Privacy Policy
Last updated: 12 October 2026
Sweep is a photo-cleaning app for iPhone made by Artem Kurtiak (“we”, “us”). This policy explains what the app does with your data.
The short version: your photos never leave your iPhone. An account is optional, and when you create one it is used for your free-swipe allowance and your purchase — never to upload your library.
Who we are
Sweep is made and operated by Artem Kurtiak, an individual based in Ukraine. For data-protection purposes Artem Kurtiak is the data controller for the personal data described here. Contact: contact@arktik.tech. We have not appointed a data protection officer, as we are not required to.
Photos and videos
Sweep asks for access to your photo library because reviewing your photos is the app’s only function. Photos and videos are read on your device to display them and measure file sizes. They are never uploaded, copied to our servers, or shared with third parties for advertising. We never receive them, so we do not process your photos at all.
When you delete through Sweep, deletion is carried out by iOS Photos. Apple shows its own confirmation dialog, and deleted items go to Recently Deleted for about 30 days.
You can revoke access in Settings → Privacy & Security → Photos → Sweep.
Account
An account is optional — Sweep works as a guest. Creating one raises your free swipe allowance and keeps Sweep Pro across phones. You may sign in with Sign in with Apple, Google, or email and password.
Depending on the method, we may receive:
- a unique account identifier;
- an email address (or Apple’s private relay address);
- basic profile fields the provider shares on first sign-in (for example a name from Apple, only if you allow it).
Accounts are hosted with Supabase Auth. We use the account to enforce free-swipe limits, attach Sweep Pro to you, and let you delete your account from inside the app.
Information stored on your device
Sweep also stores progress locally on your iPhone, including:
- keep / toss decisions (as photo identifiers, not the images);
- measured file sizes and totals (swipes, deleted items, space freed);
- onboarding and preference flags;
- whether a promo unlock applies on this account.
Most of that is removed when you delete the app. One item is deliberately kept: the device identifier described below is stored in the iOS keychain, which iOS preserves across app deletion and reinstall. That is what stops the free allowance being reset by reinstalling Sweep. You can clear it by erasing the device, and we will delete the matching server record on request.
Device identifier
So that the free swipe allowance is counted fairly, Sweep sends a per-installation device identifier (Apple’s identifier for vendor, kept in the iOS keychain) to Supabase along with a count of how many swipes have been used. This happens whether or not you create an account. That identifier is specific to Sweep — it is not your Apple Account and not an advertising identifier — and it is never used for advertising or to track you across other apps or websites.
Why we use your data, and on what basis
- Running your account (account id, email, sign-in method) — performance of our contract with you (UK/EU GDPR Art. 6(1)(b)).
- Selling and restoring Sweep Pro (purchase receipts, app user id) — performance of our contract, and compliance with tax and accounting obligations (Art. 6(1)(b) and 6(1)(c)).
- Counting free swipes against your device (device identifier and a swipe count) — our legitimate interest in offering a free tier that cannot be reset by reinstalling the app or deleting an account (Art. 6(1)(f)). We have weighed this against your interests: the identifier is app-specific, carries no profile, is never used for advertising, and is never combined with your photos.
- Crash and performance diagnostics — our legitimate interest in keeping the app working and fixing faults (Art. 6(1)(f)).
- Product analytics (which screens and buttons are used, never photo contents) — our legitimate interest in understanding whether Sweep is working as intended (Art. 6(1)(f)). You can turn this off in Sweep → Settings. We do not use it for advertising or to track you across other apps.
- Answering support email — our legitimate interest in replying to you (Art. 6(1)(f)).
Giving us this data is not a statutory requirement, but an account cannot be created without an email address or a provider identifier. We do not use your data for advertising, we do not sell it, and no decision about you is made by automated means.
Servers and service providers
Sweep makes network requests only for your account, purchases, reliability and support — never to sync your photo library. We use:
- Supabase — authentication, swipe quotas (including the device identifier above), and promo-code redemptions. supabase.com/privacy
- Resend — delivery of transactional mail only, meaning the password-reset code you ask for; it receives your email address and that message. No marketing mail is ever sent. resend.com/legal/privacy-policy
- RevenueCat — App Store purchase verification and restores. It receives purchase receipts and an app user id; not your photos. revenuecat.com/privacy
- Sentry — crash, error and performance diagnostics (device and app state, plus your account identifier when you are signed in, so a report can be matched to a support email; never photo contents). sentry.io/privacy
- PostHog — product analytics (EU cloud). It receives an anonymous per-install identifier, the account identifier if you sign in, and which screens and buttons are used; never photos, advertising identifiers, or anything that would track you across other apps. You can opt out in Sweep → Settings. posthog.com/privacy
- Apple / Google — when you choose their sign-in; their policies apply to those flows.
Sweep does not show ads and does not use advertising trackers.
