PRIVACY POLICY
Clean Ninja: Storage Cleaner
IMPORTANT PRIVACY INFORMATION
Clean Ninja is an Android storage-management application that helps you review and clean device storage, including by identifying similar or duplicate photos, large videos, screenshots and other items, showing a storage breakdown, and providing related organization and cleanup tools. The Service also includes Email Cleaner functionality that allows you to connect supported email accounts so that Clean Ninja can analyze, organize and help manage mailbox content.
To provide these features, Clean Ninja may access photos and videos that you make available through device permissions, information about storage capacity and usage, anonymous account and installation identifiers, subscription information, and email-account and mailbox information when you use Email Cleaner. Mailbox information may include sender and recipient information, subject lines, message content, attachments, message and thread identifiers, timestamps, labels or folders, status information, and mailbox actions you request.
Clean Ninja does not currently use artificial-intelligence or machine-learning processing for the storage-cleaning and Email Cleaner functions described in this Policy. The Service may use automated rules, media characteristics and other technical logic to identify similar or duplicate items, organize content and present cleanup recommendations. These functions are not used to make decisions that produce legal or similarly significant effects about you.
We also receive device and advertising identifiers, including Android advertising or SDK-generated identifiers, IP address and approximate location, app and device information, product events, attribution data, crash logs and diagnostics, push-notification tokens, storage capacity and usage information, permission statuses, install or last-cleanup timestamps, and limited website cookie or web-storage information where our marketing website uses those technologies. We use this information to operate and secure the Service, provide support, manage subscriptions, understand performance, test and improve features, measure advertising, and deliver or measure advertisements.
Clean Ninja may display third-party advertising inside the App and may also advertise Clean Ninja on external platforms. We use advertising, attribution and measurement technologies to serve or measure ads, attribute installs and subscriptions, understand campaign performance and support paid acquisition. We do not disclose the contents of your photo or video library, email messages or email attachments to advertising partners for ordinary ad serving or campaign measurement.
BY USING THE SERVICE, YOU PROMISE US THAT (I) YOU HAVE READ, UNDERSTAND AND AGREE TO THIS PRIVACY POLICY, AND (II) YOU ARE OVER 16 YEARS OF AGE (OR HAVE HAD YOUR PARENT OR GUARDIAN READ AND AGREE TO THIS PRIVACY POLICY FOR YOU) AND (III) ACCEPT OUR DATA COLLECTION AND PROCESSING PRACTICES DESCRIBED BELOW. If you do not agree, or are unable to make this promise, you must not use the Service. In such case, you must (a) contact us and request deletion of your data; (b) cancel any subscriptions using the functionality provided by Google Play; and (c) delete the App from your devices.
To learn more about the information we collect, see Section 2; for the purposes of processing, see Section 3; for the parties with whom information may be shared, see Section 5; and for your privacy rights, see Section 6. Questions and privacy requests may be sent to support@orvanta.limited.
PRIVACY POLICY
This Privacy Policy explains how Orvanta Digital Limited (“Orvanta”, “we”, “us” or “our”) collects, uses, stores, discloses and otherwise processes personal data when you use the Clean Ninja: Storage Cleaner mobile application (the “App”), the related services and features made available through it, and marketing webpages that link to this Privacy Policy (together, the “Service”).
Translations of this Privacy Policy may be provided for convenience. If a translated version differs from the English version, the English version will prevail to the extent permitted by applicable law.
Definitions
In this Privacy Policy, “personal data” or “personal information” means information that identifies, relates to, describes or can reasonably be linked to an individual or household, as defined under applicable law. “Process” includes collecting, using, storing, accessing, analyzing, transmitting, disclosing and deleting information. “GDPR” means Regulation (EU) 2016/679. “UK GDPR” means the GDPR as incorporated into United Kingdom law. References to the “EEA” mean the European Economic Area.
TABLE OF CONTENTS
2. Categories of Personal Data We Collect
3. Purposes for Which We Process Personal Data
4. Legal Bases for Processing Personal Data (EEA and UK Users)
8. International Data Transfers
9. How We Protect Your Personal Data
11. Changes to This Privacy Policy
12. U.S. States Privacy Notice
1. PERSONAL DATA CONTROLLER
Orvanta Digital Limited, a company registered under the laws of Cyprus under registration number HE 496479, with its registered office at Zinonos Kitieos, 15, Ypsonas, 4187, Limassol, Cyprus, is the controller of personal data processed for the purposes described in this Privacy Policy.
