Privacy Policy

This privacy policy applies to the Cura app (hereby referred to as “Application”) for mobile devices that was created by Moonstone Peak Hong Kong Technology Co., Limited (hereby referred to as “Service Provider”). The Application is free to download and offers optional paid subscriptions. This service is intended for use “AS IS”.

Information Collection and Use

The Application collects information when you download and use it. This information may include information such as:

• Your device's Internet Protocol address (e.g. IP address)
• The pages of the Application that you visit, the time and date of your visit, the time spent on those pages
• The time spent on the Application
• The operating system you use on your mobile device
• The actions you take in the Application, such as which cleanup or organizing feature you use, the category of album you review, and whether a cleanup completed or was cancelled
• Subscription events, such as when a purchase screen is shown, when a purchase starts, and whether it succeeded or failed, including the product identifier and the reason for a failure
• An anonymous device identifier generated by the Application, which does not identify you personally and is not derived from any account
• The Advertising Identifier (IDFA) of your device, but only if you grant permission when asked (see “Advertising Identifier and Your Choices” below)

The Application does not gather precise information about the location of your mobile device.

The Application does not require a Cura account. Its optional Mail feature uses Google sign-in, as described below. The Application does not ask you to enter your Google password. If you contact support, the Service Provider may receive the information you choose to send. The device identifier described above is generated by the Application itself rather than supplied by you, and is retained and used as described in this privacy policy.

Notifications

If you allow it, the Application sends you a daily reminder suggesting that you review your photos and free up storage. These reminders are created and scheduled on your device; they are not sent from a server, and no message is targeted at you based on what the Application has collected about you.

Granting notification permission is optional and every feature works without it. You can turn these reminders off at any time in your device settings under Notifications, or by declining the permission when it is requested.

Optional Google Sign-In and Gmail

If you choose to use Mail, you can connect a Google account through Google's sign-in flow. The Application receives your Google account identifier and email address to show which account is connected and to maintain that session on your device. The photo and video features do not require Google sign-in.

With the Gmail access you authorize, the Application lists messages and reads the metadata needed to organize them: message and thread identifiers, labels, dates, and selected headers including sender, subject, List-ID, and unsubscribe details. It uses this information to show categories, filters, and unsubscribe options. The Mail feature does not fetch message bodies or attachments. After you select messages and confirm, the Application asks Gmail to move those messages to Trash; it does not permanently delete them. Google may continue to retain the messages in Trash under its own policies.

If you choose an unsubscribe option, the Application may open a sender's website or prepare an email to that sender. The destination may receive information included in the unsubscribe link or message. You choose whether to visit the website or send the email.

Mail requests go directly from your device to Google's sign-in and Gmail services. The Application keeps a local cache of message metadata, filters, and cleanup progress so you can review and resume your work. This cache is stored in the Application's protected storage on your device and excluded from device backups. Gmail message data and your Google account email address are not sent to the Service Provider's servers, analytics providers, or advertising partners, and are not used for advertising or AI model training. Google handles the data you share with its services under Google's own policies.

Using Mail is optional. Signing out of Google in the Application clears its local mail cache. You can also revoke Cura's access in your Google Account security settings. Revoking access stops further Gmail requests; it does not undo messages already moved to Trash. Uninstalling the Application removes its local mail data.

Your Photos and Videos

The Application asks for access to your photo library in order to find duplicates, similar shots, screenshots, large videos and other items you may want to remove or organize. People grouping is optional and requires a separate choice in Gallery.

Your photo and video content is analyzed on your device. The Application does not send the contents of your photo library, thumbnails, previews, or face-analysis results to the Service Provider or third parties. It may send feature usage events and aggregate item counts as described under “Information Collection and Use.”

When you choose to delete items, the Application asks the operating system to remove them from your photo library. Deleted items follow the normal behavior of your device, which usually means they stay in the system “Recently Deleted” album until that album is emptied.

Optional People Grouping and Face Data

If you choose to enable People in Gallery, the Application uses an on-device face detection and SFace model to locate faces in photos you have allowed it to access, calculate numerical face features, and group photos that appear to show the same person. Groups are unnamed and are only for browsing your own photo library. The Application does not use face data to identify people by name, authenticate anyone, train a model, or target advertising. Automated grouping can miss faces or put photos in the wrong group.

To avoid repeating lengthy analysis, the Application stores photo identifiers, face locations, and numerical face features in a local cache, including a record when no face was found. It does not store separate copies of face photos in that cache. The cache is protected by the device's file protection and excluded from device backups. Face images, features, locations, and groups are not sent to the Service Provider, analytics providers, or advertising partners.

