PRIVACY POLICY FOR STREAM CLEANER

1. Introduction

This Privacy Policy explains how Infinity Dzmitry Yankouski collects, uses, stores and protects personal data when you:

• visit the Stream Cleaner website available at https://streamclean.evexa.net/;
• submit your contact information through the Website;
• use the Stream Cleaner mobile application for Apple devices;
• purchase or manage a Stream Cleaner subscription through the Apple App Store;
• contact us for support or other enquiries.

The Website and the Stream Cleaner mobile application are collectively referred to as the “Services”.

This Privacy Policy applies to users in all countries where the Services are made available. Depending on your country or region, you may have additional rights under applicable data-protection legislation.

2. Data Controller

The controller responsible for processing personal data is:

Dzmitry Yankouski, conducting business in Poland under the business name:

Infinity Dzmitry Yankouski

NIP: 1133074156

Registered business address:

ul. Cybernetyki 7H/57
02-677 Warsaw
Poland

Email: support@streamclean.evexa.net

In this Privacy Policy, the controller may also be referred to as “Stream Cleaner”, “we”, “us” or “our”.

3. Website and Mobile Application

The Website and the mobile application process different categories of information.

Through the Website, you may voluntarily provide your telephone number, email address or Telegram username to receive a notification about the launch of Stream Cleaner or to contact us.

The mobile application does not require you to provide your name, telephone number, email address or Telegram username.

The mobile application uses Firebase Analytics and Firebase Crashlytics, which may process certain technical, usage and diagnostic information.

Contact information submitted through the Website is not automatically linked to:

• photographs or videos stored on your device;
• Firebase Analytics information;
• Firebase Crashlytics reports;
• Apple subscription information;
• Apple transaction information.

4. Sources of Information

We may receive information:

• directly from you when you complete a form on the Website;
• automatically when you visit the Website;
• automatically through Firebase when you use the mobile application;
• from Apple when the application checks your subscription status;
• when you contact us through email, WhatsApp or Telegram.

We do not purchase contact databases from third parties.

5. Information You Provide Through the Website

When you request information about the launch of Stream Cleaner, you may provide:

• your telephone number for WhatsApp communication;
• your email address;
• your Telegram username or telephone number;
• your selected communication channel;
• the date and time when the form was submitted;
• information about your consent;
• any other information that you voluntarily submit through the Website.

The information stored in Amazon DynamoDB may include:

• the contact detail provided by the user, depending on the selected communication channel, such as a Telegram username, telephone number or email address;
• the user's IP address;
• the browser User-Agent string;
• the selected communication channel;
• the date and time when the form was submitted;
• information recording the user's consent.

Providing this information is voluntary. However, without valid contact information, we cannot send you a notification about the launch of Stream Cleaner or respond through your selected communication channel.

6. Purpose of Collecting Contact Information

We use contact information submitted through the Website to:

• notify you when Stream Cleaner becomes available;
• send information directly related to the launch of the application;
• provide an early-access invitation, where applicable;
• respond to questions or enquiries;
• maintain records of consent;
• prevent spam, fraud and misuse of the Website;
• comply with applicable legal requirements;
• establish, exercise or defend legal claims.

We do not use contact information submitted through the Website to advertise unrelated third-party products or services.

7. Legal Basis for Processing Website Information

Where the GDPR applies, we process your contact information primarily on the basis of your consent.

You may withdraw your consent at any time by contacting us at: support@streamclean.evexa.net

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

We may also process limited information based on our legitimate interests, including:

• protecting the Website against fraud, spam and security threats;
• responding to enquiries;
• maintaining evidence of consent;
• preventing further messages after an opt-out request;
• establishing, exercising or defending legal claims.

We may process information where necessary to comply with a legal obligation.

Under GDPR principles, withdrawing consent should be as easy as giving it. Once consent is withdrawn, the relevant processing must stop unless another valid legal basis permits continued retention or processing.

8. Technical Website Information

When you visit the Website, certain technical information may be processed automatically, including:

• IP address;
• browser type and version;
• operating system;
• device type;
• browser language;
• approximate country or region;
• date and time of the visit;
• pages viewed;
• referral source;
• session duration;
• interactions with Website elements;
• cookie and session identifiers;
• information about technical errors.

