Privacy Policy — AI Storage Cleaner

1. Who we are

AI Storage Cleaner is published by NextWave Infotech ("we", "us", "our"), which acts as the data controller (and, under some laws, the "business" or "data fiduciary") for the limited personal data described in this policy.

We are not required to appoint a Data Protection Officer, because we carry out no large-scale or systematic monitoring of individuals. Any privacy matter can be raised directly with the contact above.

2. Summary

We would rather be precise than absolute. An app that talks to a push-notification service does not collect "nothing at all", and this policy says exactly what that involves — see section 5.

3. What our store privacy labels say

Both stores require us to summarise our data practices. Those summaries and this policy are consistent with each other.

Google Play — Data safety

Apple App Store — App Privacy

4. What the app processes on your device

Everything below is read and processed locally, to make a feature you asked for work. None of it is collected by us, transmitted off your device, or stored on any server we control.

The app does not access your location, microphone, camera, call logs, SMS messages, health data, browsing history, biometrics, or any online account.

5. What does leave your device

Two things only, both provided by Google Firebase:

a) Push notifications — Firebase Cloud Messaging

If you allow notifications, Firebase issues your installation a registration token and an associated installation identifier, so we can send reminders such as "your storage is filling up". These identify an app installation on a device, not you, and contain none of your photos, contacts, calendar entries or files. Turning notifications off in your device settings stops this.

b) App configuration — Firebase Remote Config

The app asks Firebase for its current configuration — feature settings, support links, and the latest available version. This is a download; your personal content is never included in the request.

To deliver these two services, Google processes technical data such as your IP address and an installation identifier, under its own terms: firebase.google.com/support/privacy. An IP address can constitute personal data, which is why we disclose it here rather than claiming that nothing at all is transmitted.

Two further cases are worth naming, because they involve your device talking to someone else — though neither sends us anything:

• Opening a link. Tapping a support, policy or store link opens it in your browser or store app, and that destination sees an ordinary visit from your device.
• Sharing. If you use a share option, your device's own share sheet hands the content to the destination you pick. We are not involved and receive nothing.

6. What we never do

• We do not sell your personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined under US state privacy laws.
• We show no advertising and integrate no advertising network.
• We include no analytics, attribution, or crash-reporting SDK, and build no profile of you.
• We do not track you across other companies' apps or websites, and therefore never present the iOS App Tracking Transparency prompt.
• We carry out no automated decision-making producing legal or similarly significant effects.
• We do not upload, back up, or index your photos, videos, files, contacts or calendar entries.
• We never ask for, and cannot access, your passwords or any online account.

7. Permissions, and why each is requested

You may decline any permission. Declining only disables the feature that needs it — the rest of the app keeps working, and you can change your mind at any time in your device settings.

iOS

Android

8. Legal bases for processing (EU / UK GDPR)

Where you withdraw consent we stop the related processing. Withdrawal does not affect anything already done, and cannot restore data you have already deleted.

9. Retention, and how to delete everything

We hold none of your personal content on any server, so there is nothing on our side to retain, export or erase.

Data the app creates on your device — its scan index, thumbnail cache, settings, local databases, Vault contents and your hashed Vault PIN — remains there until you remove it. To erase all of it:

• Android Settings → Apps → AI Storage Cleaner → Storage → Clear storage, or uninstall the app.
• iOS Delete the app from your Home Screen or App Library.

Your push token is retained by the messaging service only while the app remains installed with notifications enabled; it is invalidated when you uninstall the app or turn notifications off.

10. Recipients and international transfers

We disclose your personal data to no third party for that party's own purposes. Our only recipient is a service provider (processor):

We may also disclose information where legally required — for example in response to a valid legal request, or to establish or defend legal claims. Given how little we hold, in most cases we would have nothing meaningful to produce.

Transfers. Google operates globally, so the limited technical data above may be processed in countries other than your own, including the United States. Where those transfers are subject to the EU or UK GDPR, they rely on the safeguards Google puts in place, such as the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework. Your photos, contacts, calendar entries and files are not transferred anywhere, because they never leave your device.

11. Your rights

Depending on where you live, you may have rights to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to processing, to receive it in a portable form, and to withdraw consent.

EU, UK and Switzerland

You may exercise the rights above and lodge a complaint with your supervisory authority. EU authorities are listed by the EDPB; in the UK, the ICO; in Switzerland, the FDPIC.

United States (California and other states)

We do not sell personal information and do not share it for cross-context behavioural advertising, so there is no opt-out for us to offer. We do not knowingly collect sensitive personal information in order to infer characteristics about you. You have the right to know, delete and correct, and the right not to be discriminated against for exercising those rights. Authorised agents may submit requests on your behalf via the contact below. In the twelve months preceding this policy's date, the only category of personal information involved was identifiers and device/internet activity, in the narrow form described in section 5, collected solely to deliver notifications and configuration.

India

Under the Digital Personal Data Protection Act, 2023 you may access, correct, complete, update and erase your personal data, nominate another person to exercise your rights on your behalf, and raise a grievance with our Grievance Officer (section 1) before approaching the Data Protection Board of India.

Brazil, Canada, Australia, South Korea, Japan and elsewhere

If you are covered by the LGPD, PIPEDA, the Australian Privacy Principles, PIPA, APPI or a comparable law, you may exercise the equivalent rights that law grants you by contacting us, and may complain to your national regulator — for example the ANPD, the Office of the Privacy Commissioner of Canada, or the OAIC.

How to exercise any right: email support@nextwaveinfotech.com, telling us the country you are writing from and what you would like us to do. We aim to respond within 30 days and will tell you if we need longer.

12. The Vault

Items you hide in the Vault are moved into the app's private storage area on your device and placed behind a PIN you choose. The PIN is stored only as a salted cryptographic hash — the digits you type are never written to storage. Vault contents are not uploaded, and we cannot see them.

13. Deletion is permanent

14. Children

The app is a general-purpose utility and is not directed to children. We do not knowingly collect personal data from children under 13, or under the higher age of digital consent applicable in your country (up to 16 in parts of the EU). If you believe a child has provided us with personal data, contact us and we will delete anything we hold.

15. Security

Because your content stays on your device, the principal protections are your device's own: your screen lock, app sandboxing, and full-disk encryption where your device provides it. The limited data described in section 5 is encrypted in transit to Google's services, and your Vault PIN is stored only as a salted hash.

No method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security. What we can state precisely is that we operate no server holding your content, so there is no central store of your photos, contacts or files for an attacker to breach. Please also read the Vault limits in section 12.

16. Changes to this policy

We may update this policy as the app changes or as the law requires. The "Last updated" date at the top always reflects the current version. Where a change materially affects your rights or how your data is handled, we will give prominent notice in the app or on its store listing before it takes effect, and will seek your consent again where the law requires it. Continuing to use the app after an update means you accept the revised policy.

17. Contact and complaints

If you are not satisfied with our response, you may complain to your local data protection authority — see section 11 for where to go in your region.