Privacy policy: UpNDown: Gallery Cleaner
This privacy policy applies to the Android app UpNDown: Gallery Cleaner (Google Play package name com.swipegallery.swipeonly, formerly also called "PixWipe"). It explains which data the app processes, why, on what legal basis, and what rights you have.
In short:
- You swipe through the photos and videos stored on your phone. Your pictures are not uploaded, and we don't run servers of our own for the app. You don't need to sign up.
- The app is free and funded by ads from Google AdMob. In the EU, the EEA, the UK and Switzerland, Google's consent form asks you first whether personalised ads may be shown.
- To understand usage and fix crashes, the app uses Google Analytics for Firebase and Firebase Crashlytics.
- The one-time purchase that removes ads is handled by Google Play. We never receive your payment details.
1. Controller
Tobias Marks
MarksFinanceGroup (sole proprietorship), brand "stillmeasure."
Sponheimer Str. 14
55595 Mandel
Germany
Email: contact@stillmeasure.com
Contact form: www.stillmeasure.com/contact/
We have not appointed a data protection officer because we are not legally required to (Section 38 German Federal Data Protection Act (BDSG), Art. 37 GDPR).
2. Your photos and videos stay on your phone
The app reads the photos and videos on your device through Android and shows them one at a time. Whether you keep or delete a picture is decided on your phone. Photos, videos and file names are not sent to us, to Google AdMob or to Firebase.
Permissions the app asks for:
| Permission | What for |
|---|---|
| Photos and videos | show your media one by one |
| Manage media | move files to the trash and delete them without a separate Android confirmation each time |
You can refuse or withdraw these permissions in your Android settings; without access to photos and videos the app cannot show anything.
3. What is stored on your device
The app keeps on your device: the list of items in its trash, your settings (e.g. whether the trash empties itself after 30 days) and the status of your purchase and of your privacy choice.
- Trash: Swiped-away photos and videos go to the app's trash first. From there you can restore them or delete them for good. If you turn it on, the trash empties itself after 30 days.
- Android backup: The app is excluded from Android's automatic backup, so this data is not copied to your Google Account.
Legal basis: storing this data is necessary for the features you use (Section 25(2) no. 2 German Telecommunications Digital Services Data Protection Act (TDDDG); Art. 6(1)(b) GDPR).
4. Ads with Google AdMob
Ads in the app are served by Google AdMob (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Google LLC, USA). Google processes the data for advertising as an independent controller.
According to Google, the ads SDK processes your IP address (from which Google may estimate your approximate location), device and app identifiers (advertising ID if you consent, app set ID), interactions with ads, diagnostic data about the app and SDK, and technical details such as device type, Android version and language.
Your choice (EU, EEA, UK, Switzerland): On first launch the app shows Google's consent form (User Messaging Platform, IAB TCF). With your consent, Google may store and read information on your device and show personalised ads. Without consent you can use the app as usual; Google then only shows non-personalised or limited ads and uses the data only to deliver the ad and to detect fraud. To change your choice, clear the app's data in your Android settings; the app then asks you again on the next launch.
Legal bases: consent for storing and reading information on your device and for personalised ads (Section 25(1) TDDDG, Art. 6(1)(a) GDPR); for limited ads and fraud prevention our legitimate interest in offering the app for free (Art. 6(1)(f) GDPR).
More from Google: How Google uses information from apps · Google Privacy Policy
5. Google Analytics for Firebase and Firebase Crashlytics
Both services are provided by Google Ireland Limited / Google LLC, which acts as our processor (Firebase Data Processing and Security Terms).
Statistics (Google Analytics for Firebase): The app collects the standard events of Firebase, e.g. first launch, app sessions, updates and purchases, together with a random app instance ID, device model, Android version, app version, language and approximate region (derived from the IP address). If the Android advertising ID is available on your device, Firebase can also process it. We use the data to understand how the app is used and to improve it. Photos, videos and file names are not sent.
Crash reports (Firebase Crashlytics): If the app crashes, a report is sent with the place of the error in the code (stack trace), the app state, device model, Android version, free memory, app version, time and random installation IDs. Your photos and file names are not part of it.
Legal basis: our legitimate interest in a stable app that works well (Art. 6(1)(f) GDPR). You can object at any time (section 11); write to us.
6. Purchase via Google Play
A one-time purchase removes the ads for good. It is handled entirely by Google Play (Google Play Billing); Google's terms and privacy policy apply to the payment.
- We never receive payment details (no card number, no bank account, no billing address).
- The app asks Google Play whether the purchase belongs to your Google Account and unlocks it on your device, using the purchase token and product ID.
- In our developer console we see order information from Google (e.g. order number, product, date, price, country, status). We use it to handle requests and to meet tax obligations.
Legal bases: performance of a contract, Art. 6(1)(b) GDPR; statutory retention, Art. 6(1)(c) GDPR.
7. Other Google Play features
- Ratings and updates: The app can show Google Play's rating dialog and point out available updates. We do not learn whether or how you rate.
- Statistics in the Play Console: Google gives us aggregated statistics (e.g. installs by country) and crash reports from users who let Android share diagnostic data with Google, without names or email addresses (Art. 6(1)(f) GDPR).
8. Contacting us
If you write to us, we process your message, your email address and anything else you tell us. Please do not send us private photos unless they are needed for your request. Legal basis: Art. 6(1)(b) GDPR (questions about a purchase), otherwise Art. 6(1)(f) GDPR.
9. Recipients and transfers to the USA
Recipients are Google (Google Ireland Limited; Google LLC) as an independent controller for ads and Google Play and as our processor for Firebase; our email provider Hostinger International Ltd. (Cyprus) for support messages; tax advisers and authorities where required by law. We do not sell personal data.
Google may transfer data to the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework, for which there is an adequacy decision of the European Commission (Art. 45 GDPR); Google also uses the Commission's standard contractual clauses (Art. 46(2)(c) GDPR). More: policies.google.com/privacy/frameworks
10. How long data is kept
| Data | Retention |
|---|---|
| Trash list and settings on your device | until you delete them, clear the app data or uninstall the app |
| Analytics data (Firebase) | at most 14 months, then deleted automatically |
| Crash reports (Crashlytics) | 90 days |
| Advertising data at Google | according to Google's retention periods |
| Order information from Google Play | until the end of the statutory retention period (up to 10 years) |
| Support messages | until your request is resolved, at the latest 3 years after the end of the year of the last message |
11. Your rights and deletion requests
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), to object to processing based on legitimate interests (Art. 21) and to withdraw consent with effect for the future (Art. 7(3) GDPR).
Deletion: Everything stored on your device is removed when you clear the app data or uninstall the app. To have statistics or crash data deleted, write to contact@stillmeasure.com. Because the app has no user accounts we usually cannot identify you; we will tell you which details we need to find your data. We reply within one month.
Right to lodge a complaint: You can complain to a data protection supervisory authority, e.g. where you live, or to the authority responsible for us: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz, Hintere Bleiche 34, 55116 Mainz, Germany, www.datenschutz.rlp.de
12. Children
The app is not directed at children. We do not ask for your age.
13. Changes
We update this policy when the app or the law changes. The current version is always available at www.stillmeasure.com/apps/tools/gallery-cleaner/privacy/. The German version is here. Back to the app: UpNDown: Gallery Cleaner.