The IP address and browser User-Agent may be stored together with the submitted contact information for security, fraud-prevention and consent-record purposes.

Some of this information may be processed by our hosting, infrastructure, security and analytics providers.

9. Google Analytics on the Website

The Website uses Google Analytics to help us understand how visitors interact with the Website.

Google Analytics may process information such as:

• device and browser information;
• approximate location;
• pages viewed;
• session information;
• referral source;
• interactions with Website elements;
• analytics and cookie identifiers.

We use this information to:

• measure Website traffic;
• understand how the Website is used;
• assess the effectiveness of the Website;
• identify usability problems;
• improve Website performance.

We do not intentionally send your telephone number, email address or Telegram username to Google Analytics.

Where consent is required by applicable law, non-essential analytics technologies are activated only after the required consent has been provided.

The current Google Analytics data-retention setting is: 14 months

10. Cookies and Similar Technologies

The Website may use cookies and similar technologies.

10.1 Essential cookies

Essential cookies may be used to:

• operate the Website;
• protect the Website against security threats;
• remember privacy choices;
• process Website forms;
• prevent abuse and duplicate submissions.

10.2 Analytics cookies

Analytics cookies may be used by Google Analytics to measure Website usage.

Where consent is legally required, analytics cookies are used only after consent has been provided.

You may reject non-essential cookies or withdraw your consent through the Cookie settings link in the Website footer.

Changing your cookie preferences does not affect the lawfulness of processing that occurred before your preferences were changed.

11. Website Hosting, Backend and Database

The Website is delivered using Amazon CloudFront.

Contact information submitted through the Website is stored in Amazon DynamoDB.

Email notifications may be sent using Amazon Simple Email Service — Amazon SES.

Access to the Website database is limited to authorised persons who require access to:

• manage Website submissions;
• send launch notifications;
• respond to enquiries;
• maintain the Website;
• comply with legal obligations.

12. WhatsApp, Telegram and Email

If you select WhatsApp, Telegram or email as your preferred communication method, we may use the contact information you provided to notify you about the launch of Stream Cleaner or respond to your enquiry.

WhatsApp and Telegram messages are sent manually by an authorised member of our team.

We do not use:

• WhatsApp Business API;
• Telegram Bot API;
• automated WhatsApp messaging systems;
• automated Telegram messaging systems;
• third-party messaging automation services.

Email messages may be sent using Amazon SES.

WhatsApp, Telegram, Amazon SES, your email provider and your telecommunications provider may independently process information under their own privacy policies and terms.

We do not control the independent processing performed by those services.

13. Withdrawal of Consent and Opt-Out

You may withdraw your consent and opt out of launch-related communications at any time.

You may do this by:

• contacting us at support@streamclean.evexa.net;
• replying to an email, WhatsApp message or Telegram message and asking us not to contact you again;
• asking us to delete your contact information.

After receiving your request, we will:

• stop using your contact information for launch-related communications;
• remove your contact information from our active communication database;
• delete the information unless continued retention is required or permitted by applicable law.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

We may retain a minimal record of your opt-out request where necessary to:

• ensure that you are not contacted again;
• demonstrate compliance with applicable legal requirements;
• resolve complaints or legal claims.

14. Retention of Website Contact Information

Contact information submitted to receive launch notifications, together with the associated IP address, browser User-Agent and consent record, will be retained:

• for up to 12 months from the date it was submitted;
• until you withdraw your consent;
• until you ask us to delete it;
• or until the information is no longer required for the purpose for which it was collected;

whichever occurs first.

After the applicable retention period, the information will be deleted or anonymised unless longer retention is required by law.

15. Accounts and Contact Information

Stream Cleaner does not require users to create an account.

The application does not request users to provide:

• their name;
• telephone number;
• email address;
• postal address;
• Telegram username;
• social-media credentials;
• password;
• date of birth;
• contact list.

Contact information previously submitted through the Website is not used to create an application account or identify the user inside the application.

16. Access to Photographs and Videos

Stream Cleaner requires access to photographs, videos and related media stored on the user's Apple device to provide its core functionality.

Depending on the permissions available through iOS, users may provide access to:

• their entire photo library;
• selected photographs and videos;
• albums or individual media items.

Access is granted through Apple's system permission interface.

You may change or withdraw photo-library permission at any time through the settings of your device.