Certain third parties, such as Google, connected email-service providers or advertising platforms, may act as independent controllers for processing that they determine themselves. Their processing is governed by their own privacy notices. Where a provider processes personal data on our behalf, we use the provider for the functions described in this Policy and under the contractual arrangements applicable to that service.
2. CATEGORIES OF PERSONAL DATA WE COLLECT
We collect information that you provide or make available to the Service, information generated automatically when you use Clean Ninja, and information received from Google, connected email providers and other service providers. The categories collected depend on the features you use, your device and privacy settings, your subscription status, and the permissions or account connections you choose to grant.
2.1. Information you provide or make available directly
2.1.1. Account, identifiers and email-account connection information
You can use core storage-cleaning functionality without providing a conventional profile name or email address. Clean Ninja may assign an anonymous user, installation or account identifier used for account creation, authentication, support, entitlement recognition and account deletion.
When you connect an email account to use Email Cleaner, you may provide or authorize access to information necessary to establish and maintain the connection. Depending on the connection method, this may include your email address, account identifier, Google OAuth authorization information or tokens, permissions granted through Google Sign-In, Android Credential Manager or AuthorizationClient, and other information needed for the supported mailbox connection. You should connect only accounts that you are authorized to access.
2.1.2. Photos, videos and related media information
To provide storage-cleaning features, Clean Ninja may request access to your photo and video library or to individual media items you select. The Service may process photos, videos and related information such as file size, media type, dimensions, timestamps, local identifiers and other characteristics used to find similar or duplicate photos, large videos, screenshots or other items that may be suitable for cleanup.
Media processing may occur locally on your Android device or through supporting cloud infrastructure where required by the selected feature. Granting photo or video access does not necessarily mean that every photo or video on your device is transmitted to or stored on our servers.
2.1.3. Email and mailbox data
When you use Email Cleaner, Clean Ninja may access and process information associated with the email account you connect, including your email address and account identifiers; sender and recipient information; subject lines; message content; attachments; message and thread identifiers; timestamps; mailbox folders, labels or categories; read, unread or other status information; sender or message counts; connection status; and other mailbox metadata.
The Service may also process the instructions and mailbox actions you initiate, such as reviewing, selecting, organizing, labeling, archiving or deleting messages. The exact data available to Clean Ninja depends on the permissions granted by you and the technical capabilities of the connected email provider.
2.1.4. Purchase and subscription information
Payments for Clean Ninja subscriptions are processed through Google Play. We do not receive or store your full payment-card number. We may receive limited transaction and entitlement information such as the subscription product selected, price and currency, purchase or restore status, subscription status, renewal or expiration status, transaction or purchase identifiers, purchase date, trial status, and refund or cancellation information where Google makes it available. RevenueCat may help us receive and manage subscription and entitlement information.
2.1.5. Communications, support, ratings, surveys and quiz responses
If you contact us, we may process your name, email address, the content of your message, selected photos, screenshots or other attachments you choose to provide, account or transaction information relevant to the request, troubleshooting information, and our response history. If you rate Clean Ninja, submit a written review, answer an onboarding or personalization quiz, or participate in a Typeform or other survey, we may process the rating, answers, comments and other information you choose to submit.
2.2. Information we receive from third parties
2.2.1. Google Play and Google platform services
Google may provide transaction, purchase, subscription and entitlement information when you make a Google Play purchase. Google platform services may also provide information necessary for App operation, authentication, advertising, notifications or billing under Google’s own terms and your device or account settings. For more information, see Google’s Privacy Policy.
2.2.2. Connected email providers
When you connect Gmail or another supported mailbox, Google or another relevant email provider may make account, authorization and mailbox information available to Clean Ninja according to the permissions you grant. Clean Ninja uses that information only for the Email Cleaner and related account-management purposes described in this Policy, subject to applicable provider requirements.
