Your privacy matters

Owner and Data Controller

Clean My Email is operated by Clean My Email, Inc.

Contact email: privacy@cleanmy.email

Types of Data Collected

When you use Clean My Email, we request access to your Gmail account through Google's secure OAuth 2.0 system. The types of Personal Data collected include:

Email Metadata (Headers Only)

• Sender email address and name ("From" field)
• Date and time received
• Subject line
• List-Unsubscribe header (to detect newsletters)
• Message ID and thread information

We never access or read the body/content of your emails.

Account Information

• Email address
• Profile name
• OAuth authentication tokens

Usage Data

• Anonymous, aggregated app usage statistics
• Device type and operating system version
• App version

Mode and Place of Processing the Data

Methods of Processing

The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data. Email metadata processing occurs entirely on your device and is never transmitted to external servers.

Place

All email data processing happens locally on your device. Account and payment data may be processed at the Owner's operating offices and in any other places where the parties involved in the processing are located.

Retention Time

Personal Data shall be processed and stored for as long as required by the purpose they have been collected for, or until you sign out of the app or revoke access. Locally stored data is immediately deleted when you sign out.

The Purposes of Processing

The Data concerning the User is collected to allow the Owner to provide its Service. Specifically:

• Authentication: To verify your identity and provide secure access to your email account.
• Email Organization: To group emails by sender domain and identify subscriptions.
• Email Management: To execute cleanup actions you request (delete, archive, mark as read, apply labels).
• Analytics: To calculate statistics about your email volume locally on your device.
• Service Improvement: To collect anonymous usage statistics to improve the app experience.

Detailed Information on the Processing of Personal Data

Authentication

Clean My Email uses Google OAuth 2.0 for secure authentication. We do not store your Google password.

Analytics

We may collect anonymous, aggregated usage statistics (e.g., "how many users cleaned emails today") that cannot identify you personally. This helps us understand how the app is used and improve the service.

Third-Party Services

• Google Gmail API: To access and modify your emails per your instructions. Google's privacy policy applies to their handling of your data.
• Apple App Store / Google Play: For app distribution and in-app purchases. Their respective privacy policies apply.

Information for Users in the European Union (GDPR)

Legal Basis of Processing

The Owner may process Personal Data relating to Users if one of the following applies:

• Users have given their consent for one or more specific purposes.
• Provision of Data is necessary for the performance of an agreement with the User.
• Processing is necessary for compliance with a legal obligation.
• Processing is necessary for the purposes of the legitimate interests pursued by the Owner.

The Rights of Users Based on the GDPR

Users may exercise certain rights regarding their Data processed by the Owner. In particular, Users have the right to:

• Withdraw consent: Users have the right to withdraw consent where they have previously given their consent to the processing of their Personal Data.
• Object to processing: Users have the right to object to the processing of their Data.
• Access their Data: Users have the right to learn if Data is being processed by the Owner and obtain a copy of the Data.
• Verify and seek rectification: Users have the right to verify the accuracy of their Data and ask for it to be updated or corrected.
• Restrict processing: Users have the right to restrict the processing of their Data.
• Have their Data deleted: Users have the right to obtain the erasure of their Data from the Owner.
• Data portability: Users have the right to receive their Data in a structured, commonly used and machine readable format.
• Lodge a complaint: Users have the right to bring a claim before their competent data protection authority.

How to Exercise These Rights

Any requests to exercise User rights can be directed to the Owner through the contact details provided in this document. These requests can be exercised free of charge.

Information for Users in Switzerland

The Rights of Users According to the Swiss Federal Act on Data Protection

Users may exercise certain rights regarding their Data processed by the Owner according to the Swiss Federal Act on Data Protection (FADP). In particular, Users have the right to:

• Access their Personal Data
• Request rectification of inaccurate Data
• Request deletion of their Data
• Object to the processing of their Personal Data
• Request data portability

How to Exercise These Rights

Any requests to exercise User rights can be directed to the Owner through the contact details provided in this document.

Information for Users in Brazil (LGPD)

The Grounds on Which We Process Your Personal Information

We process your Personal Data based on your consent and/or because it is necessary for the performance of the services you have requested.

Your Brazilian Privacy Rights

You have the right to:

• Obtain confirmation of the existence of processing activities on your Personal Data
• Access your Personal Data
• Have incomplete, inaccurate or outdated Personal Data rectified
• Obtain the anonymization, blocking or elimination of unnecessary or excessive Personal Data
• Obtain the portability of your Personal Data to another service provider
• Obtain deletion of your Personal Data processed with your consent
• Obtain information about public and private entities with which your Personal Data has been shared
• Revoke consent at any time

How to File Your Request

You may file your express request to exercise your rights free of charge at any time by contacting us through the contact details provided in this document.

Information for Users in the United States

Categories of Personal Information Collected

We collect the following categories of Personal Information: identifiers (email address, account name), internet or other electronic network activity information (app usage data).

Your Privacy Rights Under US State Laws

Depending on your state of residence, you may have certain privacy rights including:

• Right to Know: You have the right to know what Personal Information we collect about you and how we use it.
• Right to Access: You have the right to request access to your Personal Information.
• Right to Delete: You have the right to request deletion of your Personal Information.
• Right to Correct: You have the right to request correction of inaccurate Personal Information.
• Right to Portability: You have the right to receive your Personal Information in a portable format.
• Right to Opt-Out: You have the right to opt-out of the sale or sharing of your Personal Information.

Note: We do not sell your Personal Information. We do not share your Personal Information for cross-context behavioral advertising.

Additional Rights for Users Residing in California

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to non-discrimination for exercising their privacy rights.

How to Exercise Your Privacy Rights Under US State Laws

To exercise your rights, please contact us using the contact details provided in this document. We will verify your identity before processing your request.

Data Security

We implement industry-standard security measures:

• OAuth tokens are stored using your device's secure keychain/keystore
• All communication with Google APIs uses HTTPS encryption
• We follow Google's API security best practices
• The app undergoes regular security reviews

Your Rights and Controls

You have full control over your data:

• Access: View all data the app has stored via the Settings screen.
• Delete: Sign out of the app to clear all locally stored data.
• Revoke access: Remove Clean My Email's access to your Google account at any time via your Google Account settings.
• Export: Request an export of your cleanup history and rules.

Children's Privacy

Clean My Email is not intended for use by children under 13 years of age (or 16 years of age in the European Union). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

Changes to This Privacy Policy

The Owner reserves the right to make changes to this privacy policy at any time by notifying its Users on this page and possibly within the app. It is strongly recommended to check this page often, referring to the date of the last modification listed at the top.

Should the changes affect processing activities performed on the basis of User consent, the Owner shall collect new consent from the User, where required.

Contact Us

If you have questions about this privacy policy or our data practices, please contact us:

• Email: privacy@cleanmy.email