You can turn off face analysis in Gallery under Peoples at any time. Doing so stops People grouping and deletes its local face-analysis cache; you can enable it again later. You can also revoke the Application's photo access in your device settings. Uninstalling the Application removes its local face-analysis cache.

Advertising Identifier and Your Choices

The Application asks for your permission to access your device's Advertising Identifier (IDFA). The Service Provider uses it only to measure the performance of its advertising, which means understanding which advertisement led you to install the Application. It is not used to build an advertising profile of you, and the Application does not display advertisements.

Granting this permission is entirely your choice. If you decline, the Application continues to work in exactly the same way, with every feature available. You can change your decision at any time in your device settings under Privacy & Security, then Tracking.

Whether or not you grant this permission, the Service Provider participates in Apple's SKAdNetwork, a system built by Apple to measure advertising without identifying individual users. Through it, Apple may send an advertising network a privacy-preserving notification that an installation occurred. This notification is generated and limited by Apple, not by the Service Provider.

Third Party Access

The usage and device information described under “Information Collection and Use” is periodically transmitted to external services to aid the Service Provider in improving the Application and their service. It includes identifiers that are specific to your device, so it is not anonymous in the strict sense. The Application does not send your Google account email address or Gmail message data with this information. The Service Provider may share the usage and device information with third parties in the ways described in this privacy statement.

Please note that the Application utilizes a third-party service that has its own Privacy Policy about handling data. Below is the link to the Privacy Policy of the third-party service provider used by the Application:

• AppsFlyer
• Meta Platform Technologies (Facebook SDK)

AppsFlyer is used for analytics and advertising measurement. The usage information described in this policy, the anonymous device identifier, and the Advertising Identifier if you allowed it, are sent to AppsFlyer so the Service Provider can understand how the Application is used and which advertisements are effective. Separately, as described above, Apple's SKAdNetwork may notify an advertising network that an installation occurred, without identifying you.

The Facebook SDK is used for advertising measurement and limited app-event analytics. The Application manually reports installation and app activation events, and may report events such as when the home page is displayed. Meta may receive event information, device and application information, your IP address, and the Advertising Identifier if you allowed access to it. The Application disables the Facebook SDK's automatic app-event logging and does not use the SDK to access your Facebook profile, contacts, posts or messages.

The Service Provider may disclose the automatically collected information described above:

• as required by law, such as to comply with a subpoena, or similar legal process;
• when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
• with their trusted service providers who work on their behalf, do not have an independent use of the information we disclose to them, and have agreed to adhere to the rules set forth in this privacy statement.

Opt-Out Rights

You can withdraw permission to use your Advertising Identifier at any time in your device settings under Privacy & Security, then Tracking. You can stop all further collection of information by the Application by uninstalling it, using the standard uninstall processes as may be available as part of your mobile device or via the mobile application marketplace or network.

Please note one exception, which the Service Provider wants to state plainly. The anonymous device identifier described above is stored in your device's system keychain so that a subscription you have already paid for can still be recognized if you reinstall the Application. Because of where the operating system keeps it, this identifier is not erased when you uninstall the Application, and reinstalling will reuse the same identifier. It remains an anonymous identifier and is not linked to your name, email address or Apple Account. If you want it deleted, contact the Service Provider at [email protected] and it will be removed.

Data Retention Policy

The Service Provider will retain the automatically collected information described above for as long as you use the Application and for a reasonable time thereafter. If you would like it deleted, please contact them at [email protected] and they will respond in a reasonable time. Bear in mind that the request has to identify the data somehow: the anonymous device identifier is the only handle that exists, so it will be needed to locate anything belonging to your device.

Children

The Service Provider does not use the Application to knowingly solicit data from or market to children under the age of 13. The Application does not address anyone under the age of 13. The Service Provider does not knowingly collect personally identifiable information from children under 13 years of age. In the case the Service Provider discovers that information belonging to a child under 13 has been collected, the Service Provider will delete it from the analytics services it uses. If you are a parent or guardian and you believe your child has used the Application, please contact the Service Provider ([email protected]) so that they will be able to take the necessary actions.

Security

The Service Provider is concerned about safeguarding the confidentiality of your information. The Service Provider provides physical, electronic, and procedural safeguards to protect information the Service Provider processes and maintains.

Refunds and Data Sharing with Apple

If we receive a refund request for an in-app purchase from an end user, we reserve the right to provide Apple with information regarding the user's in-app purchase consumption. This includes the following data: app usage time, anonymous account identifier, total amount spent, and total amount refunded.

Changes

This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes to the Privacy Policy by updating this page with the new Privacy Policy. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes.

Updates to this policy take effect on the effective date stated below.

Your Consent

By using the Application, you are consenting to the processing of your information as set forth in this Privacy Policy now and as amended by us.

Effective date: October 26, 2026

Contact Us

If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at [email protected].