Privacy Policy

Roomy is built to respect your privacy. Your photos, videos, and contacts are analyzed on your device, and the optional SafeKeep vault is protected with end-to-end encryption that only you can unlock.

Introduction

This Privacy Policy explains how the Roomy app ("Roomy", "the app", "we", "us", or "our") handles your information. Roomy is an iOS app that helps you free up storage on your iPhone. It can find duplicate, similar, and blurry photos, screenshots, and large videos; compress videos; convert Live Photos to still photos; merge duplicate contacts; and back up selected photos and videos to an encrypted cloud vault called SafeKeep.

Roomy is developed by Nicolas Vrillac. By using the app, you agree to the practices described in this policy. If you do not agree, please do not use the app.

Information We Collect

We collect as little information as possible, and only what is needed to provide the app's features. The categories below are the only personal data associated with you:

• Photos or Videos: Only the specific photos and videos you explicitly choose to back up to SafeKeep. These are encrypted on your device before they leave your phone, and only the encrypted version is stored on our servers. We do not access, scan, or upload any other photos or videos in your library.
• Device Identifier: A random identifier generated by the app and used only to associate your SafeKeep vault items with your device. This is not an advertising identifier and is not used to track you.
• Purchase History: Your subscription status and purchase records, handled through Apple and our subscription infrastructure provider, RevenueCat, so we can unlock the features you have paid for.

We do not collect your name, email address, phone number, precise location, browsing history, or contacts as stored data. If you email us for support, we will of course see the email address you write from.

On-Device Processing

The core work Roomy does happens entirely on your device:

• Photos and videos are analyzed locally on your iPhone to detect duplicates, similar images, blurry shots, screenshots, and large videos, and to compress videos or convert Live Photos to still images. This analysis never leaves your device.
• Contacts are read through Apple Contacts only to find and merge duplicate entries. This de-duplication is performed on-device. Your contacts are never uploaded to our servers or shared with anyone.

Because this processing is local, Roomy needs permission to access your Photos and, if you use the contact merge feature, your Contacts. You can grant or revoke these permissions at any time in the iOS Settings app.

SafeKeep Encryption

SafeKeep is an optional, end-to-end encrypted vault for photos and videos you choose to keep safe in the cloud. It is designed so that only you can access the contents.

• Only the items you explicitly select are backed up. Nothing is uploaded automatically.
• Each item is encrypted on your device using AES-256-GCM before it is uploaded.
• The encryption key is generated on your device and stored only in the device Keychain. The key is never transmitted to our servers or to anyone else.
• Only encrypted ciphertext is stored on our servers. Because we never receive your key, we cannot read, view, or recover the contents of your SafeKeep items.
• You can restore items back to your phone, or permanently delete them from the vault, at any time.

What We Do Not Do

We want to be direct about what Roomy does not do:

• We do not track you across other apps or websites.
• We do not show advertising or use advertising identifiers.
• We do not sell, rent, or share your personal data with data brokers or advertisers.
• We do not read the contents of your photos, videos, or contacts. Your SafeKeep content is encrypted and unreadable to us.
• We do not use third-party analytics SDKs beyond the subscription and crash infrastructure named in this policy.

Third-Party Services

Roomy relies on a small number of trusted service providers to operate. Each is used only for the specific purpose described below:

• Apple: Handles all in-app purchases and subscription billing through the App Store, and provides the Photos and Contacts frameworks used for on-device processing.
• RevenueCat: Our subscription infrastructure provider, used to manage and validate subscription and purchase status so we can unlock paid features.
• Supabase: Acts as a data processor that stores your encrypted SafeKeep ciphertext. Supabase stores only encrypted data and cannot read the contents.

These providers process data on our behalf under their own privacy and security terms. We do not send them any content they could read, and we do not share your data with them for advertising.

Data Retention and Deletion

We keep your SafeKeep ciphertext and associated device identifier for as long as you keep those items in your vault. When you delete a SafeKeep item, its encrypted copy is removed from the cloud. Purchase and subscription records are retained as needed to provide the service and to meet Apple's and our providers' requirements.

You are always in control:

• Delete individual SafeKeep items at any time to remove them from the cloud.
• To request deletion of all data associated with you, contact us at the email below and we will remove your vault data and associated identifier.

Children's Privacy

Roomy is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

Your Rights (GDPR and CCPA)

Depending on where you live, you may have rights under the General Data Protection Regulation (GDPR) or the California Consumer Privacy Act (CCPA), including:

• The right to access the personal data we hold about you.
• The right to delete your personal data.

Deleting your SafeKeep items removes them from the cloud. To exercise any of these rights, or to request deletion of all of your data, contact us at the email below. We do not sell personal data, so there is nothing to opt out of in that respect.

International Users

Roomy is available in many countries. Your encrypted SafeKeep data may be stored and processed on servers located in a country other than your own. Regardless of where the data is stored, it remains encrypted and unreadable to us, and we apply the protections described in this policy to it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Significant changes may also be communicated within the app. Your continued use of Roomy after an update means you accept the revised policy.

Contact

If you have any questions about this Privacy Policy or your data, please contact:

Nicolas Vrillac
Email: [email protected]