Privacy Policy
1. Your data stays on your phone
Wipora reads the photos and videos on your phone (including folders such as Camera, Screenshots, Download, WhatsApp and an SD card) only to show them to you so you can decide what to keep or delete. Everything happens on your device: thumbnails, the similar/duplicate search, the blurry and dark photo filters and the storage statistics are all computed locally. No photo, video, file name, folder name or metadata is ever uploaded, and we operate no servers that process your content. Your keep/delete decisions and progress are stored only in the app's private storage; cloud backup of that storage is disabled.
Nothing is deleted or moved until you confirm it in Android's own system dialog. By default, deleted items go to the system trash (Android 11 and newer), where Android keeps them for about 30 days and you can still restore them; "Delete permanently" and "Empty now" also always ask through the system dialog. Moving items into an album (Pro) also asks through a system dialog and keeps the files on your phone. Copies already backed up to Google Photos or any other cloud service are not touched by Wipora.
2. Permissions
- Photos and videos (READ_MEDIA_IMAGES and READ_MEDIA_VIDEO on Android 13+, READ_MEDIA_VISUAL_USER_SELECTED on Android 14+, storage read access on Android 12 and older) — asked when you first start swiping; cleaning your gallery is the core function. If you allow only some photos, Wipora works with just those and offers "Allow all photos". Wipora never requests "All files access" (MANAGE_EXTERNAL_STORAGE).
- Storage write — Android 10 only, so deletions you confirm can be carried out; newer versions use the system confirmation dialog instead.
- Notifications — optional, free users only, can be turned off: an occasional reminder such as how many photos from a month are left to review.
- Internet — ads, analytics, purchases and consent. Your content is never sent.
3. Analytics and crash reports (Google Firebase)
With your consent where required, we use Google Analytics for Firebase and Firebase Crashlytics to understand how the app is used and to fix crashes. We log anonymous events such as “paywall viewed” or “purchase completed”, plus device model, OS and app version, approximate region and an app-instance identifier. We never log your content; the app enforces this with an allow-list of event parameters. Crash reports contain the error type and stack trace only. Firebase Remote Config is used to tune paywall and ad settings.
4. Advertising (Google AdMob and Unity Ads)
The free version shows ads: one slim banner on a list screen, an occasional full-screen ad after you close the result screen of a finished clean-up (never between swipes), and optional rewarded ads you choose to watch to unlock a Pro tool for a while. Ads never cover the swipe deck, the review screen, onboarding or the paywall, and never appear in the first two minutes of first use. Wipora Pro removes all ads.
Ads are served by Google AdMob, with Unity Ads competing through AdMob mediation and serving the banner directly. These partners may collect the advertising ID, device and usage information and approximate location derived from your IP address to serve and measure ads. See Google's and Unity's privacy policies.
5. Your choices (GDPR, UK GDPR, Swiss FADP, US state laws)
In the EEA, the UK and Switzerland, Wipora asks for your consent through Google's consent message (IAB TCF) before personalised ads or analytics are used. If you decline, ads are non-personalised and analytics stays off. In US states with privacy laws (such as California, Virginia, Colorado), you can opt out of the “sale” or “sharing” of personal information and targeted advertising. You can change your choice at any time in Settings → Privacy choices.
Legal bases (GDPR): consent for analytics and personalised ads; performance of a contract for the features you use and for purchases; legitimate interest for crash diagnostics where consent is not required. You may request access, deletion, correction or portability of data we control, object to processing, or lodge a complaint with your supervisory authority. California residents (CCPA/CPRA): we do not sell personal information for money; ad partners may receive identifiers as described above, which you can opt out of in Privacy choices. We do not discriminate against users who exercise their rights.
6. Purchases
Subscriptions and the lifetime purchase are processed by Google Play. We never receive your payment details; Google tells the app whether Pro is active.
7. Retention and deletion
Your content remains on your device until you delete it or uninstall the app. Analytics data is retained by Google for up to 14 months. See how to delete your data.
8. Children
Wipora is not directed to children under 13 (under 16 in the EEA) and we do not knowingly collect their data.
9. Changes
We will update this page if our practices change and revise the date above.