Your privacy is our priority. Here is how we handle your data — with full transparency.
Last updated: October 5, 2026
100 %
Local — CleanerApp
0 cookie
Advertising
0 vente
Of your data
Loi 25 +
PIPEDA
01
Data controller
Belibitools ("we"), a Quebec-based company,
is responsible for the processing of personal information collected through
the website https://belibitools.ca/en and the CleanerApp application.
On this website, we only collect the following data:
Contact form: name, email address, message. Purpose: responding to your request.
Browsing data: IP address, browser, pages visited (standard server logs). Purpose: security and technical maintenance.
Blog view counter: an anonymized fingerprint of your visit (computed with a secret key, not reversible) is kept so the same reading is not counted several times. Purpose: measure interest in articles.
Audience measurement (with your consent): anonymized visit statistics via Google Analytics 4. Purpose: improving the site. See the Cookies section.
03
Data collected
CleanerApp collects no personal data. The app accesses the following resources solely to analyze them locally:
Photo library — to detect duplicates and junk files
Contacts — to detect duplicates and incomplete entries
Storage — to calculate used space and large files
Calendar — to spot duplicate, canceled or past events
Emails (if you connect a Gmail, Outlook or other IMAP account) — to sort ads and newsletters, offer unsubscribing, and detect recurring paid subscriptions (see the "Emails" section)
Home screen widgets — the app writes aggregated totals (health score, recoverable space, number of issues per module, name of the heaviest module, day streak) to a shared container on your device, which the widget displays. No email, contact or photo content is included.
Live Activity (Dynamic Island and Lock Screen) — during a scan, the app shows the current step and counters, with no personal data.
This data is processed on your device. No files, contacts, events or emails are copied, sent, or stored on our servers.
04
100% on-device processing
All analysis (duplicate detection, photo quality, contact merging, calendar) is performed directly on your iPhone, with no internet connection required. Reading your emails requires a connection to your mail provider (Google, Microsoft or the provider of your IMAP account), but the analysis itself happens on your iPhone.
We have no access to or visibility into the content of your gallery, contacts, calendar, files, or emails.
05
iOS permissions
CleanerApp only requests permissions necessary for its operation:
Photos — access to your library for local analysis; deleting and adding photos only at your request (clean-up, vault, restore), each deletion being confirmed by iOS
Contacts — read access for duplicate detection, and write access only when you merge or delete entries
Calendar — read access to events for local analysis
Notifications (optional) — local reminders scheduled on your device (for example a weekly reminder). CleanerApp uses no remote (push) notifications and receives no notification token
Live Activities (optional, Dynamic Island and Lock Screen) — showing the progress of a scan; the activity is started, updated and ended locally by the app, without any server
Face ID (optional) — protecting the photo vault
Widgets have no network access: they only read the aggregated totals shared locally with the app. You can revoke these permissions at any time in Settings → CleanerApp on your iPhone.
06
Photo vault
The vault is optional. When you put a photo or video in it:
it is copied into the app and encrypted (AES-256-GCM). The encryption key is created on your device and kept in the iOS Keychain; it is never sent anywhere else;
the encrypted copy is fully verified, then the original is deleted from your camera roll after you confirm in the iOS dialog. If you use iCloud Photos, this deletion applies on all your devices;
the original stays 30 days in "Recently Deleted" in Apple's Photos app, which you can empty to erase it for good;
opening the vault is protected by Face ID or your device passcode; you can restore a photo to your camera roll at any time (it is then added as a new item).
Your vault photos stay on your device. We have no access to them and hold no key: if you delete CleanerApp without an encrypted backup of your device, the vault's content is permanently lost and we cannot recover it. The vault's encrypted files are part of the app data included in your device backups; they can only be read if the Keychain key is restored with them (encrypted backup).
Limits: a Live Photo loses its animation in the vault, and for an edited photo the edited version is kept (the unedited original only stays in "Recently Deleted" for 30 days).
