นโยบายความเป็นส่วนตัว

This Privacy Policy describes how NFO LTD ("we", "us", or "our") collects, uses, and protects information when you use Tidy - Photo Cleaner ("Tidy", "the App"). We are committed to protecting your privacy and being transparent about our data practices.

1. Information We Collect

Tidy collects a minimal amount of anonymous, non-personal data to help us improve the app's performance and stability. We do not require you to create an account, log in, or provide any personal information to use Tidy.

Analytics Data

We use Firebase Analytics to collect anonymous usage data, including:

• Screen views and navigation patterns within the app
• Feature usage (which tools and filters are used most)
• Session duration and frequency
• Device type, model, and operating system version
• App version
• General region or country (derived from IP address, but IP addresses are not stored)

This data is collected in aggregate and cannot be used to identify you personally.

Crash Reports

We use Firebase Crashlytics to collect crash reports when the app encounters an error. These reports include:

• Device model and operating system version
• App version and build number
• Stack traces and error logs
• General information about the state of the app at the time of the crash

Crash reports do not contain any photos, personal files, or personally identifiable information.

Performance Data

We use Firebase Performance Monitoring to measure the app's performance, including:

• App startup time
• Network request latency (for subscription verification only)
• Screen rendering performance

Push Notification Tokens

If you choose to allow push notifications, we receive a device token through Firebase Cloud Messaging. This token is used solely to deliver notifications about app updates and features. You can disable notifications at any time through your device's Settings.

Subscription Information

If you subscribe to Tidy Gold, your subscription is managed entirely by Apple through StoreKit 2. We receive a confirmation that your subscription is active, but we do not have access to your payment details, Apple ID, or billing information. All payment processing is handled by Apple in accordance with their privacy policy.

2. Information We Do Not Collect

We want to be clear about what Tidy does not collect:

• Photos and videos - Your photos and videos are never uploaded, transmitted, or sent to any server. All processing happens entirely on your device.
• Personal identification - We do not collect your name, email address, phone number, or any other personally identifiable information. No account or login is required.
• Location data - We do not track your location. The photo map feature in Tidy uses existing location metadata (EXIF data) already embedded in your photos, and this data is read and displayed on-device only.
• Contacts - We do not access or collect your contacts or address book.
• Camera or microphone - Tidy does not access your camera or microphone. We only access your Photo Library with your permission.
• Browsing history - We do not track your browsing activity outside the app.
• Advertising identifiers - If you grant tracking permission through Apple's App Tracking Transparency prompt, your Advertising Identifier (IDFA) may be shared with our ad partners to deliver relevant ads. You can change this at any time in Settings > Privacy > Tracking.

3. Photo Library Access and On-Device Processing

How Photo Library Access Works

When you first open Tidy, the app requests permission to access your Photo Library through Apple's standard permission system (PhotoKit). You can grant full access or limited access, and you can change this permission at any time in your device's Settings.

Tidy uses your Photo Library to:

• Display your photos and videos within the app
• Analyze photos for blur, quality, and duplicates
• Detect faces and apply beauty filters
• Categorize photos into smart groups
• Apply photo editing filters
• Help you identify and delete unwanted photos

100% On-Device AI Processing

All of Tidy's artificial intelligence and machine learning features run entirely on your device using Apple's Vision framework and Core ML. This includes:

• Blur and quality detection - Analyzes image sharpness and quality scores locally
• Duplicate and similar photo detection - Compares photos on-device to find duplicates
• Face detection and beauty filters - Detects faces and applies enhancements locally
• Smart categorization - Groups photos by content type using on-device models
• AI-enhanced editing - Applies creative and enhancement filters locally

No photo data, image analysis results, or derived information is ever sent to any external server.

Photo Deletion

When you delete photos through Tidy, the deletion is performed through Apple's PhotoKit framework. Deleted photos are moved to the "Recently Deleted" album in your iOS Photos app, where they remain for approximately 30 days before being permanently removed by iOS. Please note that once permanently deleted, photos cannot be recovered. Tidy is not responsible for any data loss resulting from photo deletion.

