Privacy Policy

This Privacy Policy explains how The Pizza Quiz LTD ("we," "our," or "us") collects, uses, and shares information when you use CleanHide: Phone Cleaner ("CleanHide" or the "App"), our iOS app for cleaning up photos, videos, and contacts, keeping private items in a Hidden Locker, tracking hydration, following daily trainings, and testing your network speed.

This policy is intended to give you the information required by the Apple App Store Review Guidelines and by applicable data protection laws, including the UK GDPR and the Data Protection Act 2018, the EU General Data Protection Regulation ("GDPR"), and the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA"). Please read it together with our Terms of Use.

1. Who We Are

CleanHide is developed and published by The Pizza Quiz LTD, a company based in the United Kingdom. We are the "controller" responsible for the personal data described in this policy, except where a third-party service acts as an independent controller under its own privacy policy (see Section 11). You can contact us at any time at info@getclearflow.app.

2. Summary

• Your content stays on your device. Your photos, videos, contacts, Hidden Locker items, Hidden Locker PIN, and Face ID data are processed only on your iPhone. The App never sends them to us or to any third party. (They can be included in device or iCloud backups that you control, and you can choose to share an item yourself through the iOS share sheet; see Section 3.)
• No account. CleanHide does not ask for your name, email address, or phone number, and you do not need to sign in.
• We use analytics, attribution, and subscription services. The App uses Google Firebase, AppsFlyer, and Apphud, and sends data to our own server, to run subscriptions, understand how the App is used, and measure our advertising campaigns. These services receive device and app identifiers, device information, your IP address, in-app event names, purchase information, and install attribution data. Our server shares install and subscription conversion data with Meta and with our ad-link tracker to measure and optimize our ads (see Section 6).
• Tracking permission. Your advertising identifier (IDFA) is accessed only if you tap "Allow" in the iOS tracking prompt. If you choose "Ask App Not to Track," the IDFA is not accessed, but the other identifiers and the install attribution data, including ad click identifiers, are still sent to our servers and our advertising partners to measure ad campaigns (see Section 6).
• Apple Health is write-only. With your permission, the App writes the water, caffeine, and alcohol drinks you log to Apple Health. It never reads Health data, and Health data is never sent to us or used for advertising.
• No ads in the App. CleanHide does not show ads and contains no ad-serving SDK. Sharing data with advertising partners to measure our own campaigns may, however, count as "sharing" or "selling" personal information under some US state laws (see Section 14.2).

3. Information Processed Only on Your Device

The following information is processed by the App locally on your iPhone. It is never uploaded to our servers or to any third-party service, and we have no access to it:

• Photos and videos (Photo Library access): The gallery cleaner scans your library on your device to find duplicate, similar, and blurry photos, screenshots, selfies, Live Photos, and videos, and deletes only the items you select. The video compressor reads the videos you choose, saves compressed copies back to Photos (using add-only access), and deletes the originals only if you ask it to. A cache of technical details, such as file sizes, is kept on your device to speed up scans.
• Contacts (Contacts access): The contacts cleaner reads your address book on your device to find duplicate and incomplete contacts, and merges or deletes only the entries you choose.
• Hidden Locker: Photos and videos you import into the Hidden Locker or capture with the in-app camera (camera access, plus microphone access for the sound of videos you record), and contacts you save to it (first name, last name, and phone number), are stored in the App's private storage on your device. Items imported from your library are removed from Photos only if you choose to delete them.
• Hidden Locker PIN and Face ID: The PIN you set is stored in the iOS Keychain on your device. Face ID is handled entirely by iOS: the App only learns whether authentication succeeded and never has access to your biometric data.
• Hydration data: The drinks you log (water, caffeine, and alcohol drinks), your daily goals, units, and related settings.
• Speed test results: Your download and upload speeds and the date of each test. (Running a test contacts third-party servers; see Section 7.)
• Widgets: Storage and cleanup statistics and your last speed test result, which the App shares only with its own Home Screen widgets on your device.
• Settings and preferences: For example, onboarding progress, your last cleanup date, and your Face ID preference.

The App also keeps on your device the identifiers and attribution data described in Sections 5 and 6 (for example, your App user ID and any ad click identifier). Unlike the items listed above, that information is sent to the services described in those sections.

How Hidden Locker items are stored. Hidden Locker photos and videos are saved as files in the App's private storage on your device. They are protected by the iOS app sandbox and the standard iOS Data Protection that applies to app files, and access within the App can be protected with your PIN and Face ID. The App does not add a separate layer of encryption of its own. We cannot access, recover, or restore Hidden Locker items.

