Who we are
TrueClean publishes the TrueClean iPhone app and this website. This notice explains the information used when you choose its tools. Contact support@truecleanapp.com for privacy or support questions.
Permissions determine the content available to the app. Much of its review work happens on your iPhone. Google, Apple, file providers, confirmed newsletter destinations and website hosting still process their respective network interactions.
Photos and videos
With your Photos permission, TrueClean reads accessible media identifiers, dates, types, dimensions and duration. It displays previews and supports review queues, app collections and Photos albums. Selected Photos access includes only the items you share.
Smart suggestions use Apple’s on-device image and text analysis on previews. Pixels and recognized text are processed temporarily; the stored Smart history contains identifiers, labels, availability and change-detection information rather than the recognized text or image. Suggestions can be wrong.
Some previews or originals may be retrieved from iCloud when a chosen feature needs them. Export stages selected originals temporarily and sends them to your chosen destination; originals can retain embedded information such as time or location. Collections and albums are references, not independent backups. Photo deletion requires a separate review and Apple’s confirmation and can affect iCloud and synced devices.
Contacts and contact backups
A Contacts scan reads accessible identifiers, names, organization names, phone numbers and email addresses to display entries and suggest possible duplicates. The app can also read list names and, after your action and where the account permits it, create lists or assign selected contacts. You can open an entry in Apple’s editor.
Bulk deletion requires a local vCard backup of the exact selection and a separate confirmation. A vCard can include supported contact fields beyond those visible in the scan. Durable selection backups remain in the app’s local support storage without automatic age-based expiry, including after deletion; the current app has no per-backup deletion manager. Restoration is manual and is not guaranteed. Temporary backups made for sharing duplicate groups can be cleared by iOS.
If you export a vCard, your chosen recipient or storage provider receives that copy. Contact changes may sync through the Contacts account. Suggested duplicates are not automatically merged.
Files, saved folders and exports
TrueClean inspects folders you explicitly add through the Files picker and their accessible subfolders. It reads names, paths, types, sizes and modification dates, and can read bytes to compare exact duplicates. Scan available content refreshes the permitted Photos overview and saved accessible folders; it grants no blanket access to the phone or other apps’ private storage.
Saved folder-access bookmarks are kept in protected, backup-excluded storage on the device. Forget removes that scan bookmark and its current review items, without deleting the folder’s files. Remembered export destinations are separate settings that must be forgotten through the relevant collection’s export controls.
Native Apple services display supported thumbnails and previews. Scans and automatic thumbnails skip recognized unavailable cloud placeholders. Explicitly opening a full preview may retrieve a file from its provider. Apple and providers may keep their own caches. Previewing does not queue or delete a file.
File deletion requires confirmation of the reviewed queue. Each file is checked and processed in turn. Stop prevents later operations after the current one finishes; it cannot reverse completed deletions. Provider deletion may be permanent or sync to other devices. Files recovery is not guaranteed.
When you export to iCloud Drive, Google Drive or another Files provider, that service receives the selected copies under its own terms. A successful copy or local size check does not verify remote upload. Exported copies remain with the destination until you manage them there.
Optional Google and Gmail access
Non-Gmail tools do not require a Google connection. Google’s native sign-in flow requests basic account identity and gmail.readonly. The SDK can receive profile information; TrueClean uses account ID and email to show the connected account and keep results and actions separate. Saved credentials are managed by the Google Sign-In SDK in iOS Keychain. We do not receive your Google password.
The initial permission can read messages and settings. Discovery focuses on category searches, sender, subject, date, size estimates and related identifiers. Subscription discovery reads list and unsubscribe headers and groups results on the phone. Search results, selections and pagination stay in memory, rather than a persistent mailbox database.
Separate permission for Trash
Enable moving to Trash asks Google for gmail.modify, a broader permission that can allow reading, composing and sending. TrueClean uses it for the implemented, user-confirmed move-to-Trash feature. The app does not send Gmail messages, create Gmail drafts, permanently delete messages or empty Trash.
Granting permission moves nothing. You review the connected account and exact selection and confirm before requests go directly to Gmail. Stop prevents later requests after the current one finishes. A lost or failed response can leave the outcome uncertain; changes are not automatically retried. Gmail changes can sync to other clients and follow Google’s retention and recovery rules.
Subscription checks and requests
When you choose a candidate for automatic unsubscribe, TrueClean temporarily retrieves that complete selected email from Gmail, including its body and any attachments, to check its signed instructions on the iPhone. Automatic checks are limited to messages up to 8 MiB. The complete message is held in memory for the check and is not deliberately saved, backed up, logged, sent to an AI service or uploaded to a TrueClean mail-processing server. Memory is released normally; secure erasure of system memory is not promised.
The device’s system DNS service looks up the public signing key. The query includes a signing domain and selector, not the email body or Google credentials. DNS providers and the sender’s DNS operator may observe that lookup and its timing.
A successful check shows the account, signing domain and destination before confirmation. Batch use checks supported selections individually, then sends only the requests you confirm as ready. Unsupported, failed or expired checks need review or a manual option.
