Privacy Policy

Wipely is operated by Roman Lytin ("Wipely", "we", "us" or "our"). This Privacy Policy explains how Wipely handles information when you use the Wipely iOS application ("App"), visit wipely.io ("Website"), or contact us.

Wipely is designed as a local-first application. Photo, contact, calendar and email-cleanup analysis is performed on your device. Wipely does not operate a server that receives or stores your photo library, contacts, calendar events, email bodies or attachments.

We do not sell personal information, use it for advertising, track users across third-party apps or websites, use third-party advertising SDKs, use mailbox data to train artificial-intelligence or machine-learning models, or download or store email bodies or attachments.

If you grant access, Wipely may access photos and videos available through Apple PhotoKit; photo and video identifiers; creation dates; dimensions, media types and file-size estimates; screenshot, favourite and similar or duplicate indicators; and thumbnails required to display previews.

This information is processed on your device to organise your library, identify cleanup opportunities, estimate recoverable storage, display previews and delete items you explicitly confirm. Wipely does not upload your photos or videos to Wipely servers. If an item is stored in iCloud, Apple may download it to your device under your iCloud settings.

If you grant access, Wipely may process contact information stored on your device, including names and identifiers; phone numbers and email addresses; postal addresses; organisations and job titles; contact photos and thumbnails; birthdays; and other saved contact fields.

This information is processed locally to identify duplicate, incomplete or empty contacts and to preview changes. Wipely modifies or removes contacts only after your confirmation.

If you grant access, Wipely may process event titles; start and end dates; calendar names and identifiers; notes, locations, URLs, alarms and time zones; and recurrence, attendee and modification status.

This information is processed locally to identify duplicate, untitled or outdated events. Wipely modifies or removes calendar events only after your confirmation.

Email functionality is optional. If you connect Gmail, Google Workspace, Outlook or Microsoft 365, Wipely uses OAuth authorisation provided by Google or Microsoft. Depending on your provider, Wipely may access and locally process your mailbox address and display name, provider message identifiers, sender names and email addresses, subject lines, received dates, labels or folder identifiers, List-Unsubscribe and List-ID headers, authentication and DKIM-related headers needed to classify senders, and scan progress and cleanup status.

Wipely does not download or store email bodies, snippets or attachments. OAuth access and refresh tokens are stored in the iOS Keychain on your device. Indexed email metadata is stored in protected local application storage and is excluded from device backups.

Wipely uses this information to find subscription and recurring emails, group messages by sender, display cleanup suggestions, perform unsubscribe requests you confirm, and move selected emails to trash when you explicitly request it. When you use one-click unsubscribe, Wipely sends a request directly from your device to the endpoint supplied by the email sender. That sender may receive information normally associated with an internet request, such as your IP address, and may process the request under its own privacy policy.

Subscriptions are processed by Apple through the App Store. Wipely may receive limited StoreKit information necessary to determine whether you have an active entitlement, such as a product identifier, subscription status, purchase, expiration or revocation status, and a transaction-verification result. Wipely does not receive or store your full payment-card details.

When you visit wipely.io, the Website or its hosting provider may automatically process basic technical information required to serve and secure the Website, including your IP address, browser and device type, requested pages, date and time of access, and security and error logs. At the effective date of this Policy, Wipely does not use advertising cookies or cross-site tracking on the Website.

If you contact us, we receive the information you provide, such as your name, email address, message and any diagnostic details you choose to include. Please do not send photos, contact databases, calendar exports, email contents, passwords or OAuth tokens to support.

Where applicable law requires a legal basis, we process information based on consent when you grant access to Photos, Contacts, Calendar, Gmail or Microsoft accounts; performance of a contract to provide cleanup features and subscription benefits you request; legitimate interests to operate, secure, troubleshoot and improve the App and Website; and legal obligations where processing is required by law.

You may withdraw permission at any time. Withdrawal does not affect processing already completed before withdrawal.

Wipely does not sell personal information. Information may be processed by or disclosed to Apple for App Store distribution, StoreKit purchases, iCloud media delivery, device permissions and operating-system services; Google when you connect a Gmail or Google Workspace account; Microsoft when you connect an Outlook or Microsoft 365 account; email senders when you request one-click or website-based unsubscribe; and Website infrastructure providers to host, deliver and protect wipely.io.

Information may also be disclosed to authorities or professional advisers when required by law or necessary to protect legal rights, users or service security, and to a successor organisation in connection with a merger, acquisition or sale, subject to this Policy and applicable law. Service providers acting on our behalf must use appropriate confidentiality and data-protection safeguards.

Wipely’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the user-facing email-cleanup features described in this Policy.

Wipely does not use Google user data for advertising, sell Google user data, allow humans to read Google mailbox data except when required for security, legal compliance or with your explicit permission, transfer Google user data to data brokers or advertising platforms, or use Google Workspace API data to develop, improve or train generalised AI or machine-learning models.

Photo, contact and calendar analysis results are generally held in application memory and refreshed from the corresponding system library. Email account information, scan progress and indexed email metadata remain locally on your device while the account is connected. When you disconnect an email account, Wipely deletes its OAuth tokens and removes its locally indexed mailbox data. Disconnecting does not undo changes already made in your mailbox.

You can also remove local App data by deleting the App from your device. Support correspondence may be retained for up to 24 months, or longer where required to resolve a dispute or comply with law. Website security logs may be retained for up to 30 days, unless a longer period is reasonably necessary to investigate abuse or a security incident. Apple, Google, Microsoft, email senders and infrastructure providers retain information according to their own policies.

You can change Photo, Contact or Calendar permissions in iOS Settings; use limited Photo Library access where iOS supports it; disconnect Gmail or Outlook accounts inside Wipely; revoke Wipely access from your Google or Microsoft account settings; delete locally stored App data by deleting the App; manage or cancel subscriptions through your Apple Account’s App Store subscription settings; and contact us to request access to or deletion of information held directly by Wipely.

Revoking access does not restore photos, contacts, calendar events, emails or subscriptions that you previously chose to delete or modify.

Depending on your location, you may have rights to receive information about our processing; access personal information held about you; correct inaccurate information; request deletion; restrict or object to processing; receive portable data where applicable; withdraw consent; and lodge a complaint with your local data-protection authority.

Wipely does not sell personal information or share it for cross-context behavioural advertising. To exercise your rights, contact support@wipely.io. We may need to verify your identity before completing a request. Because most App data remains solely on your device, we may not possess or be able to retrieve it.

Apple, Google, Microsoft and Website infrastructure providers may process information in countries other than your own. Where required, appropriate safeguards such as contractual protections or legally recognised transfer mechanisms will be used.

Wipely uses reasonable technical and organisational safeguards, including local-first processing, iOS permission controls, Keychain storage for OAuth credentials, protected local storage for email metadata, encrypted HTTPS connections and restricted access to service providers. No system can guarantee absolute security. You are responsible for keeping your device, Apple Account, Google Account and Microsoft Account secure.

Wipely is not directed to children under 13 or the minimum digital-consent age applicable in their country. We do not knowingly collect personal information from children. If you believe a child has provided information to us, contact support@wipely.io.

We may update this Privacy Policy when the App, Website, legal requirements or our data practices change. The updated version will be posted at wipely.io/privacy with a revised effective date. Material changes may also be communicated inside the App.

Roman Lytin Operating as Wipely c/o Online-Impressum 10664 Europaring 90 53757 Sankt Augustin, Germany

Email: support@wipely.io Website: https://wipely.io