2.2.3. Analytics, advertising, attribution, diagnostics and subscription providers
Our service providers may return information generated from their services, such as campaign attribution, installation or event identifiers, ad interaction information, subscription status, crash or performance information, analytics results, fraud or security signals, and advertising-measurement information. We use that information for the purposes described in Section 3.
2.3. Information collected automatically
2.3.1. Referral, attribution and campaign information
We may record the advertisement, campaign, deep link, website, application or other source that referred you to Clean Ninja, together with AppsFlyer or Adjust identifiers, campaign parameters, attribution results, fbc/fbp identifiers where applicable, and related conversion or advertising events. This helps us understand which campaigns lead to installs, trials, subscriptions or other relevant events.
2.3.2. Device, network, storage and approximate-location information
We may collect IP address; device type and model; Android and app version; language and time zone; memory and carrier information; app version and build; device storage capacity and usage; permission statuses; install or last-cleanup timestamps; a local UUID used for support tickets; and other technical characteristics made available by your device or integrated SDKs. We may infer an approximate country, region or city from an IP address. We do not collect precise GPS location for the processing described in this Policy unless a specific feature requests it and you grant the relevant permission.
2.3.3. Usage and product-event data
We record information about how you interact with the Service, such as screens viewed, buttons or controls selected, features used, session duration, cleanup events, storage-related events, email-connection status, aggregate sender or message counts used to measure Email Cleaner usage and performance, subscription or restore events, A/B test assignments and results, and other product interactions. We do not need to read the contents of every photo, video or email message merely to record a product event.
2.3.4. Advertising and device identifiers
Depending on your device settings, consent choices and applicable law, we and our providers may receive identifiers such as the Android Advertising ID (AAID), Firebase installation identifiers, AppsFlyer or Adjust identifiers and other SDK-generated identifiers. We use these identifiers for analytics, attribution, fraud prevention, ad serving, campaign measurement and, where permitted, advertising personalization.
2.3.5. Crash logs, diagnostics and performance data
We collect crash reports, error logs, diagnostic information, performance measurements and technical context needed to identify and resolve failures, maintain reliability and protect the Service. This may include app version, device and operating-system information, timestamps, error codes and information about the feature being used when a problem occurred.
2.3.6. Push-notification tokens and notification events
If you enable remote notifications, we may receive a device push token and related technical information needed to deliver notifications through Firebase Cloud Messaging (FCM). Clean Ninja may also generate local on-device notifications, including trial, cleanup, streak or discount reminders. Remote notifications may include service updates and, where permitted, promotional campaigns. You can disable notifications in your Android settings.
2.3.7. Marketing website cookies and web storage
Our marketing website does not provide account sign-up or payment functionality. Where the website uses cookies, pixels, local storage or similar technologies, we may process cookie or browser identifiers, IP address, page views, referral information and interaction data for security, analytics and advertising measurement, subject to any consent or opt-out requirements that apply in your location.
2.4. Sensitive and special-category information
Clean Ninja does not require you to provide health information, political opinions, religious beliefs, sexual-orientation information or other special-category data merely to create an anonymous account or purchase a subscription. However, photos, videos, email messages, attachments, support materials or other content you make available to the Service may incidentally contain information that applicable law treats as sensitive or special-category data.
Email access information may also include account-login or authorization information that certain U.S. state laws classify as sensitive personal information. We process sensitive information only as needed to provide the feature you request, maintain security, comply with law or otherwise as permitted by applicable law. We do not use the contents of your photo library or mailbox to build unrelated sensitive-interest profiles for advertising.
2.5. Sources of personal data
The sources of personal data described in this Policy include: (a) you, when you grant permissions, connect an email account, initiate mailbox or cleanup actions, purchase a subscription, contact support, rate the Service or answer a survey or quiz; (b) your device and use of the App or marketing website; (c) Google, in connection with Google Play purchases, platform services, authentication and notifications; (d) connected email providers such as Google; and (e) analytics, advertising, attribution, diagnostics, subscription-management and other service providers.
3. PURPOSES FOR WHICH WE PROCESS PERSONAL DATA
We process personal data for the purposes described below. The information used for a particular purpose depends on the feature, your settings and permissions, and the providers involved.
1. To provide storage-cleaning and media-management functionality
We process device-storage information, photo and video access, media characteristics, anonymous identifiers and product events to show storage breakdowns, identify similar or duplicate photos, surface large videos or screenshots, organize items, present cleaning recommendations and carry out cleanup actions that you request.
