Privacy Policy

At a glance. DevCleaner processes files on your device; file paths, file contents, project names and tool names are not sent to us by the scan or cleanup functions. If app usage sharing is enabled, the app sends a persistent random installation identifier and limited device and usage events. The website currently loads analytics, advertising, attribution and chat scripts, and writes some cookies, without an on-site consent choice. This notice describes what the current product does; it is not consent to tracking. We are responsible for the processing described here, and the third-party services below may also process information under their own terms.

1. Who we are and what this notice covers

The controller for DevCleaner is BO Gastro Services s.r.o., Kaprova 42/14, 110 00 Praha 1, Czech Republic, company ID (IČO) 24165590, VAT ID CZ24165590. Contact us at support@devcleaner.app.

This notice covers the DevCleaner macOS and Linux apps, its website and web dashboard, trials, licenses, purchases, support, and product emails. It applies wherever we offer or provide these services. Local law may give you additional rights or require additional information; those rights are not reduced by this notice.

2. Information we process

Using the app

Scanning, calculating storage use, reviewing files, and cleaning are performed locally on your device. We do not receive the scanned paths, file contents, project names, or tool names from those operations.

• Installation and system reports. At launch, the app sends a random persistent installation ID, app and OS versions, device model or platform label, processor architecture, locale and a launch event. These reports are always sent, including when cleanup sharing is off. A higher reported app version confirms an installed update. We keep the highest confirmed version per installation to avoid counting retries or reinstallation of the same version as another update. The ID lets us recognize the same installation; these records are pseudonymous, not anonymous.
• Optional cleanup sharing. When “Contribute to the public “space freed” counter” in Settings → General → Privacy is on, the app also sends freed bytes and successful cleanup counts with the installation and device details. This is on by default and can be turned off. No file paths or contents are included.
• Ratings and feedback. If you submit a rating or feedback, we receive the rating/comment or message and the app or device details shown in the form. Feedback may include your email if you enter it. Bug reports also offer a diagnostic text attachment (up to 200 recent log lines, maximum 64 KB), which you can preview or disable before sending. Paths, email addresses and common credentials are removed and verbose dumps are omitted; review the preview for other sensitive details. The attachment is sent to support and stored with your report. A submitted rating can be associated with the installation ID while usage sharing is on.
• Trial. To start a trial, you provide an email address. The app sends that address with the installation ID, platform, app and OS versions, device model or platform label and locale so we can administer the trial, send trial service messages and connect a later license to the trial. Product news and offers use a separate optional choice; declining it does not prevent a trial.
• License and dashboard. Activation and revalidation use the license key, a unique installation ID, device name and, where supplied, purchase email. Paid Pro cloud sync may send clean-session date/time, bytes reclaimed and category display names to your dashboard. It does not send file paths, manifests or project names. License keys are stored in the macOS Keychain or the Linux desktop Secret Service.
• Product messages. Opening the in-app inbox sends the installation ID, platform, app version and first-seen timestamp to retrieve relevant messages. Marking a message as read or answering a poll stores that choice with the installation ID. Saved messages are cached locally; desktop notifications are optional.
• Updates and diagnostics. Update checks disclose the ordinary request data needed to serve the update, such as IP address and app version, to our website or download host. If you contact support, we process what you choose to send and any details needed to investigate the issue.

