Leanroll privacy policy

Who we are

Leanroll is made by Wavista Apps, operated by William Tsao, an individual based in California, USA. Contact: [email protected].

Your photos

Leanroll needs access to your photo library to find similar photos, screenshots, blurry shots and large videos. You can give it access to all photos or only the ones you pick, and change that at any time in the iOS Settings app.

• Every check runs on your iPhone, using Apple's built-in frameworks. There is no cloud AI.
• Your photos, thumbnails, photo details (such as dates and places) and the scores the app works out are never uploaded, never shared and never used for advertising.
• The results are kept in a database on your iPhone: which photos belong together, their quality scores, how many faces are in a photo and how clear they are (never who they are), your choices, and how much space you cleared.
• The app deletes a photo or video only when you choose to, and iOS asks you to confirm every time. Deleted items go to Recently Deleted in the Photos app, where you can recover them for a limited time.
• When you compress a video, the app saves a smaller copy (keeping its date and place) and deletes the original in one step that iOS asks you to confirm. If the original is in iCloud Photos, your iPhone may download it from Apple first.

If you back up your iPhone to iCloud or a computer, the backup includes the app's data, as it does for any app.

What leaves your iPhone, and who receives it

RevenueCat (subscriptions)

RevenueCat runs the subscription for us. It receives a random anonymous ID it creates for the app, your App Store purchase records (what you bought, when, its price, and trial and renewal status) and technical details such as the iOS and app version. Its software also sends the identifier for vendor, an ID that Apple gives our apps on your iPhone. RevenueCat never gets your name, email or payment card. If you installed the app from an ad on the App Store (Apple Ads), Apple tells RevenueCat which ad campaign, ad group and search keyword led to the install, so we can see whether our ads pay for themselves. This is Apple's own ad attribution: it does not use the advertising identifier and needs no tracking permission. Apple handles payment.

PostHog (usage analytics, which you can turn off)

We use PostHog to understand which features work, so we can improve the app. Analytics are on when you install the app, and you can turn them off at any time in Settings, Share usage analytics. When they are on, PostHog receives, tied to the anonymous ID (a random ID, not your name or email):

• your two setup answers, both picked from a list: what fills your phone and your storage situation;
• events such as opening the app, setup steps viewed, whether you allowed photo access, when the subscription screen was shown, trials, purchases, restores and review prompts;
• counts and sizes from your cleanups: how many items a scan found and how long it took, how much space could be freed, when you open a group or keep a different photo than suggested, how many items you deleted (and of what kind and size), how much space a video compression saved, swipe session totals, and when you share a milestone;
• details the PostHog software adds, such as the app version, iOS version, device model, language, time zone and screen size.

PostHog never receives your photos, thumbnails or photo details. Session recording, touch tracking and location lookup from your IP address are turned off. PostHog does not store your IP address.

Sentry (crash reports)

If the app crashes or hits an error, it sends a report to Sentry so we can fix it: what went wrong and where in the app, the device model, iOS and app version, and a random ID Sentry makes for the install. For about 1 in 10 app starts and screen loads it also sends performance timings, and it counts sessions that end without a crash. Reports do not include the anonymous ID, screenshots or photos. Before a report is sent, the app cuts a failed database save down to the kind of action and the table name, so a report never includes what you were saving (such as which photos a scan grouped, their dates or their scores). It also leaves out request details and console logs. Sentry does not store your IP address.

Apple

Apple handles the App Store, payments, iCloud Photos and iPhone backups under Apple's own privacy policy.

Email to support

If you email us, we receive your email address, your message and the details that Contact support adds (app version, iOS version and the anonymous ID). We use them only to help you. We keep support emails for 2 years after your last message, then delete them. Cloudflare forwards them to our Gmail (Google) inbox.

Permissions

• Photos: to find photos to clean up, and to delete or compress the ones you choose.
• Add to Photos: to save the smaller copy of a video you compress.

Leanroll does not use your camera, location, contacts, microphone, notifications or Apple Health.

How long data is kept

• On your iPhone: until you use Delete my data or delete the app.
• RevenueCat: for as long as we offer the app, so your subscription can be restored.
• PostHog: up to 1 year.
• Sentry: 30 days.

Delete my data

Open Settings and tap Delete my data. It deletes your scan results, progress, answers and choices from your iPhone, turns analytics off and starts the app again from the beginning. It never touches your photos. You can turn analytics back on later in Settings.

Leanroll has no server, so Delete my data cannot delete what PostHog, Sentry or RevenueCat already received. To ask for that, email us from Contact support (it adds the anonymous ID we need). We will delete your PostHog profile and events, any Sentry reports we can match, and, if you ask, your RevenueCat record. Deleting the RevenueCat record does not cancel your Apple subscription, and Restore purchases brings Pro back. Delete my data does not cancel your subscription either.

Your requests

You can email [email protected] to ask what we hold about you, or to delete it. Send the email from Contact support in the app so it includes the anonymous ID; we cannot find your data without it, because we do not know your name. We reply within 30 days.

What we do not do

We do not sell your personal information or share it for advertising. The app has no ads, does not build profiles from your photos and does not track you across other companies' apps or websites.

The app does not track you across other companies' apps or websites, so there is nothing for a Do Not Track signal to turn off, and the app does not respond to one.

Children

Leanroll is not directed to children under 13, and we do not knowingly collect data from them. If you think a child has used the app, email us and we will help delete the data.

Where the law requires it, the app asks Apple for your age range. The answer stays on your iPhone, is used only to apply age protections, and is never sent to us or anyone else. If Apple says you are under 13, or you choose not to share your age range where it is required, the app turns off usage analytics and Apple Ads attribution (see RevenueCat above).

Security and where data is processed

The app talks to its service providers over encrypted connections (HTTPS). PostHog (US cloud), Sentry and RevenueCat process data in the United States.

Changes to this policy

If we change this policy, we will post the new version here with a new effective date. If a change affects how we use data you already gave us, we will tell you in the app first.

Contact

[email protected]

Back to top