Clean Ninja does not currently use AI or machine-learning processing for the storage-cleaning functions described in this Policy. Automated similarity detection, organization and cleanup suggestions are used to assist your own review and are not used to make decisions that produce legal or similarly significant effects about you.
Amazon Web Services (AWS) provides cloud hosting and infrastructure used to operate Clean Ninja. AWS may process account, technical or other information necessary for the cloud functions that use its infrastructure.
2. To provide Email Cleaner and connected-mailbox functionality
We process email-account identifiers, authorization information, message and thread metadata, sender and recipient information, subject lines, message content, attachments, mailbox status information and the mailbox actions you request to connect supported accounts, analyze and organize mailbox content, identify messages that may be suitable for cleanup, present recommendations and carry out actions initiated by you.
Google Sign-In / Google authorization services and the Gmail API may be used to authorize and operate Gmail-based Email Cleaner features. The Gmail API permissions identified for this product include gmail.modify and gmail.settings.basic. Our use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements.
The exact Gmail information available to Clean Ninja depends on the permissions and scopes you grant. You can review or revoke connected-account permissions through your Google account settings, although doing so may disable the relevant Email Cleaner functionality.
3. To provide subscriptions and paid access
We process subscription product, price and currency, purchase and restore status, transaction events and entitlement information to unlock premium features, synchronize access across relevant app states, handle restore requests, diagnose purchase issues and measure subscription performance.
Google Play processes purchase payments and payment-method information. RevenueCat may help us receive and synchronize subscription status and premium-feature entitlements.
4. To provide customer support and collect feedback
We use identifiers, contact details, support messages, selected photos or screenshots, transaction information and diagnostic context to answer questions, troubleshoot problems, investigate account or purchase issues, respond to complaints and improve support quality.
Zendesk may be used to organize, prioritize and respond to support communications. Ratings, written reviews, quiz answers and survey responses may be used to understand user satisfaction and improve the product. Where a survey service is used, participation is optional.
5. To communicate with you and deliver notifications
We may send service communications concerning account access, email connections, subscription status, purchases, security, support, changes to the Service or legal terms, and other operational matters. Marketing emails are not currently sent.
Firebase Cloud Messaging (FCM) may process a device push token and notification payload to deliver remote notifications. Clean Ninja may also use local on-device notifications. Where used, eSputnik may support service communications. Marketing emails are not currently sent. Promotional push notifications are sent only where permitted by applicable law and your notification settings.
6. To analyze, test, maintain and improve the Service
We process device, storage, usage, transaction, diagnostic and limited feature information to understand how Clean Ninja is used; measure performance; identify errors; conduct A/B tests; evaluate conversion and retention; improve similarity detection and other recommendations; develop features; and improve usability, reliability and customer experience.
Firebase Analytics and Firebase Crashlytics, Google Analytics, Amplitude, Sentry and related analytics or diagnostics services may process device identifiers, event information, technical data, crash data and related analytics information for these purposes. Localazy may support localization and language-resource workflows.
7. To advertise Clean Ninja, measure campaigns and display third-party ads
We use advertising identifiers, attribution information, app events, approximate location, device information and limited purchase or conversion events to attribute installs and subscriptions, measure campaign performance, build or measure audiences, serve advertisements and, where permitted, personalize advertising. Clean Ninja may display third-party advertisements inside the App and may also be promoted on external platforms.
AppsFlyer and Adjust support attribution and conversion measurement. Advertising and measurement partners may include Meta, Google Ads / AdMob, TikTok, Snapchat, AppLovin, and Unity Ads / ironSource. These partners may process identifiers, app events, campaign data and related technical information according to the configuration used and your privacy choices.
Where consent or another opt-in is required for advertising identifiers, cross-app tracking or personalized advertising, we process that activity in accordance with your choice and applicable Android or Google settings. We do not provide advertising partners with the contents of your photo or video library, email messages or email attachments for ordinary ad serving or campaign measurement.
