acceptance of the updated policy. We encourage you to review this policy periodically.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights:

Developer: PHYONE PTE. LTD

Email: phyonetech@protonmail.com