Privacy Policy
This policy describes exactly what leaves your iPhone when you use TimCleaner, and what does not.
Effective date: October 1, 2026
TimCleaner is operated by Timu LLC.
What never leaves your device
Your photos, your videos, your contacts and any metadata about them — names, locations, faces, file hashes — never leave your iPhone. Every scan, every similarity match and every comparison runs entirely on the device. We have no way to see your library, and no copy of it exists anywhere but on your phone.
What we do send to our server
TimCleaner has no login: there is no name, no email address and no phone number. What the app sends to cleaner.timus.uz is:
- An anonymous account ID and a device ID, so that the app can recognise the same installation again.
- Apple App Attest and DeviceCheck data, used to verify that a request comes from a genuine Apple device and to prevent abuse. DeviceCheck stores two bits per device at Apple.
- Purchase records from Apple — the product, the transaction ID and the date — and the credit ledger: the amounts and the number of cleanup actions, never which photos.
- App usage events with bucketed values, for example “1k–5k photos”, together with your app version, language and App Store country. These are kept for 180 days.
- Support reports that you choose to send: the text you write and, optionally, a diagnostic log without personal content. The report is forwarded to the developer’s private Telegram chat.
Apple refund requests
If you ask Apple for a refund, Apple may ask us what happened to the purchase. We may then send Apple consumption information — how much of the purchase was used, the age of the account, and purchase and refund totals — so that Apple can decide. We send facts taken from our own ledger, never estimates.
Advertising
The app shows ads through Google AdMob. We use non-personalized ads only: there is no App Tracking Transparency prompt and no IDFA. AdMob may still collect device and diagnostic data under Google’s own policy. In the EEA and the United Kingdom, consent is collected through Google’s consent form.
What we never do
- We do not sell your data.
- We use no third-party analytics.
- We do not track you across other apps or websites.
- We do not upload, copy or index your photos, videos or contacts.
How long we keep it, and how to delete it
You can delete your data from inside the app, with “Delete my data”. That anonymises the account: it is detached from your device and from the identifiers that could point back to it, and it can never be recovered. Accounting ledger rows remain — a ledger that could be rewritten would not be a ledger — but they carry no link to a person. Usage events are kept for 180 days. Support reports are kept for as long as is needed to resolve the issue you reported.
Changes
If this policy changes, the new version is published here with a new effective date.
Contact
Questions about this policy, or about your data: info@timus.uz