If permission is withdrawn, some or all Stream Cleaner features may no longer work.

17. Local Processing of Photographs and Videos

Photographs, videos and their associated metadata are processed exclusively on the user's device. Photographs, videos, filenames, creation dates, location data and other media metadata are not transmitted to our servers, Firebase or any other third-party service.

Stream Cleaner does not:

• upload photographs or videos to our servers;
• store copies of photographs or videos in Amazon DynamoDB;
• send photographs or videos to Firebase Analytics;
• send photographs or videos to Firebase Crashlytics;
• send photographs or videos to Google Analytics;
• use photographs or videos for advertising;
• sell photographs or videos;
• use photographs or videos to train external artificial-intelligence models;
• allow our personnel to remotely view the user's photo library;
• link photographs or videos to contact information submitted through the Website.

The analysis of photographs and videos, including the identification of similar files, duplicates, screenshots, large files or other categories, takes place locally on the device.

Temporary information generated during local analysis is used only to provide application functionality.

18. Media Selection and Deletion

Stream Cleaner may help users identify and select photographs or videos that they may wish to delete.

Automated classification and recommendations are intended only to assist users with organising their media library.

The user is responsible for:

• reviewing selected files;
• deciding which files to retain;
• confirming which files should be deleted.

Stream Cleaner does not independently make final deletion decisions on behalf of the user.

19. Firebase Analytics

Stream Cleaner uses Firebase Analytics, a service provided by Google.

Firebase Analytics may process technical and application-usage information, including:

• application-instance identifiers;
• device type and model;
• operating-system version;
• application version;
• approximate country or region;
• application sessions;
• screens viewed;
• interactions with application features;
• subscription or purchase-related events;
• other events configured within the application.

We use Firebase Analytics to collect limited, aggregated usage metrics, including:

• the total amount of media scanned, measured in gigabytes;
• the total amount of media deleted, measured in gigabytes;
• general technical and application-usage information collected automatically by the Firebase Analytics SDK.

We do not send photographs, videos, filenames, location data, creation dates or other photo-library metadata to Firebase Analytics.

Photographs, videos and the contents of the user's photo library are not sent to Firebase Analytics.

Google provides developers with information about the data collected by individual Firebase SDKs and requires developers to account for those practices in App Store privacy disclosures.

Firebase Crashlytics keeps crash reports and associated identifiers for 90 days.

20. Firebase Crashlytics

Stream Cleaner uses Firebase Crashlytics, a crash-reporting and diagnostic service provided by Google.

Firebase Crashlytics may process information such as:

• crash reports;
• stack traces;
• application state at the time of a crash;
• device model;
• operating-system version;
• application version;
• installation identifiers;
• technical logs;
• diagnostic information relating to errors and application stability.

We use this information to:

• identify crashes and technical problems;
• investigate the circumstances in which errors occurred;
• improve application stability;
• fix defects and performance issues.

Photographs, videos, filenames, creation dates, location data and other photo-library metadata are not sent to Firebase Crashlytics. Crashlytics receives only technical and diagnostic information required to identify and investigate application errors.

Firebase describes Crashlytics as a crash-reporting tool used to track, prioritise and resolve application-stability issues.

The Firebase Analytics data-retention period is 14 months.

21. Push Notifications

Stream Cleaner does not currently use push notifications.

The application does not currently collect device push tokens for sending notifications.

If push notifications are introduced in the future, this Privacy Policy will be updated to describe the associated data processing.

22. Apple Subscriptions and Payments

Stream Cleaner offers an auto-renewable subscription through the Apple App Store using Apple StoreKit.

The subscription is purchased, processed, verified and managed exclusively through Apple and Apple StoreKit.

We do not use:

• RevenueCat;
• Adapty;
• our own subscription-management backend;
• any other third-party subscription-management platform.

We do not receive or store:

• payment-card numbers;
• CVV or CVC codes;
• bank-account details;
• Apple Account passwords;
• complete payment credentials;
• complete billing information.

Apple processes and manages subscription and transaction information through the App Store and Apple StoreKit.

Stream Cleaner only checks through StoreKit whether the user has an active subscription entitlement in order to provide access to paid features.

We do not separately collect or store transaction identifiers, purchase dates, renewal dates, cancellation information, refund information or subscription history on our servers.