8. To protect the Service, enforce agreements and prevent fraud
We process account and installation identifiers, device and network information, transaction events, diagnostic information and security signals to authenticate users, detect suspicious or unauthorized activity, prevent subscription or advertising abuse, protect infrastructure, investigate security incidents and payment disputes, enforce our Terms of Use, establish or defend legal claims and protect Orvanta, users, providers and third parties.
9. To comply with legal obligations
We may process, preserve or disclose information where necessary to comply with applicable laws, tax or accounting requirements, consumer-protection rules, data-protection obligations, court orders, subpoenas, lawful government requests, sanctions requirements or other binding legal process.
10. Corporate transactions and business administration
We may process or disclose information for audits, financing, insurance, due diligence, restructuring, merger, acquisition, sale of assets, insolvency or another corporate transaction, subject to appropriate confidentiality, security and legal safeguards.
4. LEGAL BASES FOR PROCESSING PERSONAL DATA (EEA AND UK USERS)
This section applies where the GDPR, UK GDPR or another applicable European data-protection law requires us to identify a legal basis. The applicable basis depends on the category of data and the purpose for which it is processed.
4.1. Performance of a contract
We rely on contractual necessity, including taking steps at your request before entering into a contract, to create and administer anonymous account functionality; provide storage-cleaning, media-management and Email Cleaner features you request; process mailbox actions initiated by you; recognize and administer subscriptions, trials and paid entitlements; provide customer support; and perform our obligations under the Terms of Use and Subscription Terms.
4.2. Consent
Where consent is required, we rely on your consent for processing such as optional device permissions, connecting an email account where consent is the appropriate legal basis, certain processing of sensitive or special-category data, optional push notifications, non-essential website cookies, and advertising or tracking activities that require consent under applicable law or platform rules. You may withdraw consent through the relevant device, account or Service controls or by contacting us. Withdrawal does not affect processing that was lawful before withdrawal.
4.3. Legitimate interests
We may rely on legitimate interests, balanced against your rights and reasonable expectations, to operate, secure, troubleshoot and improve Clean Ninja; analyze feature use and product performance; conduct A/B testing; measure advertising where consent is not legally required; prevent fraud, abuse and unauthorized access; enforce agreements and protect legal rights; respond to complaints and disputes; conduct audits and business administration; and use aggregated or de-identified information for research, planning and statistical purposes.
4.4. Compliance with legal obligations
We process information where necessary to satisfy legal, regulatory, tax, accounting, security, consumer-protection, sanctions, law-enforcement or other obligations that apply to us.
4.5. Sensitive or special-category information contained in user content
Photos, videos, email messages, attachments or support materials may contain special-category information. Where Article 9 GDPR, UK GDPR or comparable law applies and processing is not covered by another lawful condition, we rely on explicit consent or another condition permitted by applicable law for the specific feature. We do not use such content to infer sensitive characteristics for unrelated advertising.
5. SHARING OF PERSONAL DATA
We do not disclose personal data indiscriminately. We disclose information only as reasonably necessary for the purposes described in this Policy, subject to contractual, technical or legal protections where appropriate.
5.1. Service providers and contractors
We may disclose relevant categories of personal data to providers that support hosting and infrastructure; Google Play billing and subscription administration; Google account authorization and Gmail mailbox access; analytics and A/B testing; crash reporting and diagnostics; customer support and surveys; Firebase Cloud Messaging and service communications; localization; attribution, advertising and ad serving; security and fraud prevention; and related operational functions. These providers may include AWS, Firebase/Google, Amplitude, AppsFlyer, Adjust, Sentry, Zendesk, RevenueCat, Meta, TikTok, Snapchat, AppLovin, Unity/ironSource, Localazy and other providers described in this Policy. Provider access is limited to information reasonably necessary for the relevant service or as otherwise permitted by law. Although OpenAI and Google Gemini / Vertex AI were identified as technology providers that may be used in future configurations, the current Service configuration described in this Policy does not use AI or machine-learning processing for the core storage-cleaning or Email Cleaner functions.
5.2. Affiliates
We may share information with entities that control, are controlled by, or are under common control with Orvanta Digital Limited. Affiliates must process the information consistently with this Policy unless they provide a separate notice and lawful basis.