After confirmation, the phone sends an HTTPS request directly to the verified sender destination. Its URL can contain your email address or a recipient-specific token. The destination receives that URL, the unsubscribe request, your network address and timing. The request contains no Google token, email body, attachment, browser cookie or referrer. Redirects are not followed, and uncertain unsubscribe requests are not automatically retried.
Unsubscribe requested means a destination accepted the request. It does not prove list removal or delete old email. A manual website link or prefilled email draft is handled by your browser or mail app. TrueClean does not send that draft automatically. Opening a sender’s link may reveal that an address is active.
Google data, history and Limited Use
Search results, subscription groups and confirmations stay in memory and reset as the relevant account, category or scan changes. Confirmations expire within five minutes or earlier signature expiry; that expiry limits authorization to send, not immediate memory erasure. There is no persistent Trash queue or mailbox-content database.
Up to 300 unsubscribe receipts are retained in a protected, backup-excluded on-device file. They contain hashed account/group identifiers, validated domain labels, status and time. They remain derived Google data. Receipts exclude subjects, bodies, sender email addresses, raw list IDs, message IDs, full unsubscribe URLs and Google credentials. Repeated account/group actions replace a receipt, and the limit can displace older entries; there is no automatic age-based expiry.
Clear receipts for the connected account in More → Email → Subscriptions & unsubscribe → Action history → Clear local history. Disconnect clears local SDK sign-in state. Revoke TrueClean’s Google access also requests Google-side revocation. Neither action clears the separate history, resubscribes you or undoes earlier changes. Uninstalling is not a substitute for revoking Google authorization.
TrueClean’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements, and the applicable Google Workspace user-data policy.
Google data and derived information are used only for the visible Gmail review, subscription-management and confirmed Trash features described here. We do not sell this information, use it for advertising or credit decisions, or use it to train generalized AI models. Transfers and human access are limited to the disclosed user-authorized features and Google’s narrowly permitted circumstances, including applicable legal and security exceptions. Contacting support is not blanket permission to read mail.
Other local records and purchases
The app keeps some review progress, media identifiers, collection names and membership, Smart labels, free-allowance counters, cleanup metrics, export receipts and remembered destinations locally. These records support the features and resuming reviews. Export history retains up to 50 receipts and may include filenames, destination labels, size-check outcomes and source media IDs. Destination checks you record are your local notes, not proof from a cloud provider.
Most local records have no automatic age-based expiry. Individual controls remove their stated records; there is no universal in-app erase-everything control. Deleting the app rather than offloading normally removes app-container data under iOS handling. Some preferences and retained contact backups may be included in device backups. Backups and exported copies need separate management.
Temporary media staged for export is cleaned up when that flow finishes where possible. Abandoned export folders older than 24 hours are checked for removal on a later app launch. Other temporary files and preview caches are subject to iOS handling.
Apple handles in-app purchases and payment details through StoreKit. TrueClean checks verified entitlements for Pro access. The current app implements a one-time non-consumable product, not an automatically renewing subscription; Apple shows availability and price when offered.
This website and support messages
Vercel hosts this website. Delivering and protecting pages can involve request information such as IP address, requested URL, time, browser information and response status. This is separate from on-device content processing and does not give hosting access to your photo library or Gmail. Infrastructure information is subject to the deployed hosting configuration, provider retention practices and Vercel’s privacy notice.
The website has no Google sign-in, mailbox upload, advertising tracker, analytics script or support-upload form. Fonts are served from this website, without a request to a third-party font service. The selection example uses invented filenames, stays in page memory and is reset when the page reloads. It does not read files or send selections anywhere.
If you email support@truecleanapp.com, we receive your address, message and anything you choose to send. Spacemail hosts the support mailbox, and correspondence is forwarded to a Google Gmail inbox used for support; copies can be retained by both services. We use this correspondence to respond, investigate your report and meet applicable obligations. Records are retained only as reasonably needed for those purposes, then deleted or de-identified unless a legal or security reason requires retention. Contact us about a specific message or deletion request.
Do not send passwords, verification codes, Google tokens, private unsubscribe links or full personal files. A short error code or redacted screenshot is usually enough.
Your choices and privacy requests
You can change Photos and Contacts access in iOS Settings, forget scan folders, manage remembered export destinations, clear local Gmail history, and disconnect or revoke Google access. Google authorization can also be managed in your Google Account. Revocation limits future access; it does not reverse earlier actions or remove copies held by a provider or recipient.
Where applicable law gives you rights to access, correct, delete, restrict or object to processing, email support@truecleanapp.com. We may need proportionate information to verify and handle a request, but never your Google password or tokens. We cannot remotely inspect or erase app-only content; we can explain local controls or direct you to the service holding a copy. Requests are handled under the law that applies.
Policy changes will be posted here with an updated date. Where required, we will provide additional notice or request consent before materially different use. Contact TrueClean at support@truecleanapp.com with questions.