Device and iCloud backups. iOS may include the App's data, including Hidden Locker items and your hydration logs, in backups of your device that you make to a computer or to iCloud Backup. These backups are created and stored by Apple under your Apple Account and are governed by your Apple settings and Apple's Privacy Policy. We have no access to them. Deleting the App removes its data from your device, but not from backups you have already made. Similarly, data the App writes to Apple Health and compressed videos it saves to Photos are managed by Apple and may sync through iCloud according to your Apple settings.

4. Apple Health

Apple Health integration is optional. If you enable it and grant permission in the iOS Health prompt, CleanHide writes the following to Apple Health when you log a drink:

• Water (dietary water)
• Caffeine (dietary caffeine)
• Number of alcoholic beverages

• Write-only. CleanHide asks for permission only to write these three data types. It does not request read access and never reads, queries, or monitors any data in Apple Health.
• Never shared. Health data is not sent to us, to our servers, or to any third party, including our analytics, attribution, and advertising partners. It is not used for advertising, marketing, or analytics, and it is never sold. Our analytics may record that a button such as "save drink" was tapped, but never what or how much you drank.
• Your control. You can turn off CleanHide's access at any time in the Health app or in iOS Settings > Privacy & Security > Health > CleanHide. Data already written to Apple Health stays there until you delete it in the Health app, even if you delete CleanHide.

5. Information Collected Automatically

When you use CleanHide, the App and the third-party software development kits (SDKs) built into it automatically collect the information below. We do not know your name or contact details, but this information is linked to persistent identifiers and is therefore treated as personal data.

5.1. Identifiers

• App user ID: When you are signed in to iCloud, the App obtains from Apple's CloudKit service an identifier that Apple creates specifically for CleanHide and your Apple Account. It is not your Apple ID, email address, or name. Because it stays the same if you delete and reinstall the App or use it on another device signed in to the same Apple Account, it is a persistent pseudonymous identifier. If iCloud is unavailable, the App creates a random ID instead. The App reads no other iCloud data and does not store or sync any data in CloudKit. The App user ID is used as your user ID in Apphud and Google Firebase Analytics and is included in the install report described in Section 6.
• Device and SDK identifiers: The Identifier for Vendor (IDFV) that iOS assigns to our apps on your device, the AppsFlyer ID, the Apphud user and device IDs, and the Firebase Installation ID and app instance ID.
• Advertising identifier (IDFA): Only if you allow tracking (see Section 6).

5.2. Device, App, and Network Information

Device model, iOS version, language and locale, time zone, the country or region set on your device, app version, SDK version, install and launch times, session information, and your IP address. Some services derive an approximate location from your IP address. The App does not request location permission and does not collect your precise location.

5.3. App Usage Events

The App records the names of in-app events, such as first launch, screens viewed, onboarding steps, subscription screen views, permission requests and whether a permission was granted, purchase results, and taps on buttons (for example, starting a speed test or adding items to the Hidden Locker). The App's own events consist of the event name only. They never include your photos, videos, contacts, Hidden Locker items, drink amounts, or Health data. Google Firebase Analytics also records its standard automatic events, such as first open, session start, engagement, screen views, app and iOS updates, and in-app purchases.

5.4. Purchase and Subscription Information

When you start a trial or buy, renew, or restore a subscription, Apple processes the payment. The App and Apphud receive the product, transaction, and App Store receipt information needed to validate purchases and unlock Premium, and Apphud keeps track of your subscription status. We never receive your payment card details, billing address, or Apple Account password.

5.5. Install Attribution and Ad Click Data

To understand which advertising campaigns lead to installs and subscriptions, AppsFlyer attributes your install and returns attribution data to the App, such as the ad network or media source, campaign, ad set, ad, and site identifiers and names, and the install status. AppsFlyer also collects Apple Search Ads attribution data. If you installed the App after tapping one of our ad links, the attribution data may contain ad click identifiers: the click ID created by our ad-link tracker (which runs on Binom tracking software) and Meta click and browser identifiers (fbclid, fbp, fbc). How this data is used and shared is explained in Section 6.

5.6. Who Receives This Information

6. Tracking Permission (ATT) and Advertising Measurement

6.1. The iOS Tracking Prompt

When you first open the App, iOS asks whether you allow CleanHide to track your activity across other companies' apps and websites (App Tracking Transparency, or "ATT"). Google Firebase (Analytics and Remote Config) starts when the App launches, before this prompt is shown. AppsFlyer and Apphud start after you have answered it.