We do not operate our own subscription backend and do not use RevenueCat, Adapty or any other third-party subscription-management platform.

Subscription prices, billing periods, renewal conditions and any available introductory offers are displayed in the application and the App Store before the purchase is confirmed.

Subscriptions automatically renew unless cancelled through the user's Apple Account settings in accordance with Apple's rules.

Payment processing, subscription management, cancellations and refunds are handled by Apple and are subject to Apple's applicable terms and policies.

Apple states that StoreKit provides a secure mechanism for in-app purchases. Apple also explains that payment information entered through a payment service and never accessed by the developer is not treated as information collected by the developer.

23. Advertising, Analytics and Tracking

Stream Cleaner does not display third-party advertising.

We do not use personal data for:

• targeted advertising;
• third-party advertising profiles;
• cross-app tracking;
• cross-website tracking;
• selling or sharing data with data brokers.

The application uses:

• Firebase Analytics for internal application analytics;
• Firebase Crashlytics for crash reporting and technical diagnostics.

Information collected through Firebase is used only to:

• understand how Stream Cleaner is used;
• improve functionality and usability;
• identify and resolve technical problems;
• monitor application stability and performance.

We do not use Firebase information to track users across applications or websites owned by unrelated companies.

Photographs, videos and the contents of the user's photo library are not sent to Firebase.

The application's use of Apple's App Tracking Transparency framework and the advertising identifier, IDFA, is:

Stream Cleaner does not use Apple's App Tracking Transparency framework, does not request permission to track users and does not access the Identifier for Advertisers (IDFA).

Apple requires App Store privacy disclosures to include the data practices of both the developer and third-party SDKs integrated into the application.

24. Service Providers and Recipients

Personal data may be processed by the following service providers.

24.1 Amazon Web Services

AWS services are used to:

• deliver and host parts of the Website;
• receive and store Website form submissions;
• operate Website infrastructure;
• send email notifications.

Known AWS services include:

• Amazon CloudFront;
• Amazon DynamoDB;
• Amazon SES.

24.2 Google

Google provides:

• Google Analytics for Website analytics;
• Firebase Analytics for mobile-application analytics;
• Firebase Crashlytics for crash reporting and diagnostics.

24.3 Apple

Apple provides:

• application distribution through the App Store;
• StoreKit subscription processing;
• purchase verification;
• subscription management;
• purchase restoration;
• cancellation and refund handling.

24.4 Communication services

Depending on the communication channel selected by the user, information may also be processed by:

• WhatsApp;
• Telegram;
• the user's email provider;
• the user's telecommunications provider.

24.5 Professional advisers and authorities

Information may be disclosed where reasonably necessary to:

• accountants;
• lawyers;
• IT contractors;
• security specialists;
• courts;
• regulators;
• law-enforcement authorities;
• other authorised public bodies.

Such disclosure will take place only where permitted or required by applicable law.

25. Sale of Personal Data

We do not sell personal data.

We do not sell or license:

• contact information submitted through the Website;
• Firebase Analytics information;
• Firebase Crashlytics information;
• photographs or videos;
• subscription information.

We do not provide contact information to third parties for their independent marketing purposes.

26. International Data Transfers

We operate from Poland.

Some service providers, including Amazon, Google, Apple, WhatsApp and Telegram, may process information outside Poland or the European Economic Area.

Where required by applicable law, international transfers are carried out using recognised legal mechanisms and appropriate contractual, technical or organisational safeguards.

These mechanisms may include:

• adequacy decisions;
• standard contractual clauses;
• other transfer safeguards recognised under applicable legislation.

You may contact us at support@streamclean.evexa.net to request additional information about international data transfers.

27. Data Security

We use reasonable technical and organisational measures to protect personal data, including, where applicable:

• encrypted network connections;
• restricted access to databases;
• authentication and access controls;
• infrastructure and software updates;
• logging and monitoring;
• limitation of access to authorised persons;
• deletion or anonymisation after applicable retention periods.

No internet transmission or electronic storage system can guarantee absolute security.

If a personal-data breach occurs, we will take the actions required by applicable legislation, including notification of the relevant authority or affected individuals where legally required.

28. General Data-Retention Principles

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.