5.3. Courts, regulators, law enforcement and other authorities
We may disclose information when we reasonably believe disclosure is required by law or legal process, necessary to protect rights or safety, needed to investigate fraud or security incidents, appropriate to enforce our agreements, or otherwise permitted by applicable law. We may challenge or narrow requests where legally permitted.
5.4. Business transfers and professional advisers
Information may be disclosed to prospective or actual purchasers, investors, lenders, insurers, auditors, professional advisers or successor organizations in connection with a merger, acquisition, financing, reorganization, sale of assets, insolvency or similar transaction, subject to appropriate confidentiality and legal safeguards.
5.5. Aggregated and de-identified information
We may use or disclose information that has been aggregated or de-identified so that it cannot reasonably be linked to an individual. We maintain de-identified information in de-identified form and do not attempt to re-identify it except as permitted by law or to test whether our de-identification measures are effective.
5.6. No public sharing by default
Clean Ninja does not provide a public feed or make your private photos, videos, email messages, attachments or mailbox information visible to other users by default. We may transmit information to Google, a connected email provider or another service when you direct the Service to authenticate, access a mailbox, perform a mailbox action, restore a purchase or otherwise interact with that provider. We do not disclose the contents of your photo or video library, email messages or email attachments to advertising partners for ordinary ad serving, campaign measurement or targeted advertising.
6. YOUR PRIVACY RIGHTS
Depending on your location and applicable law, you may have rights to access personal data, obtain a copy, correct inaccurate data, request deletion, restrict or object to certain processing, withdraw consent, request portability, opt out of certain advertising-related processing, or complain to a supervisory authority. These rights are subject to legal conditions, limitations and exemptions.
6.1. Account deletion
Clean Ninja provides self-service account deletion through the App and may also provide a web-based deletion route. Deleting your account does not cancel a Google Play subscription. You must separately cancel an active subscription through your Google Play account settings. You can manage media permissions, notification permissions, advertising choices and other device-level settings through Android or Google controls, and you can disconnect a supported email account through the controls made available for that connection.
6.2. How to submit a privacy request
To exercise a privacy right that cannot be completed through self-service functionality, contact us at support@orvanta.limited. Describe the request you would like us to process and provide information reasonably necessary to identify the relevant account, installation, subscription or support record. We may ask for information needed to verify your identity and protect against fraudulent requests. If you are in the EEA or UK, applicable rights may include access, rectification, erasure, restriction, objection, portability, withdrawal of consent and the right to complain to a competent supervisory authority.
6.3. Authorized agents
Where applicable law permits an authorized agent to submit a request on your behalf, we may require written authorization or other evidence of the agent’s authority and may also ask you to verify your identity or confirm that you authorized the request.
6.4. Automated decision-making
Clean Ninja does not make decisions about you solely by automated means that produce legal or similarly significant effects. Automated storage analysis, duplicate or similarity assessments, cleanup recommendations, advertising decisions and other ordinary product personalization do not determine your legal rights, eligibility, employment, credit, insurance or similarly significant interests.
7. AGE LIMITATION
The Service is intended for users aged 16 and older. If you are under 16, you may use the Service only where your parent or legal guardian has reviewed and agreed to this Privacy Policy for you and such use is lawful in your jurisdiction. We do not knowingly process personal data from a person under 16 in circumstances where valid parental authorization or another lawful basis is required but has not been obtained. If you believe a younger person has provided personal data improperly, contact us at support@orvanta.limited.
8. INTERNATIONAL DATA TRANSFERS
Orvanta is established in Cyprus, while our users, providers and technical infrastructure may be located in other countries. Clean Ninja uses AWS infrastructure in the United States, including the us-east-1 (Northern Virginia) region identified for this product. Other providers may process information in the United States, the EEA, the UK or additional countries depending on their infrastructure and the service used.
Where personal data originating in the EEA is transferred to a country that does not benefit from an applicable adequacy decision, we use appropriate safeguards where required, which may include the European Commission Standard Contractual Clauses and supplementary measures. Information about EU adequacy decisions is available from the European Commission.
For restricted transfers from the UK, we may use the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, adequacy regulations or another lawful transfer mechanism, as described in the UK ICO international transfers guidance.