4. Third-Party Services

Tidy uses the following third-party services for analytics and app improvement purposes only. None of these services receive your photos or personal content.

Firebase Analytics (Google)

We use Firebase Analytics to understand how people use Tidy so we can improve the app. Firebase Analytics collects anonymous usage data such as screen views, feature interactions, and session information. For more details, see Firebase Privacy Information and Google's Privacy Policy.

Firebase Crashlytics (Google)

Crashlytics helps us identify and fix bugs by collecting crash reports. These reports include device information and technical logs but never include photos or personal content. See Crashlytics Terms.

Firebase Performance Monitoring (Google)

Performance Monitoring helps us ensure Tidy runs smoothly by collecting performance metrics like startup time and screen rendering speed. No personal content is included in these metrics.

Firebase Cloud Messaging (Google)

Cloud Messaging delivers push notifications to your device. It uses a device token (not tied to your personal identity) to route notifications. You can opt out of notifications at any time in your device's Settings.

Apple StoreKit 2

Subscription management is handled entirely by Apple through StoreKit 2. Apple processes all payments and manages subscription status. We do not receive or store your payment information. See Apple's Privacy Policy.

AppLovin MAX (Advertising)

For free (non-Gold) users, Tidy displays ads through AppLovin MAX, an ad mediation platform. AppLovin may collect:

• Device identifiers (IDFA, if tracking is authorized via Apple's ATT prompt)
• Coarse location data (derived from IP address, for ad geo-targeting)
• Ad interaction data (impressions, taps)

This data is used solely for serving and measuring ads. Tidy Gold subscribers see no ads, and no ad-related data is collected for them. For more information, see AppLovin's Privacy Policy.

5. How We Use Your Information

The limited anonymous data we collect is used to:

• Improve the app - Understanding which features are used most helps us prioritize development
• Fix bugs - Crash reports help us identify and resolve issues quickly
• Optimize performance - Performance metrics help us ensure the app runs smoothly
• Send notifications - Deliver relevant updates about new features or improvements (only if you opt in)
• Verify subscriptions - Confirm your Tidy Gold subscription status through Apple

We do not use your data for advertising, profiling, selling to third parties, or any purpose other than improving Tidy.

6. Data Retention

We retain data only as long as necessary for the purposes described in this policy:

• Analytics data - Retained in Firebase Analytics for up to 14 months, then automatically deleted
• Crash reports - Retained in Firebase Crashlytics for up to 90 days
• Performance data - Retained in Firebase Performance Monitoring for up to 90 days
• Push notification tokens - Retained as long as you have notifications enabled; automatically invalidated when you uninstall the app or revoke notification permission
• On-device data - All photo analysis data, caches, and local app data are stored only on your device and are removed when you uninstall Tidy

7. Data Security

We take the security of your data seriously:

• On-device processing - Since photos are processed entirely on your device, they benefit from iOS's built-in security features, including hardware encryption and the Secure Enclave
• No server-side storage - We do not maintain servers that store your personal content or photos
• Encrypted transmission - The minimal analytics and crash data we collect is transmitted to Firebase over encrypted (HTTPS/TLS) connections
• No personally identifiable data - The data we collect through Firebase is anonymous and cannot be used to identify you
• Apple infrastructure - Subscription and payment data is protected by Apple's security infrastructure

While no method of electronic transmission or storage is 100% secure, our privacy-by-design approach - processing photos on-device and collecting only anonymous analytics - significantly reduces risk.

8. International Data Transfers

NFO LTD is based in Israel. The anonymous analytics and crash data collected by Firebase may be processed and stored on Google's servers, which may be located in the United States or other countries.

When data is transferred outside of the European Economic Area (EEA), Google relies on Standard Contractual Clauses (SCCs) approved by the European Commission, as well as other appropriate safeguards, to ensure adequate data protection. Israel is recognized by the European Commission as providing an adequate level of data protection.