In particular:

• Website launch-notification contacts are retained for no longer than 12 months, unless deleted earlier;
• consent and opt-out records may be retained as necessary to demonstrate compliance;
• Firebase information is retained according to the settings configured in Firebase and Google Analytics;
• diagnostic information may be retained for as long as necessary to investigate and resolve errors;
• correspondence may be retained for as long as necessary to resolve an enquiry or legal claim;
• Apple subscription information is handled through Apple StoreKit and is not stored in our own subscription backend.

We may retain information for a longer period where necessary to comply with a legal obligation or establish, exercise or defend a legal claim.

29. Rights of Users in the European Economic Area

If the GDPR applies to you, you may have the right to:

• obtain confirmation that your personal data is being processed;
• request access to your personal data;
• receive a copy of your personal data;
• request correction of inaccurate or incomplete information;
• request deletion of your personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• receive certain data in a portable format;
• withdraw consent at any time;
• lodge a complaint with a competent supervisory authority;
• receive information about international data transfers;
• not be subject to decisions based solely on automated processing where such decisions produce legal or similarly significant effects.

These rights may be subject to legal limitations and exceptions.

Requests may be sent to: support@streamclean.evexa.net

We may request information reasonably necessary to verify your identity before responding.

The GDPR provides individuals with rights concerning access, correction, deletion and other forms of control over their personal data.

30. Complaints in Poland

Users may submit a complaint to the data-protection authority in their country of residence, place of work or the location of an alleged infringement.

The competent supervisory authority in Poland is:

Prezes Urzędu Ochrony Danych Osobowych
President of the Personal Data Protection Office.

You may also contact us first at: support@streamclean.evexa.net

31. Rights of Users in Brazil

If the Brazilian Lei Geral de Proteção de Dados Pessoais — LGPD applies to you, you may have the right to:

• receive confirmation that your personal data is processed;
• access your personal data;
• request correction of incomplete, inaccurate or outdated information;
• request anonymisation, blocking or deletion of unnecessary, excessive or unlawfully processed data;
• request information about recipients of your personal data;
• request deletion of information processed on the basis of consent, subject to legal exceptions;
• withdraw consent;
• object to certain processing;
• exercise other rights available under applicable Brazilian legislation.

You may submit a request to: support@streamclean.evexa.net

Brazil's LGPD regulates the processing of personal data, including processing carried out through digital services, and provides rights to data subjects.

32. Users in Other Countries

Users in Belarus, Kazakhstan, Azerbaijan, Uzbekistan, India and other countries may have additional rights under applicable local legislation.

Where applicable, we will consider requests relating to:

• access to personal data;
• correction;
• deletion;
• withdrawal of consent;
• objection to processing;
• information about the use of personal data;
• discontinuation of optional communications.

Requests may be sent to: support@streamclean.evexa.net

33. Automated Decision-Making

We do not use personal data to make decisions that produce legal or similarly significant effects concerning users.

Automated classification of photographs or videos is used only to provide media-management suggestions.

The user makes the final decision about whether to retain or delete a media file.

34. Children's Privacy

Stream Cleaner is not specifically directed at children.

We do not knowingly use the Website to collect contact information from children who cannot legally provide valid consent under applicable law.

If you believe that a child has submitted personal data without the required authorisation, contact us at: support@streamclean.evexa.net

We will review the request and delete the information where appropriate.

35. Third-Party Links and Services

The Website and the application may contain links to:

• the Apple App Store;
• WhatsApp;
• Telegram;
• other third-party websites or services.

The processing of information by those services is governed by their own privacy policies and terms.

This Privacy Policy does not control independent processing carried out by third-party service providers.

36. Changes to This Privacy Policy

We may update this Privacy Policy when:

• Website or application functionality changes;
• new analytics or diagnostic services are introduced;
• new service providers are used;
• data-retention practices change;
• subscription functionality changes;
• applicable legal requirements change.

The latest version will be published on the Website with an updated “Last updated” date.

Where required by applicable law, material changes may also be communicated through the Website, application or another appropriate communication channel.

37. Contact Us

For privacy questions, requests or complaints, contact:

Dzmitry Yankouski
Infinity Dzmitry Yankouski
NIP: 1133074156
ul. Cybernetyki 7H/57
02-677 Warsaw
Poland
Email: support@streamclean.evexa.net
Website: https://streamclean.evexa.net/