Privacy Policy

Last updated: June 7, 2026

1. Who We Are

Deletutu is developed by Tututech Ltd. If you have any questions about this Privacy Policy, you can contact us at tututech.ltd@gmail.com.

2. What Stays On Your Device — Always

The following never leaves your device under any circumstances:

• Your photos and videos (full files, thumbnails, or any derived bitmap)
• Filenames, EXIF metadata, GPS location embedded in photos
• Category tags computed on-device (screenshot / selfie / large-video / favorite) and the per-asset file sizes used to total freed space
• Your photo library contents, counts, or storage size
• The list of photos you reviewed, kept, deleted, or archived
• Your email address (we request it via OAuth scopes but immediately discard it after sign-in)
• Your IP address (the app never sends user-identifying network requests)
• Location data (the app does not access CLLocationManager)
• Advertising identifiers (IDFA) and the AppTrackingTransparency prompt are never used

All photo analysis happens on-device using Apple's PhotoKit — the app reads native photo metadata (media type, screenshot/selfie/favorite flags, file size) to build its cleanup categories. No machine-learning models are bundled and no embeddings are computed.

3. What We Do Collect — Fully Itemized

To improve the app and measure where new users come from, we collect a small amount of anonymous, aggregated information. We deliberately avoid anything that can identify you personally.

3.1 OAuth Sign-In (Apple, Google, or Facebook)

Sign-in is optional — you can use every feature of Deletutu without signing in. If you choose to sign in to earn the swipe bonus, we request the following scopes from your chosen provider:

• Apple Sign-In: name, email (only on first sign-in, per Apple's design)
• Google: openid email profile
• Facebook: public_profile, email

What the app actually keeps on your device (in iOS UserDefaults under the key deletutu.profile.v1):

• A provider-issued opaque user ID (e.g., Apple's user identifier or Google's sub)
• Your display name
• The URL to your profile photo (we don't download or cache the photo file itself)
• Local gamification state (XP, sign-in bonus flags)

Your email address is requested by the OAuth scope but is not persisted by the app. We do not maintain a server-side user database. There is no Deletutu account that lives outside your device — the OAuth identity is local-only.

3.2 Anonymous App Usage — Firebase Analytics

We use Google Firebase Analytics to understand how the app is used in aggregate. The complete list of events the app sends:

• sign_in_started — parameter: method (one of: apple, google, facebook)
• sign_in_completed — parameter: method
• sign_in_failed — parameters: method, reason (error code or sanitized error message)
• bonus_swipes_granted — parameters: amount, source (e.g., signin_apple)
• Standard Firebase automatic events (app_open, first_open, session_start) — no custom parameters

Firebase Analytics also receives a Firebase-generated install ID (app_instance_id) which is per-install and not linked to your name, Apple ID, Google account, or any other personal identifier. It cannot be used to identify you across other apps.

3.3 Crash Reports — Firebase Crashlytics

When the app crashes, we receive an automated crash report to help us fix bugs. A crash report includes:

• The crash stack trace, exception name, and signal
• iOS version, device model (e.g., "iPhone 15 Pro"), and app version
• The opaque provider user ID (e.g., the Apple/Google/Facebook sub) bound via Crashlytics setUserID — used only to group multiple crashes from the same install
• The auth_provider custom key (apple, google, facebook, or none)

Crash reports never include your photos, filenames, photo library contents, or any text you entered in the app.

3.4 Apple Search Ads Attribution

On first launch, the app makes one network request to https://api-adservices.apple.com/api/v1/ with Apple's AAAttribution token, to learn whether this install came from an Apple Search Ads campaign. The response is privacy-preserving and contains: campaign ID, ad group ID, keyword ID, creative set ID, country/region, and conversion type. No user identifier is attached to this request. The attribution metadata is then stored as Firebase Analytics user properties for the same install.

3.5 What We Will Never Add Without Telling You First

If we ever want to add anything beyond what is listed in this section, we will update this page and the "Last updated" date before turning it on. We won't add a new data destination quietly.