07
Emails (Gmail, Outlook, Yahoo, iCloud and others)
If you choose to connect an account, sign-in works in one of two ways:
Gmail and Outlook — through Google's or Microsoft's official authorization mechanism (OAuth): CleanerApp never sees your password.
Yahoo, iCloud and other mail providers (IMAP) — with an app password you create at your provider (not your usual password). It is stored in your iPhone's secure keychain, never sent to our servers, and only transmitted to your provider's own server over an encrypted (TLS) connection whose certificate is verified. You can revoke it at any time with your provider.
What is read — message headers (sender, subject, date, size) to sort ads and newsletters and, for subscription detection, excerpts or the content of the latest receipts and invoices from each merchant to read an amount and a management link.
What is changed — only what you ask for: moving messages to the trash or unsubscribing.
Where it stays — this information is processed on your iPhone. It is not sent to us or to any third party. A copy of the headers and detected subscriptions is kept locally to speed up later analyses; the access token is stored in the iOS secure keychain.
You stay in control — remove the account in the app to erase this local data, and revoke access (or the app password) with your provider at any time.
CleanerApp's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. This data is used only to provide the features described above: it is not sold, not used for advertising, and not read by humans.
08
In-App Purchases
CleanerApp offers Pro subscriptions (monthly, annual) and a lifetime access via Apple In-App Purchases.
Payments are processed exclusively by Apple and RevenueCat
We do not receive or store your payment information
RevenueCat may collect an anonymous installation identifier for purchase verification purposes
RevenueCat — subscription management and purchase verification
Apple App Store — distribution and payment processing
Google, Microsoft, Yahoo, Apple (iCloud) and your own mail provider — only for the account you connect (see "Emails")
Sentry — technical error reports, to fix crashes. A report contains the error message, technical device information and the app version; it contains no photos, contacts, or email content.
Site icon services (Google and DuckDuckGo) — to show a sender's logo in the email analysis, CleanerApp sends only the sender's domain name (for example "netflix.com") to Google's public icon service and, if it has no icon, to DuckDuckGo's. Never the message content, the sender's address, or your identity. Like any internet request, it transmits your device's IP address to the service concerned. For over a hundred common brands, the logo is built into the app and no request is made.
No advertising or ad-tracking SDKs are integrated into the app.
Contact data: 12 months after your request is closed.
Server logs: 30 days.
12
Sharing with third parties
We do not sell, rent or share your personal information
with third parties for commercial purposes.
Data may only be shared with technical subcontractors
(hosting provider Hostinger) strictly within the scope of service delivery,
under confidentiality agreements.
13
Transfers outside Quebec
Our data is hosted on servers managed by Hostinger (locations
may include countries outside Quebec). These transfers comply with
Law 25 requirements and applicable data protection laws.
14
Your rights (Law 25 — Quebec)
In accordance with the Act to modernize legislative provisions as regards
the protection of personal information (Law 25), you have the following rights:
Right of access: know what information we hold about you.
Right of rectification: correct inaccurate or incomplete information.
Right to portability: receive your data in a structured format.
Right to withdraw consent: withdraw your consent at any time.
Right to erasure: request deletion of your data in cases provided by law.
To exercise these rights, contact us at infos@belibitools.ca.
We will process your request within 30 days.
15
Cookies
This website uses no advertising cookies or profiling trackers. We use two categories of cookies:
Essential cookies (always active): PHP session, language preference (bt_lang, 12 months) and your consent choice (bt_consent, 12 months).
Analytics cookies (only with your consent): Google Analytics 4, to understand how the site is used and improve it. These cookies are only set after you consent via the banner.
You can change your choice at any time via the "Manage cookies" link at the bottom of every page.
16
Security
We implement appropriate technical and organizational measures
to protect your personal information against unauthorized access,
modification, disclosure or destruction.
17
Changes to this policy
We may update this policy. Any substantial change
will be announced on this website. The last update date is shown at the top
of this page.
If you believe your rights are not being respected, you may file
a complaint with the Commission d'accès à l'information du Québec (CAI):
www.cai.gouv.qc.ca.
A question about your data?
Our team answers with transparency — exercising your rights, security or compliance.