• If you tap "Allow": The App reads your device's advertising identifier (IDFA) and provides it to AppsFlyer, Google Firebase Analytics, and Apphud and, if an install report is sent (Section 6.2), to our server.
• If you tap "Ask App Not to Track" (or tracking is not allowed on your device): The App does not access the IDFA. Your ATT choice affects only the IDFA. The App still sends the other identifiers (App user ID, IDFV, and the AppsFlyer, Apphud, and Firebase IDs), device information, your IP address, usage events, purchase information, and install attribution data, including ad click identifiers, to AppsFlyer, Google Firebase, Apphud, and our server, and our server forwards conversion data to our advertising partners as described below.

6.2. Install Report to Our Server

If you installed CleanHide after tapping one of our ad links and the attribution data returned by AppsFlyer contains an ad click identifier, the App sends a one-time install report to our server at cleanhideback.com. It is sent on first launch, after the tracking prompt has been answered. If that attempt fails, the App tries again later, for example the next time the App starts or when a subscription screen is opened. Installs without an ad click identifier, such as organic App Store installs, do not send this report. The report is sent whether you choose "Allow" or "Ask App Not to Track." It contains:

• the ad click identifier, and Meta click and browser identifiers (fbclid, fbp, fbc) if present;
• your AppsFlyer ID, Apphud user ID, and App user ID;
• campaign information: media source, campaign ID and name, ad set and ad names and IDs, site ID, click lookback window, the source of the ad interaction, and any additional information our ad link passed along, such as information about the device or browser used to tap the ad;
• the App's bundle ID and version, your iOS version, and the time the report is sent;
• your IDFA and a flag showing that tracking is allowed, only if you tapped "Allow" (otherwise the IDFA field is empty and the flag shows that tracking is not allowed).

Like any internet request, the report also reveals your IP address and a technical user-agent string, which our server and its web server logs record.

6.3. Subscription Events

Apphud sends events about your subscription (for example, trial starts, purchases, and renewals) directly to our server. The App attaches the ad click identifier, if there is one, to your Apphud profile so that these events can be linked to the ad campaign that led to your install. This also happens whatever your ATT choice.

6.4. Sharing With Our Advertising Partners

Our server stores this information and forwards install and subscription conversion events to:

• Meta Platforms (Facebook), using the Meta Conversions API, so that we can measure, optimize, and improve our ad campaigns on Meta's platforms, including how our ads are delivered and to whom; and
• our ad-link tracker, which runs on Binom tracking software operated by us. It creates the click ID when you tap one of our ads, records technical information about that click (such as the IP address, browser user-agent, campaign, and ad), and keeps our campaign statistics.

The events forwarded may include identifiers (such as your App user ID, Apphud user ID, and AppsFlyer ID, and your IDFA if you allowed tracking), the ad click identifiers, campaign information, your IP address and user-agent string, and other data from the install report or subscription event described above. Our server may also report subscription events to AppsFlyer so that they can be attributed to campaigns. Meta may combine this information with information it already holds and use it as described in Meta's Privacy Policy. AppsFlyer may also share attribution results with the advertising networks we work with, according to our settings and AppsFlyer's Privacy Policy.

You can refuse or withdraw tracking permission at any time, and you can ask us to stop using your data for advertising measurement or to delete the data our server holds about you (see Sections 12 and 14).

7. Other Network Connections

• Speed test (Ookla): Only when you tap Start, the App contacts Speedtest.net servers operated by Ookla, which use your IP address to choose a nearby test server. The App then downloads test files from, and uploads dummy data to, that test server, which may be operated by a third party. These servers receive your IP address and a technical user-agent string that includes your iOS version. No other App data is sent, and your results are stored only on your device. See Ookla's Privacy Policy.
• Training videos: When you open an exercise in Daily Trainings, its video is streamed from our server at api.getclearflow.app. This standard request reveals your IP address, a technical user-agent string, and which exercise video is requested. No other App or user data is sent.
• Connectivity check: To check whether you are online, the App performs a standard DNS lookup of a public domain name. No App or user data is included.
• Links: Our Privacy Policy, Terms of Use, and Support pages and the App Store review page open in your browser only when you tap them.
• Font download: The first time certain screens are shown (for example, a subscription screen), the App may download a font file from Google Fonts (fonts.gstatic.com) and then keep it on your device. This standard request reveals your IP address and a technical user-agent string to Google. No App or user data is sent. See Google Fonts privacy information.
• Notifications: This version of the App does not ask for notification permission, does not register for push notifications, and does not send a push token to us or to anyone else.