4. Photo Library Access

Deletutu requests access to your device's photo library to function. This access is used exclusively and entirely on your device to:

• Display your photos and videos for review
• Sort photos into categories — screenshots, selfies, large videos, favorites, and your albums (all processing on-device)
• Delete photos you choose to remove (via iOS's native Photos system)
• Play video previews inline

Your photos are read and analyzed locally using Apple's PhotoKit frameworks. No photo bitmap, thumbnail, or derived embedding ever leaves your device.

You can revoke photo library access at any time in Settings → Privacy & Security → Photos → Deletutu.

5. Deleted Photos

When you delete a photo using Deletutu, it is moved to the iOS Photos Recently Deleted album. Photos remain there for 30 days and can be recovered before permanent deletion. This behavior is controlled entirely by iOS — Deletutu does not bypass it.

6. Third-Party Services Used by the App

This is the complete list of third-party SDKs and services embedded in or contacted by the iOS app:

• Firebase Analytics (Google) — anonymous app usage events, see §3.2
• Firebase Crashlytics (Google) — crash diagnostics, see §3.3
• Apple Sign-In, Google Sign-In, Facebook Login — only when you tap the sign-in button, see §3.1
• Apple Search Ads Attribution API — one-time install attribution, see §3.4
• Apple StoreKit 2 — in-app purchases. We receive only the opaque, Apple-managed transaction receipt. We never see your Apple ID, billing address, or payment method.
• SKAdNetwork — privacy-preserving install attribution framework operated by Apple. Listed in Info.plist for compatibility with ad networks. No user-identifying data is sent.

7. Children's Privacy

Deletutu is rated 4+ on the App Store and is suitable for all ages. The information described in §3 is collected the same way regardless of age, and none of it identifies the user personally. We do not knowingly target children, and we do not knowingly collect personal information from anyone under 13.

8. Data Retention & Security

The on-device data described in §2 stays on your device for as long as you keep the app installed. Deleting the app removes all of it.

Firebase Analytics and Crashlytics data is retained according to Google's Firebase data retention policies. You can reset your Firebase install ID at any time by uninstalling and reinstalling the app.

All network requests use HTTPS. The app does not allow arbitrary HTTP loads.

9. Your Rights (GDPR / CCPA)

You have the right to access, correct, or delete your data. Because the app does not maintain a server-side user account:

• To delete local data: uninstall the app, or sign out in Profile → Sign Out.
• To delete Firebase Analytics / Crashlytics data tied to your install: email us at tututech.ltd@gmail.com with your Firebase app_instance_id (found in Profile → About → Diagnostics), and we will request deletion from Firebase within 30 days.
• To delete your website waitlist entry: see §11 below.

See also our dedicated data deletion request page.

10. Changes to This Policy

If we update this Privacy Policy, we will update the "Last updated" date at the top of this page before the change takes effect in the app. For material changes (new data destinations, new types of collection), we will surface an in-app notice. Continued use of the app after a material change constitutes acceptance of the updated policy.

11. Website (deletutu.com) Analytics & Waitlist

Our marketing website at deletutu.com is separate from the app and uses the following:

• Google Analytics 4 (Measurement ID G-8HJLTBQ3ZG) — aggregated visitor traffic (pages viewed, country, device type, referral source). IP addresses are anonymized.
• Meta Pixel (ID 974675768694335) — conversion tracking for our Meta Ads campaigns. Standard events: PageView, Lead (when you click "Get on App Store").

If you join our waitlist on the website, the name, email, and optional phone number you submit are stored on our database (hosted by Supabase, EU region — Frankfurt) solely to notify you when the app launches. To request deletion of your waitlist record at any time, email tututech.ltd@gmail.com with the subject "Delete my waitlist entry" from the email you signed up with.

12. Contact Us

Questions about this Privacy Policy? We're happy to help:
📧 tututech.ltd@gmail.com