Private Sweep / Privacy Policy
Privacy Policy
The short version
Private Sweep analyzes your photo library entirely on your device. Your photos and videos are never uploaded, transmitted, or processed on any external server, and we never see them. There are no accounts. The app sends a small set of anonymous usage events (described below) so we can tell whether scans succeed and features get used — no photo content is ever part of those events.
How your photos are handled
Private Sweep analyzes your photo library directly on your iPhone. Scan results, review decisions, and cleanup history are stored locally in the app. Nothing about your library — not the photos, not thumbnails, not filenames — leaves your device.
Permissions we use
The app requests Photos access to scan your library and to move items to Recently Deleted when you confirm a cleanup action. If you enable iCloud asset scanning, Apple's Photos framework may fetch content from iCloud to your device to perform the analysis — the analysis itself still happens on the device.
The optional file scan uses Apple's document picker: you choose a single folder, and the app reads only that folder. It has no access to anything you didn't pick.
Analytics
Private Sweep collects anonymous usage events so we can tell whether the app works — for example, whether a scan was started, how many issues were found, and whether a purchase was completed. Events are tied to a random installation ID generated on your device; it is not derived from your hardware, Apple ID, or any advertising identifier, and it identifies an installation, not a person. These events are processed by Firebase Analytics (Google) and by our own first-party service. No photo content, filenames, or photo identifiers are ever part of any event; your exact library size is never sent (only a broad size range). IP addresses are not stored by our first-party service. We use this data only to operate and improve the app — never for advertising, and we never sell it. Raw first-party events are deleted after 180 days.
Crash reports
If the app crashes or misbehaves, we receive a technical crash report (via Apple's MetricKit) containing the app version, iOS version, coarse device class, and a stack trace of the code that failed. Crash reports contain no photos, no filenames, and no personal information, and are deleted after 90 days.
Purchases
If you purchase the one-time unlock, Apple processes the transaction and provides verification to confirm your entitlement. Private Sweep does not receive or store your payment details.
Your control
You can revoke Photos access at any time in iOS Settings. Deleting the app removes all locally stored scan data. Every deletion is initiated by you and completed through Apple's photo library — nothing is removed automatically, and deleted items stay in Recently Deleted for 30 days where you can recover them.
Contact
Questions about this policy or your data? Email [email protected] or visit Private Sweep Support.