8. Information You Provide to Us

If you contact our support team at info@getclearflow.app, we receive:

• Your email address (so we can reply)
• Anything you choose to include, such as your device model, iOS version, app version, screenshots, or a description of the issue

We use this information only to handle your request.

9. Information We Do Not Collect

CleanHide does not collect, or send to us or to any third party:

• The content or metadata of your photos and videos
• Your Hidden Locker items (photos, videos, and saved contacts)
• Your address book contacts
• Your Hidden Locker PIN or any biometric (Face ID) data
• Data from Apple Health (the App writes to Health but never reads from it), or your hydration logs
• Camera or microphone recordings (they are saved only in your Hidden Locker on your device)
• Your precise location
• Your name, email address, phone number, or other contact details (unless you email us)
• Payment card or bank details (payments are handled by Apple)
• Crash reports or session recordings (the App contains no crash-reporting or session-recording SDK; Apple may share crash data with us only if you opt in, see Section 11)
• Push notification tokens
• Your speed test results
• Your browsing or search history, messages, or files outside the App
• Your IDFA, unless you allow tracking

10. How We Use Information and Our Legal Bases

If you are in the United Kingdom or the European Economic Area (EEA), we rely on the following legal bases under the UK GDPR and the GDPR:

Where we rely on legitimate interests, you have the right to object at any time (see Section 14). Where we rely on consent, you can withdraw it at any time; this does not affect processing that took place before you withdrew it.

11. Third-Party Services

The App uses, or our server shares data with, the following third parties. Each processes data as described above and in its own privacy policy:

• Apple — App Store distribution, in-app purchases (StoreKit), the ATT prompt, the CloudKit identifier used as your App user ID, Apple Health, Face ID, and device backups. If you have chosen to share analytics with app developers in iOS Settings > Privacy & Security > Analytics & Improvements, Apple may also provide us with crash and diagnostic data. Apple Privacy Policy
• Google (Firebase Analytics, Firebase Remote Config, Firebase Installations, Google Fonts) — analytics, remote configuration, and font downloads. Google Privacy Policy, Firebase privacy information, and how Google uses information from apps that use its services
• AppsFlyer — install attribution and ad campaign measurement. AppsFlyer Privacy Policy
• Apphud — subscription management and purchase validation; links subscription events to install attribution data and sends subscription events to our server. Apphud Privacy Policy
• Meta Platforms — receives install and subscription conversion events from our server through the Meta Conversions API for ad measurement. Meta Privacy Policy
• Our ad-link tracker — ad-link tracking and campaign statistics, using Binom tracking software that we operate on our own server (hosted by our hosting provider); it receives conversion events from our server.
• Ookla (Speedtest.net) — servers used for the speed test. Ookla Privacy Policy
• Hosting and infrastructure providers — host our server at cleanhideback.com, where install reports and subscription events are stored, and our server at api.getclearflow.app, which streams training videos, and our ad-link tracker; our email provider handles support emails. These providers process data on our behalf.

We share personal data with these third parties only for the purposes described in this policy. Service providers that process data on our behalf (such as Google, AppsFlyer, Apphud, and our hosting and email providers) may use it only to provide their services to us, under data processing terms that require them to protect it. Third parties that use data for their own purposes, such as Apple, Meta, and Ookla, do so under their own privacy policies and their terms with us. We require every third party with whom we share personal data to provide the same or equal protection of that data as described in this Privacy Policy and as required by the Apple App Store Review Guidelines.

We may also disclose information if required by law or a valid legal process, to protect our rights or the safety of others, or as part of a merger, acquisition, or sale of our business.

12. Your Choices

• Tracking: Choose "Ask App Not to Track" in the prompt, or switch off CleanHide (or "Allow Apps to Request to Track") in iOS Settings > Privacy & Security > Tracking. This stops the App from accessing your IDFA. It does not stop the other processing described in Sections 5 and 6, including the install report.
• Advertising measurement: To object to the use of your data for advertising measurement, or to ask us to delete the data our server holds about you, email us (see Section 14).
• Device permissions: You can grant or withdraw access to Photos, Contacts, Camera, Microphone, and Face ID at any time in iOS Settings > CleanHide. The features that need a permission will not work without it.
• Apple Health: Manage or turn off access in iOS Settings > Privacy & Security > Health > CleanHide, or in the Health app.
• Deleting the App: Deleting CleanHide stops all further collection and removes its data from your device. It does not delete data already sent to our server or to third parties, data written to Apple Health, or backups you have already made. If you reinstall the App with the same Apple Account, it will have the same App user ID.
• Contacting us: Email info@getclearflow.app to exercise any of the rights in Section 14.

