Privacy Policy

Rahul Pahuja (“we,” “us,” or “our”) publishes the DeDup apps for Android and iPhone. This policy explains what the apps access on your device, what they send off it, and why.

1. What the Apps Access on Your Device

• Photos and videos(both apps): to find duplicate, similar, blurry and large items and delete the ones you choose. On iPhone, deleted items go to the Photos app’s Recently Deleted album.
• All files and media (Android, including MANAGE_EXTERNAL_STORAGE): to find duplicate documents, archives, audio and other files. File hashes are computed locally only.
• Contacts (both apps): to find duplicate contacts and merge the ones you choose.
• Microphone and speech recognition(both apps): only when you ask the storage assistant a question by voice. Recognition runs on-device where supported; otherwise Apple’s or Google’s speech service processes the audio under their privacy policies.
• Approximate location (Android): used on-device to work out sunrise and sunset for the automatic light/dark theme. It is not stored or sent anywhere.
• Notifications (both apps): to tell you when a scan finishes or storage is running low.

2. Data Sent Off Your Device

We use Google Firebase for the following. None of it is used to track you across other companies’ apps or websites.

• Account(Firebase Authentication): if you sign in with Google (Android and iPhone) or Apple (iPhone), your name, email address (or Apple’s private relay address) and an account ID are stored so you stay signed in. You can use the scans as a guest without an account.
• Crash reports (Firebase Crashlytics): crash logs, device model and OS version, used to fix bugs.
• Usage analytics (Firebase Analytics): which screens and features are used, with an app-instance identifier, used to improve the apps.
• Bug reports and feature requests (Firebase Realtime Database): only when you send one, the text you write plus your account ID and, for bug reports, device model, OS version, app version and language.
• Notifications and in-app messages (Firebase Cloud Messaging, In-App Messaging and Remote Config): a push token if you allow notifications, plus occasional announcements and settings such as the minimum supported app version.
• App integrity (Android, Google Play Integrity): checks that the app and device are genuine.

Google’s handling of this data is described at firebase.google.com/support/privacy. The Android app also includes the Facebook Login SDK; Facebook sign-in is not currently offered, and no Facebook account data is collected.

3. What We Don’t Do

DeDup shows no ads, uses no advertising identifiers, and never sells or shares your personal data.

4. Data Stored on Your Device

Scan results, history, the activity log, DeDup’s Trash, search labels and your settings stay on your device and are removed when you uninstall the app. On Android they are kept in an encrypted database (SQLCipher); on iPhone they are protected by iOS Data Protection.

5. Account Deletion and Your Rights (GDPR & DPDP)

You can delete your account at any time in the app: Settings › Account › Delete Account. This removes it from Firebase and, for Sign in with Apple, revokes DeDup’s access. Depending on where you live you also have the right to:

• Access a copy of your personal data
• Rectification of inaccurate data
• Erasure (“Right to be Forgotten”), including bug reports you sent
• Data Portability in a structured format
• Withdraw Consent, for example by turning off notifications
• Nominate someone to exercise these rights on your behalf (DPDP)

6. Children

DeDup is not directed at children under 13 and does not knowingly collect their personal data.

7. Changes

We update this page when the apps’ data practices change and revise the date above.

8. Contact & Grievance Redressal