Privacy Policy

1. Who is responsible

The data controller for Roomy is:

• Trevica LTD
• INTERNATIONAL HOUSE, 307 Cotton Exchange Building, Old Hall Street, LIVERPOOL, England L3 9LQ, United Kingdom
• privacy@roomycleaner.com

In this policy, “we” means Trevica LTD and “the App” means Roomy for iPhone. This policy covers the App and this website.

2. Short version

The detail follows, but this is the whole picture on one screen.

We do not sell data. The App contains no advertising or attribution SDKs, does not use the Advertising Identifier (IDFA), and does not track you across other companies' apps or websites.

3. What is processed on your device and stays there

The cleaning features are the reason the App exists, and they are local. When you grant access to your photo library, the App reads the items through Apple's Photos framework on the device and compares them there:

• Similar photos — grouping, and the frame marked Best, are computed on the device.
• Duplicate photos — matching is done on your iPhone. Images are not uploaded for analysis.
• Screenshots and videos — these lists are built from the metadata iOS already holds about your own library.
• Video compression — the clip is re-encoded on the device. Nothing is uploaded, and nothing is written until you confirm.
• Background removal — the photo you add is processed on the device to separate the subject from the background.

We do not operate servers that store your photos, videos or the results of a scan. Technical artefacts of a scan — thumbnails, comparison fingerprints, group indexes — are held on your device and removed when you delete the App.

What deletion does. When you confirm a deletion, the App asks iOS to remove those items. iOS does not erase them immediately — it moves them to the Recently Deleted album, where the system keeps them for around 30 days before removing them permanently. During that window they can be restored from the Photos app, and they still occupy storage. Emptying that album is something only you can do; no third-party app is permitted to do it for you.

4. What is collected, and by whom

4.1 Subscriptions

Payment is handled entirely by Apple. We never see your card details, and Apple does not pass them to us. To know whether your subscription is active and to validate receipts, the App uses a subscription management provider acting as our processor. Through it we receive:

• subscription and transaction data: the product purchased, currency and price, purchase and renewal dates, trial status, whether a subscription is active, cancelled or refunded, and Apple's transaction identifiers;
• the receipt data Apple issues for validation;
• an installation identifier generated for your app install, so purchases can be matched to the right install;
• technical context sent with those requests: IP address, device model, iOS version, app version and region.

None of this identifies you by name. We use it to unlock what you paid for, to restore purchases, and to understand how many active subscriptions exist.

4.2 Crash reports and diagnostics

So that a crash can be found and fixed, the App reports technical diagnostics through a provider acting as our processor. A report contains the state of the App at the moment of failure, the device model, the iOS and app version, and a pseudonymous installation identifier. It does not contain your photos, videos or the contents of a scan.

4.3 Named providers

The current list of these providers by name, and the data processing agreement in force with each, is available on request at privacy@roomycleaner.com. They receive only the technical and subscription data described above.

4.4 What Apple gives us

If you agree to share diagnostics and usage with developers in your iOS settings, Apple may pass us crash reports and aggregated App Store metrics such as download and subscription counts. This comes from Apple in aggregate or de-identified form and is governed by Apple's own privacy terms.

4.5 If you email us

When you write to support@roomycleaner.com or privacy@roomycleaner.com we receive your email address, whatever you put in the message, and any screenshot you attach. We use it to answer you and, where relevant, to fix the problem you reported.

5. Device permissions and why they are asked for

• Photos. Required to find similar photos, duplicates, screenshots and videos, to compress a clip, to remove a background, and to delete what you select. Full Access is needed for detection to be meaningful: with Limited Access the App can only see the specific items you picked.
• Notifications (optional). Used only for app-related messages if you allow them. Declining changes nothing else.

Every permission can be withdrawn at any time in iOS Settings → Privacy & Security. When a permission is withdrawn, the feature that depended on it stops working; nothing is deleted as a result.

6. Legal bases

Where UK GDPR or EU GDPR applies, we rely on:

• Performance of a contract — providing the App's features to you, and managing your subscription, purchases and restores.
• Your consent — access to your photo library, which you grant through the iOS permission prompt, and any marketing email you choose to receive. You may withdraw consent at any time by revoking the permission or unsubscribing.
• Our legitimate interests — keeping the App stable and secure, diagnosing crashes, and preventing abuse of subscriptions. We keep this to what is necessary and do not use it to profile you.
• Legal obligation — keeping records of transactions where accounting and tax law requires it.

7. Who data is shared with

We do not sell or rent personal data and we do not share it for advertising. Data is shared only with:

• Apple — App Store distribution, payment processing and subscription management.
• Our subscription management provider, as processor.
• Our crash and diagnostics provider, as processor.
• Cloudflare — hosting and delivery of this website. Server logs of website visits, including IP addresses, are processed for security and availability.
• Our email provider, for correspondence you send us.

We may also disclose data where the law requires it, or to establish or defend legal claims.

8. International transfers

Some of the providers above process data outside the United Kingdom, including in the United States. Where personal data is transferred out of the UK or the EEA, we rely on the safeguards permitted by the applicable data protection law — in practice the UK International Data Transfer Agreement or Addendum, the European Commission's Standard Contractual Clauses, or, where the recipient is certified, the relevant adequacy framework. You can ask which mechanism applies to a specific provider at privacy@roomycleaner.com.

9. How long data is kept

• Library content and scan results. Held on your device only, for as long as you keep them there. Deleting the App removes its local storage.
• Subscription and transaction records. Kept while the subscription is active and afterwards for as long as accounting and tax law requires — generally six years for UK accounting records.
• Crash reports and diagnostics. Retained for as long as needed to diagnose the fault and confirm the fix, then deleted or anonymised.
• Support email. Kept for as long as needed to resolve your request and to have a record of it, then deleted.

10. Your rights

If UK GDPR or EU GDPR applies to you, you have the right to request access to the personal data we hold about you, to have it corrected, to have it erased, to restrict or object to processing, to receive it in a portable form, and to withdraw consent where processing is based on consent.

Write to privacy@roomycleaner.com from the address concerned. We answer within one month, and will tell you if we need longer, as the law allows. One practical limit worth knowing in advance: because your library never reaches us, a request in practice concerns your subscription records and diagnostics data, and we may need the installation identifier or the purchase date to locate them.

If you believe we have handled your data improperly, you can complain to the Information Commissioner's Office (ico.org.uk), the UK supervisory authority, or to the authority in your own country of residence. We would rather you told us first, at the address above.

11. Children

Roomy is not directed to children. We do not knowingly collect personal data from children under 13, or under the higher age set by the law of your country where that applies. If you believe a child has used the App in a way that provided us with personal data, write to privacy@roomycleaner.com and we will delete what we hold.

12. Security

Data sent between the App and the services listed above travels over encrypted HTTPS connections. Access to our provider dashboards is limited to the people who need it and protected by two-factor authentication. The strongest measure here is structural rather than technical: the App is built so that your photos and videos stay on your device, which means there is no server of ours holding them to be breached. No method of transmission or storage is completely secure, and we do not claim otherwise.

13. Changes to this policy

If the App changes — a new feature, a different provider — this policy is updated before or at the same time as the release, and the date at the top changes with it. Material changes will also be noted in the App Store release notes. The current version always lives at roomycleaner.com/privacy.

14. Contact

• Privacy and data requests: privacy@roomycleaner.com
• Everything else: support@roomycleaner.com
• Trevica LTD, INTERNATIONAL HOUSE, 307 Cotton Exchange Building, Old Hall Street, LIVERPOOL, England L3 9LQ, United Kingdom