13. Data Retention

When information is no longer needed for these purposes, we delete it or make it anonymous. You can ask us to delete the information we or our service providers hold about you at any time (see Section 14.3).

14. Your Privacy Rights

14.1. United Kingdom and EEA (UK GDPR and GDPR)

You have the right to:

• Access the personal data we hold about you
• Rectify inaccurate personal data
• Erase your personal data ("right to be forgotten")
• Restrict processing
• Object to processing based on our legitimate interests, including advertising measurement
• Data portability
• Withdraw consent at any time where processing is based on consent
• Lodge a complaint with a supervisory authority: in the UK, the Information Commissioner's Office (ICO); in the EEA, the authority in your country

14.2. California and Other US States (CCPA / CPRA)

We collect the following categories of personal information:

• Identifiers: App user ID, IDFV, AppsFlyer, Apphud, and Firebase IDs, IDFA (only if you allow tracking), and IP address
• Commercial information: Purchase and subscription history
• Internet or other electronic network activity: In-app usage events and install attribution data, including ad click identifiers
• Geolocation data: Approximate location derived from your IP address (not precise location)

We collect this information from your device and the App, from AppsFlyer (attribution data), from Apphud (subscription events), and from our ad-link tracker (ad click data). We use it for the purposes in Section 10, and we disclose it to service providers such as Apple, Google, AppsFlyer, Apphud, and our hosting providers.

"Selling" and "sharing." We do not sell personal information for money. However, we disclose identifiers, ad click identifiers, campaign information, IP address and user-agent string, and install and subscription events to Meta Platforms, and AppsFlyer may share attribution results with advertising networks, to measure, optimize, and improve our advertising. Under the CCPA, this may be considered "sharing" personal information for cross-context behavioral advertising, and under some other US state privacy laws it may be considered a "sale" or processing for targeted advertising. This happens whether or not you allow tracking in the ATT prompt. We do not knowingly sell or share the personal information of consumers under 16.

You have the right to:

• Know what personal information we collect, use, and disclose, and access it
• Request deletion of your personal information
• Correct inaccurate personal information
• Opt out of the "sale" or "sharing" of your personal information and of targeted advertising: email info@getclearflow.app with the subject "Do Not Sell or Share My Personal Information"
• Not be discriminated against for exercising your rights

We do not collect sensitive personal information for purposes that would give you a right to limit its use. You may use an authorized agent to make a request on your behalf.

14.3. How to Exercise Your Rights

Email us at info@getclearflow.app with your request. Because we do not know your name or email address, we may ask you for information that helps us find data linked to your device (for example, the order ID from your App Store purchase receipt), and in some cases we may not be able to identify data relating to you. When we act on a deletion request, we delete the data our server holds and ask the service providers that process data for us (such as AppsFlyer, Apphud, and Google) to delete the data they hold on our behalf. We will respond within the time required by applicable law (generally one month under the UK GDPR and GDPR, and 45 days under the CCPA).

15. Children's Privacy

CleanHide is not directed to children under 13, or under the minimum age required in their country (up to 16 in some EEA countries). We do not knowingly collect personal information from children. If you believe a child has used the App and that we hold personal data about them, contact us at info@getclearflow.app and we will delete it.

16. International Data Transfers

We are based in the United Kingdom. Our service providers and partners, including Apple, Google, AppsFlyer, Apphud, Meta, Ookla, and our hosting providers, may process personal data in the United States and other countries outside the UK and EEA, whose data protection laws may differ from yours. Where required, we rely on adequacy regulations or decisions, standard contractual clauses (including the UK International Data Transfer Addendum), or other lawful transfer mechanisms.

17. Security

The App sends data to our server over an encrypted HTTPS connection. Your Hidden Locker PIN is stored in the iOS Keychain, and Hidden Locker files rely on the iOS app sandbox and Data Protection, without an additional layer of app-level encryption. No method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security. If a personal data breach occurs, we will notify you and the relevant authorities where required by applicable law.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, for example when we change the App or the services it uses. When we do, we will update the "Effective date" at the top of this page and, where required by law, notify you in the App or ask for your consent.

19. Contact Us

If you have questions or requests about this Privacy Policy or your data, please contact us:

• Developer and controller: The Pizza Quiz LTD, United Kingdom
• Email: info@getclearflow.app
• Website: getclearflow.app