Where your data goes
Our Supabase project is hosted in Ireland, in the European Union. Product analytics are sent to PostHog’s EU cloud. We are based in Ukraine, outside the European Economic Area and the United Kingdom, so the account, quota and support data described above is reachable by us there; Ukraine is not covered by a European Commission adequacy decision. If you are in the EEA or the UK you can raise any data-protection matter with us directly by emailing contact@arktik.tech — it reaches the controller, not an intermediary. RevenueCat and Sentry are based in the United States, so the limited account, purchase and diagnostic data described above is transferred outside the UK and the EEA. Those transfers are covered by the European Commission’s Standard Contractual Clauses (with the UK Addendum where the UK GDPR applies), and, where the provider is certified, by the EU–US and UK–US Data Privacy Framework. Ask us at contact@arktik.tech for a copy of the safeguards in place. Your photos are not transferred anywhere, because they never leave your phone.
How long we keep things
- Account records — until you delete your account, which removes them immediately.
- Device swipe counter — for as long as the free allowance needs enforcing on that device, and in any case no longer than 24 months after the last swipe recorded from it, after which the row is deleted. It is not removed when you delete your account, because it belongs to the phone rather than to you.
- Purchase records — held by Apple and RevenueCat under their own policies; we keep what we need for tax and accounting for as long as the law where we are established requires.
- Crash diagnostics — 90 days, then deleted by Sentry.
- Product analytics — 12 months, then deleted by PostHog. Turning the setting off stops new events; email us if you want past events deleted.
- Support email — up to 24 months after your question is resolved.
Purchases
Sweep Pro is sold through Apple’s App Store. Apple processes payment; we never see your card details. RevenueCat verifies the purchase and powers Restore purchases. This works with or without a Sweep account — Pro follows the Apple Account that bought it. If you are signed in, RevenueCat is additionally given your Sweep account id so that Pro follows you to a new phone.
Account deletion
You can delete your account yourself, at any time, in Sweep → Settings → Delete account. It takes effect immediately: your Sweep login, email address, sign-in method and swipe records are removed, and no approval from us is involved.
Two things are deliberately unaffected. Photos on your phone are untouched — we never held them. And the free-swipe allowance for your device stays as it was, because it is counted against the device rather than the account; deleting an account does not issue a new allowance.
Sweep Pro is billed by Apple, so deleting your Sweep account does not cancel it. Cancel in your App Store subscription settings if you want billing to stop.
Security
Account and quota data is protected by row-level security: the counter tables grant no direct access to app credentials, and every read or write goes through a restricted server-side function. Sign-in is handled by Supabase Auth over TLS; we never see or store passwords. Nothing we hold includes your photos.
Support email
If you email contact@arktik.tech, we receive your address and message to reply. We do not add you to a marketing list.
Your rights
If you are in the UK or the EEA, you have the right to:
- access the personal data we hold about you, and get a copy;
- correct data that is wrong or incomplete;
- delete your data — you can do this yourself at any time in Sweep → Settings → Delete account;
- restrict how we use it while a dispute is resolved;
- object to processing we carry out on the basis of legitimate interests, including the device-based swipe counter, crash diagnostics, and product analytics — you can turn analytics off in Sweep → Settings;
- portability — receive the data you gave us in a structured, commonly used, machine-readable format, or have it sent to another provider;
- withdraw consent at any time where we rely on it, without affecting anything done before you withdrew it — including revoking Sweep’s photo access in Settings → Privacy & Security → Photos → Sweep.
Email contact@arktik.tech to exercise any of these. We reply within one month, free of charge. We may ask you to confirm the email address on the account so we do not hand your data to someone else.
If you think we have handled your data badly, you can complain to a data protection supervisory authority — in the EEA, the authority where you live or work; in the UK, the Information Commissioner’s Office (ico.org.uk/make-a-complaint). We would rather you told us first, but you do not have to.
California privacy notice
This section applies if you live in California. In the last 12 months we have collected these categories of personal information:
- Identifiers — account id, email address (or Apple’s private relay address), and a per-installation device identifier.
- Commercial information — records of Sweep Pro purchases and promo-code redemptions.
- Internet or other electronic network activity — a count of swipes used, crash and performance diagnostics, and product-analytics events (screens and buttons used) unless you opt out.
We collect these from you and your device, from Apple and Google when you use their sign-in, and from Apple and RevenueCat when you buy. We use them only to run the app, enforce the free allowance, deliver and restore purchases, keep the app working, and answer support email. We disclose them for those business purposes to the service providers named above, and to nobody else.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have not done so in the preceding 12 months, and we do not sell or share the personal information of anyone under 16. We do not collect sensitive personal information. Your photos are never collected at all.
You have the right to know what we have collected, to delete it, to correct it, and not to be treated differently for exercising any of these. Email contact@arktik.tech, or delete everything yourself in Sweep → Settings → Delete account. We verify requests against the email address on the account. You may use an authorised agent, who must provide your written permission.
Children
Sweep is not directed at children. You must be at least 13 to create a Sweep account, or older where your country sets a higher age for consenting to online services without a parent (16 in some EU countries). We do not knowingly create accounts below that age; if you believe we have, email us and we will delete it.
This website
These pages are hosted by Vercel, which keeps standard server logs, including IP addresses, for a short period for security and abuse prevention. The site sets no cookies, runs no analytics and does not track you. Typefaces are served from this site, so no other company receives your IP address when you read these pages.
Changes
If this policy changes, we will post the updated version here with a new date.