Since we do not collect personal content (photos, personal information, or identifiers), the data transferred internationally is limited to anonymous usage metrics, crash logs, and performance data.

9. Children's Privacy

Tidy is not directed at children under the age of 13 (or under 16 in the EEA). We do not knowingly collect personal information from children under these ages.

Since Tidy does not require an account or collect personal information, the risk of inadvertent data collection from children is minimal. However, if you believe we have inadvertently collected information from a child, please contact us at [email protected] and we will take steps to delete such information promptly.

Tidy does not serve targeted advertising to children and complies with the Children's Online Privacy Protection Act (COPPA) and similar regulations. Users under 13 (or 16 in the EEA) should not use the app.

10. Your Rights Under GDPR (European Users)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have certain rights under the General Data Protection Regulation (GDPR) and related data protection laws.

Legal Basis for Processing

We process the limited data we collect based on the following legal grounds:

• Legitimate interest - We collect anonymous analytics, crash reports, and performance data to maintain and improve Tidy. This processing is necessary for our legitimate interest in providing a reliable, high-quality app, and is balanced against minimal impact on your privacy since no personal content is collected.
• Consent - We obtain your consent before sending push notifications. You can withdraw consent at any time by disabling notifications in your device's Settings.
• Contract performance - Processing subscription status is necessary to provide you with the Tidy Gold features you have purchased.
• Consent - For users in the EEA/UK, we obtain explicit consent before collecting advertising identifiers or sharing data with ad partners for personalized advertising. You can withdraw this consent at any time by using the "Do Not Sell My Data" toggle in the app's Settings.

Your Rights

You have the right to:

• Access - Request a copy of the data we hold about you. Since we do not collect personally identifiable information, we may not be able to identify data associated with your specific device.
• Rectification - Request correction of any inaccurate data we hold about you.
• Erasure ("Right to be forgotten") - Request deletion of your data. You can also reset your analytics by reinstalling the app.
• Restriction of processing - Request that we limit how we process your data.
• Data portability - Request your data in a structured, commonly used format.
• Object - Object to our processing of your data based on legitimate interests.
• Withdraw consent - Where we rely on your consent (push notifications), you can withdraw it at any time.

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.

11. Your Rights Under CCPA (California Users)

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with specific rights regarding your personal information.

Your Rights

• Right to know - You have the right to know what personal information we collect, use, and disclose. This privacy policy provides that information.
• Right to delete - You have the right to request deletion of your personal information. Since we collect only anonymous, non-identifiable data, you can effectively reset your data by reinstalling the app.
• Right to opt out of sale/sharing - Under CPRA, sharing your Advertising Identifier (IDFA) with ad partners for targeted advertising may constitute a "sale" or "sharing" of personal information. You can opt out at any time using the "Do Not Sell My Data" toggle in Tidy's Settings, or by denying tracking permission when prompted.
• Right to non-discrimination - We will not discriminate against you for exercising any of your CCPA rights.

Categories of Information

In the preceding 12 months, we have collected the following categories of information:

• Device and usage data (anonymous analytics, crash reports, performance metrics) - collected from Firebase services for app improvement purposes
• Notification tokens - collected from Firebase Cloud Messaging for delivering push notifications
• Device identifiers (IDFA, only if tracking authorized) - shared with AppLovin for ad targeting; qualifies as "sale/sharing" under CPRA

If you have authorized tracking, your IDFA may be shared with ad partners for targeted advertising, which qualifies as a "sale" or "sharing" under CPRA. You can opt out using the "Do Not Sell My Data" toggle in the app. We have not collected personal identifiers, photos, financial information, geolocation data, biometric data, or browsing history.

To make a request under the CCPA, contact us at [email protected].

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will:

• Update the "Last updated" date at the top of this page
• Post the revised policy at tidy.gallery/privacy
• For significant changes, notify you through the app or via push notification (if enabled)

Your continued use of Tidy after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Company: NFO LTD
• Location: Israel
• Website: tidy.gallery

We aim to respond to all inquiries within 30 days.