9. HOW WE PROTECT YOUR PERSONAL DATA
We use technical and organizational measures designed to protect personal data against unauthorized access, alteration, loss, destruction or disclosure. Depending on the system, measures may include access controls, authentication, encrypted network transmission, provider security controls, logging, monitoring, restricted production access, software updates, incident-response procedures and data-minimization practices.
No method of transmission, device storage, email access or cloud storage is completely secure. We therefore cannot guarantee absolute security. You are responsible for protecting your device, Google account, connected email accounts, passwords, authorization tokens and other credentials, and for promptly revoking access if you believe an account has been compromised.
10. DATA RETENTION
We retain personal data only for as long as reasonably necessary to provide the Service, fulfil the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes and enforce agreements. The applicable period depends on the type of data, whether you maintain an account or subscription, the feature used and any legal or security requirement.
User data associated with your Clean Ninja account is generally retained while the account remains active or until you use the account-deletion feature. When you delete your account, associated user data is deleted from our active systems, subject to limited retention where required by law or reasonably necessary for security, fraud prevention, transaction records, dispute resolution, backup integrity or other legitimate legal purposes.
Photo, video and mailbox information may be processed locally, transiently, or stored server-side depending on the feature and technical configuration. Where server-side content is associated with your account, it follows the account-deletion rule above unless you delete the content earlier through an available feature or a shorter technical retention period applies. Mailbox actions carried out through the connected email provider may have their own retention or recovery consequences under that provider’s systems.
Subscription and transaction information may be retained for as long as necessary to administer entitlements, handle refund or dispute issues, comply with accounting or legal requirements, and maintain fraud-prevention records. Support communications may be retained for the time reasonably necessary to resolve the request and maintain appropriate business records. Analytics, attribution, advertising and diagnostic providers may retain information according to the settings and contractual arrangements applicable to our use of their services.
Backups and logs may retain limited information for a reasonable period after deletion before being overwritten or isolated from ordinary use. Information that must be retained for legal, security or dispute-resolution reasons is restricted to those purposes and deleted or de-identified when the reason for retention ends.
11. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy to reflect changes in Clean Ninja, providers, technical architecture, legal requirements or our data practices. We will update the “Last Updated” date and provide additional notice where applicable law requires it. If a change materially affects processing that relies on consent, we will obtain renewed consent where required.
12. U.S. STATES PRIVACY NOTICE
Applicability and scope
This section supplements the rest of this Privacy Policy for residents of U.S. states with comprehensive privacy laws, including California and other states where applicable. The rights available to you depend on the state in which you live and the law that applies.
12.1. Categories of Personal Information and Purposes of Processing
During the preceding 12 months, and depending on the features used, we may have collected the following categories of personal information:
- Identifiers, such as anonymous account or installation identifiers, email address, IP address, device identifiers, advertising identifiers, OAuth or connected-account identifiers, and support contact information.
- Customer-record and account information, such as support information, connected-account details and information used to maintain an account or entitlement.
- Commercial information, such as subscription product, purchase, restore, trial, renewal, refund, cancellation or conversion events.
- Internet or other electronic network activity, such as app screens or features used, interactions, session information, referral and attribution events, ad interactions, website page views, cookies or web-storage identifiers, crash information and diagnostics.
- General geolocation information, such as country, region or city inferred from IP address. We do not collect precise GPS location for the ordinary processing described in this Policy.
- Audio, electronic, visual and similar information, including photos, videos, screenshots, email messages, email attachments and other content you make available to Clean Ninja for a selected feature or support request.
- Sensitive personal information, which may include account-login or authorization information and the contents of email messages, as well as sensitive information incidentally contained in photos, videos, attachments or support materials.
- Inferences and derived information, such as similarity or duplicate assessments, media characteristics, product-use patterns, campaign attribution or recommendations used to provide and improve the Service. Clean Ninja does not use this information to make decisions that have legal or similarly significant effects on you.
12.2. Disclosure for business purposes
During the preceding 12 months, we may have disclosed the categories above to the service-provider and recipient categories described in Section 5 for business purposes. For example, identifiers and network activity may be disclosed to hosting, analytics, diagnostics, subscription, support, email-service, advertising and attribution providers; media or mailbox content may be disclosed to hosting or connected-email providers only where needed for the selected feature and configuration.
