Privacy and access

Privacy policy

Effective date: Pending owner approval — not yet effective · Responsible publisher: Publisher details pending owner approval

What the app accesses

When you authorize a Gmail account, the app reads your account email identifier, message identifiers, sender and subject information, dates, labels, mailing-list headers and attachment-presence information. Google may return a short message snippet, which is used transiently to recognize important records. Message bodies, snippets, OAuth tokens and private unsubscribe URLs are not saved in the app’s Room database.

The app requests Google’s restricted gmail.modify permission to scan mail and perform user-confirmed Trash and Restore actions. The permission allows broader Gmail access than this app uses. This app does not use it to send email, permanently delete messages or make unattended cleanup decisions.

What stays on your device

The app stores scan metadata, local classifications, remembered account identifiers, preferences, sender Keeps, review selections, short-lived scan checkpoints, subscription action reports and operation journals. Different accounts have separate local records. Protected-message override consent is session-specific and must be given again after restart or a new scan.

Android app-private storage protects these records from ordinary access by other apps. Saved files rely on Android’s device/user storage encryption; this is not additional database-level encryption, and it does not protect against every compromised-device threat. New Gmail access/work requires Android reporting active protected storage encryption, normal credential storage and an unlocked user. Unverified or unprotected states pause Gmail work. App backups are disabled. OAuth access tokens remain in memory or are managed by Google Play services; this app does not save them in Room or DataStore.

Network requests and external actions

• Authorization and Gmail API requests go to Google over HTTPS. Requests can include authorization credentials, mailbox queries and the message identifiers needed for your chosen actions. Google handles this traffic under its own policies.
• When you choose an unsubscribe option, your browser or email app may receive a sender-supplied URL or a draft recipient, subject and content. Those destinations may receive list or subscriber identifiers. Review the destination before continuing; the app does not claim a completed unsubscribe merely because a page opened.
• If you contact support, we receive the information you choose to send. Do not send OAuth tokens, passwords, complete mailbox exports or private message contents.

Use, sharing and Limited Use

Google user data is used only to provide the app’s user-facing mailbox review, protection, Trash, Restore and recovery features. It is not sold, used for advertising, used to train generalized AI models, or sent to external analytics or AI services.

Gmail Cleaner (working title)’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Retention and deletion

Saved local scan and review information remains until replaced by a later scan or removed through the app’s privacy/account controls. Interrupted-scan checkpoints are short-lived. Operation journals support accurate outcome verification and recovery; unresolved operations must be checked before account removal or a full reset.

Use Settings → Privacy and data to clear scan data, manage saved data or reset the app. Use Accounts to remove a local account. Clearing a scan does not remove the durable recovery journal. Removing local data does not delete mail from Gmail. Uninstalling Android applications generally removes their private local storage, including this app’s recovery history, so resolve outstanding operations first.

Revoke Google access

You can revoke access through your Google Account’s third-party connections. Revocation stops future authorized Gmail access but does not automatically erase existing device-local results. Remove those through the app as described above. See the step-by-step removal guide.

Notifications, diagnostics and this website

Ongoing and completion notifications communicate operation progress without email subjects, message content or account addresses. Local diagnostics include timings, request/quota estimates, retries, failures and renewal counts. The app contains no third-party crash-upload, advertising or analytics service.

This static website uses no analytics, tracking cookies, sign-up forms or remote fonts. The selected host, Cloudflare Pages, processes web requests, including network and request metadata, under its own infrastructure practices. See hosting provider privacy information. Voluntary support correspondence is separate from device-local app storage.

Contact and changes

Responsible publisher: Publisher details pending owner approval.
Privacy/support contact: Support email pending owner approval.
Security contact: Security contact pending owner approval.

This policy must be reviewed when app behavior or data flows change. The current version and effective date will be shown on this page. Publication of this policy is not evidence of Google OAuth verification or Google Play approval.