Website and dashboard

• Technical requests. Our website and hosting providers may process IP address, browser/device information, requested page, referral URL, timestamps and security logs to deliver and protect the service.
• Analytics and advertising. Website pages currently load Google Analytics, Microsoft Clarity, Reddit Pixel, DashiMetrics, clicks.page and the KnowEra chat widget in the places identified by the site code. These tools may receive page views, interactions, campaign/referral identifiers, online identifiers, browser/device data and IP-related information. Reddit's Conversions API may receive download or purchase-attribution events; contact information sent in a conversion event may be hashed. A hash can still be personal data.
• Referral attribution. A referral link can place a referral code in a first-party cookie for up to 30 days. A daily de-duplication cookie lasts up to 24 hours. A referral hit is sent to our server; raw IP addresses are not stored in the referral deduplication table, but a hash derived from the IP, referral code and day is kept for no more than two days to suppress repeat counts. Aggregate referral counts may be kept longer.
• Roadmap. Suggesting a feature stores the title and description you submit. An optional email is used only to reply about that suggestion, and is deleted when the suggestion is closed or after 90 days. A vote stores a hash of a random device id together with the roadmap item, not your name or email.
• Chat. If you use the KnowEra chat widget, the text you enter and technical data needed to operate the widget may be processed by KnowEra and its service providers. Do not send passwords, license keys, payment details, private code or other sensitive information through the chat.
• Dashboard sign-in. A magic-link sign-in uses your purchase email and session/security data. Dashboard activity may include license, device and synced cleanup information described above.

3. Why we use information and our legal bases

• Provide the app, trial, license, purchase and dashboard: to perform the contract with you or take steps you request before a contract.
• Payments, accounting, tax and consumer requests: to meet legal obligations and administer the purchase.
• Support, service security, fraud prevention and service reliability: our legitimate interests in operating and protecting DevCleaner, balanced against your rights.
• App product analytics and ratings: to understand adoption, product reliability and feedback. Where applicable law requires consent, we rely on consent; otherwise we assess and rely on legitimate interests where permitted. You can switch cleanup sharing off in the app and may object by contacting us. Installation and system reports continue when cleanup sharing is off.
• Product news and promotional emails: your separate consent where required. You can unsubscribe using the link in each email; service messages about a trial, purchase, security or license are separate.
• Website analytics, advertising, chat and cookies: consent where required by local law, including for non-essential storage/access technologies. Some website scripts currently load before a consent choice is obtained. Their presence in this notice does not mean that visiting the site is consent. Where processing of personal data relies on consent, you may withdraw it; where we rely on legitimate interests, you may object.

4. Cookies and similar technologies

The site uses or may use browser storage and similar technologies for referral attribution, analytics, advertising, chat and security. A roadmap vote may store a random device id in a first-party cookie and in local storage so the same browser keeps one vote. In the current implementation, Reddit click IDs may be stored for up to 90 days; referral codes for up to 30 days; and referral de-duplication values for up to 24 hours. Google Analytics, Microsoft Clarity, Reddit, DashiMetrics, clicks.page and KnowEra may use their own identifiers or storage under their own technical settings.

At the date of this notice, the site has no consent banner or preference control, and some non-essential scripts run automatically. Browser settings or ad blockers may block some requests but are not a substitute for our own consent controls. We do not treat this policy or continued browsing as consent. We are reviewing the site's consent and opt-out controls; until they are implemented, this section is a disclosure of the current data flow, not a claim that every use is permitted in every country.

5. Who receives information

We share only information needed for the purpose with the following categories of recipients:

• Payments: Stripe processes checkout and payment information. We receive purchase and subscription status; we do not receive or store full card numbers.
• Email: Resend delivers trial, license, support and opted-in product emails.
• Website measurement and advertising: Google Analytics, Microsoft Clarity, Reddit, DashiMetrics and clicks.page, as described above.
• Website chat: KnowEra provides the chat widget and related services when you use it.
• Hosting and infrastructure: our website, database, update and download hosting providers store or transmit information on our behalf and may process standard request/security data.
• Legal and safety disclosures: public authorities, courts, professional advisers or other parties when required by law or reasonably necessary to protect rights, safety and the service.

Depending on the service and activity, a provider may act as our processor or as a separate controller. Each provider may process information under its own privacy notice and applicable contract. We do not sell customer lists for money. Some advertising or analytics disclosures may be treated as “sharing”, “targeted advertising” or a similar activity under certain regional privacy laws.