We may also disclose information to public authorities, professional advisers or transaction counterparties as described in Section 5. We do not disclose the contents of your photo or video library, email messages or email attachments to advertising partners for ordinary ad serving or campaign measurement.
12.3. State privacy rights
Depending on your state, you may have some or all of the following rights: to know or confirm whether we process personal information; access personal information; request deletion; correct inaccuracies; obtain eligible data in a portable format; opt out of sale, sharing, targeted advertising or certain profiling; limit certain uses or disclosures of sensitive personal information; withdraw consent where applicable; appeal certain decisions; and exercise rights without unlawful discrimination.
How to Submit a Privacy Request
To exercise an applicable privacy right, email support@orvanta.limited and describe the request, together with your state of residence where relevant. We may request information reasonably necessary to verify your identity and match the request to account, subscription, device or support records. Where permitted by law, an authorized agent may act on your behalf subject to appropriate verification.
If we deny a request and the law applicable in your state gives you a right to appeal, you may request review by replying to our decision or emailing support@orvanta.limited with the subject line “Privacy Request Appeal.”
12.4. Sale, sharing and targeted advertising
We do not sell personal information for money. We may allow advertising, attribution, analytics and ad-serving partners to collect or receive advertising identifiers, device identifiers, IP address, approximate location, app or website interaction information, attribution events and limited commercial or subscription-conversion events. We may also display third-party advertising in the App. Under some state laws, these activities may be considered a “sale”, “sharing” or processing for targeted advertising even though no monetary payment is made for the data.
Relevant recipients may include advertising networks, social-media platforms, analytics and measurement providers, and attribution services such as Meta, Google, TikTok, Snapchat, AppLovin, Unity Ads / ironSource, AppsFlyer and Adjust. The exact recipients depend on the campaigns, ad inventory and SDK configuration in use.
We do not disclose the contents of your photo or video library, email messages, email attachments or support attachments to advertising partners for ordinary ad serving, campaign measurement or targeted advertising.
Where applicable, you may opt out of sale, sharing or targeted advertising by emailing support@orvanta.limited with the subject “Opt Out of Sale, Sharing, or Targeted Advertising.” You may also use Android, Google account and advertising privacy controls available on your device. Some advertising choices are device- or provider-specific and may need to be repeated after device, account or identifier changes.
We do not knowingly sell or share the personal information of individuals under 18 for targeted advertising where applicable law requires opt-in consent or otherwise prohibits that processing.
12.5. Do Not Track and other privacy preference signals
Browser “Do Not Track” signals generally do not control processing inside an Android application. On our marketing website, where a legally recognized universal opt-out mechanism or preference signal can be applied to the relevant technology, we process that signal as required by applicable law. This is separate from Android device, Google account and advertising privacy controls.
12.6. California-specific information
California residents may have rights under the California Consumer Privacy Act, as amended, including rights to know, access, delete, correct, opt out of sale or sharing, and limit certain uses of sensitive personal information. We do not use sensitive personal information for the purpose of inferring characteristics about a consumer for unrelated advertising.
California “Shine the Light” law may permit residents to request information concerning certain disclosures of personal information to third parties for those third parties’ own direct-marketing purposes. To submit such a request, email support@orvanta.limited with “California Privacy Information Request” in the subject line and identify your California residency.
If you are a California resident using an authorized agent, we may require proof of authorization and may also verify your identity or confirm that you authorized the request, as permitted by law.
12.7. Nevada residents
Nevada residents may submit a verified request to opt out of a covered sale of certain personal information under Nevada law by contacting support@orvanta.limited. We do not sell personal information for monetary compensation as described in this Policy.
12.8. Financial incentives and consumer health information
We do not currently offer a financial incentive or price or service difference in exchange for personal information. Clean Ninja is not a health service and is not designed to collect consumer health data as a separate product category. Photos, videos, email messages, attachments or support materials may nevertheless contain health or other sensitive information. Such information is processed to provide the feature you request and is not used to build a consumer health profile for unrelated purposes.
13. CONTACT US
Orvanta Digital Limited. Registration number: HE 496479. Registered office: Zinonos Kitieos, 15, Ypsonas, 4187, Limassol, Cyprus. For privacy, support or legal questions, or to exercise an applicable privacy right, contact us at support@orvanta.limited.
Last Updated: September 1, 2026