6. International processing

BO Gastro Services s.r.o. is established in the Czech Republic. Our service providers may process information in the European Economic Area, the United States and other countries where they or their subprocessors operate. Where a transfer is subject to a legal safeguard, we use a permitted transfer mechanism and can provide information about that mechanism on request. The provider's own privacy notice explains its role and any further transfers.

7. How long we keep information

We keep personal information only for as long as needed for the purpose for which it was collected, to meet legal/accounting requirements, to resolve disputes and enforce agreements, or to protect the service. In particular:

• license, purchase and tax records are kept while needed to administer the license and afterward for applicable accounting, tax and limitation periods;
• trial and service-email records are kept while needed to administer the trial, license and related service messages; promotional-email consent and unsubscribe records are kept to honour and document your choice;
• support and feedback records are kept while a request is open and for a reasonable period afterward to support the service and handle related claims;
• an optional roadmap suggestion email is deleted when that suggestion is closed or after 90 days, whichever comes first;
• referral deduplication hashes are deleted within two days; referral totals are retained as aggregate counts;
• analytics and advertising data is retained according to our configuration and the relevant provider's retention settings and policies; and
• security and hosting logs are retained for the period needed for security, troubleshooting and legal requirements.

Where this notice does not give a fixed number of days, the period is determined by the criteria above and the operational retention settings of the relevant system or provider. We delete or irreversibly aggregate information when it is no longer needed, subject to records we must keep by law.

8. Your choices and privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, or information about our processing; object to certain processing; withdraw consent; and opt out of sale/sharing or targeted advertising. You may also have the right to appeal a decision on a privacy request or complain to your regulator. The exact rights and exceptions depend on local law.

• Turn off cleanup sharing under Settings → General → Privacy.
• Unsubscribe from optional product emails using the link in the email.
• For a privacy request, email support@devcleaner.app with your country/region and the right you want to exercise. We may ask for reasonable information to verify the request and will respond within the time required by applicable law.

For people in the EEA, UK and other jurisdictions with similar laws, rights may include access, rectification, erasure, restriction, data portability, objection, and withdrawal of consent without affecting prior lawful processing. You may complain to your local data-protection authority. In the Czech Republic, that is the Office for Personal Data Protection.

For people in the United States, state privacy laws may provide rights to know/access, correct, delete, obtain a portable copy, and opt out of certain targeted advertising, sale or sharing, subject to thresholds, exceptions and verification rules. For people in India, Canada, Australia and other countries, local rights and complaint routes apply where the relevant law covers the processing.

9. Children

DevCleaner is designed for developers and is not directed to children. We do not knowingly seek to collect personal information from children in a way that requires parental consent. If you believe a child has provided information improperly, contact us so we can review it.

10. Security

We use technical and organisational measures intended to protect information, including secure transport, access controls and secure local storage for license keys. No online service or storage method can be guaranteed completely secure. Please do not email passwords, full payment-card details, license keys or private project files.

11. Changes and contact

We may update this notice when our services, processing or legal requirements change. We will post the current version here and change the update date. Material changes will also be communicated through the app, email or website where appropriate.

Privacy questions and requests: support@devcleaner.app. BO Gastro Services s.r.o., Kaprova 42/14, 110 00 Praha 1, Czech Republic.

Quick answers

Does the app upload my files?

No. File paths, contents, project names and tool names are not sent by scanning or cleanup. Installation and system reports send a persistent random installation ID and device information at launch. Optional cleanup sharing adds freed bytes and cleanup counts.

Can I turn off app analytics?

You can turn off “Contribute to the public “space freed” counter” in Settings → General → Privacy to stop sending cleanup totals. Installation and system reports, including launch events and version changes, continue. The installation ID makes these records pseudonymous, not anonymous. Website tracking currently has no on-site consent control.

How do I make a privacy request?

Email support@devcleaner.app and include your country or region and the request you want to make.