What we hold, and why.

Korvianex FZE, the controller

Korvianex FZE builds Zen Cleaner and ships it on the App Store. We are incorporated in the United Arab Emirates, and we are the party that determines what personal data the app touches and to what end. Data-protection law, the GDPR included, calls that role the “controller”.

Zen Cleaner exists for one task: hunting down duplicate and look-alike photos, extra screenshots, repeated videos and doubled-up contact cards on an iPhone or iPad, then letting you sweep them away so storage frees up. No account, no sign-up, no login screen.

The library never leaves the phone

• Permission first. Until you answer Apple’s Photos or Contacts dialog with a yes, Zen Cleaner sees nothing. Full library, a hand-picked selection, or zero access: each is your call.
• You press the button. The app never deletes on its own initiative; every removal needs your tap. Photos and videos you discard go to iOS’s “Recently Deleted” album and can be pulled back from there for a limited time.
• Revoke whenever. Adjust or remove access in Settings › Zen Cleaner, or via Settings › Privacy & Security and then Photos or Contacts.

Data, category by category

Five buckets hold everything Zen Cleaner deals with. Every card runs through an identical five-row grid, which makes comparing them easy.

Deliberately out of scope

Three things Zen Cleaner simply does not gather:

• Photo, video or contact content
• Precise location
• Payment card data

Purpose by purpose, basis by basis

Same information as the cards, flipped around: here the starting point is what we do, not what we collect.

Legitimate interests are only relied on after balancing them against your privacy, and you can object to that processing whenever you like (see your rights). Consent can be pulled back just as simply as it was given.

Who else is in the loop

A short roster of vendors helps us run and measure Zen Cleaner. Contracts confine each of them to the task we assign.

Where ad measurement is concerned, Meta and Google can also act as independent controllers, governed by their own privacy policies.

Rare, non-routine disclosures

• Public authorities, if statute, a court or a regulator compels us.
• A purchaser or successor, should Korvianex or Zen Cleaner change hands through a merger, acquisition or asset sale.
• Anybody else, strictly with your agreement or at your request.

Tracking and ad controls

• ATT dialog. Answer “Ask App Not to Track” and the IDFA stays out of reach for us and every partner.
• Second thoughts? Toggle it in Settings › Privacy & Security › Tracking.
• Apple’s ad platform has its own personalisation switch in Settings › Privacy & Security › Apple Advertising.
• Meta and Google offer controls at Meta ad preferences and My Ad Center. Cross-industry options: AppChoices and the NAI opt-out page.

“Do Not Track” is a browser feature; Zen Cleaner is a native app and does not react to that signal.

Data crossing borders

Some of our people and several vendors sit in other countries, the United States among them. For personal data originating in the EEA, Switzerland or the UK, one of these safeguards applies:

• an adequacy decision covers the recipient’s country, for example the EU–U.S. Data Privacy Framework where the recipient holds certification; or
• Standard Contractual Clauses issued by the European Commission are signed (with the UK addendum where needed).

Ask by email and we will send you the relevant safeguard document.

Retention and security

Rule of thumb: data lives exactly as long as its purpose does. Concretely:

• support threads, until resolved, then a sensible grace period;
• analytics and diagnostic records, per each vendor’s configured window;
• purchase records, as long as tax and accounting statutes require.

Data the app sends to our partners travels over TLS encryption. Internally, access is least-privilege: a team member sees only what their job needs. Vendors are chosen partly for their security record. Still, no setup is bulletproof; spot something odd and we want to hear about it.

What you can ask of us

Under the GDPR, the UK GDPR and similar laws, you are entitled to:

• access: find out what we hold on you and get a copy;
• rectification: get wrong details fixed;
• erasure: have data wiped;
• restriction or objection: limit processing, or oppose it, legitimate-interest processing included;
• portability: take data you gave us in a structured, machine-readable file;
• withdrawal of consent: at any moment, with no effect on processing that already took place.

Email hello@korvianex.ink to use any of them. We might first check that the request really comes from you. Expect an answer inside one month; tricky or high-volume requests can stretch that by up to two more months, and we will say so if that happens.

A complaint can also go to the data-protection supervisor where you are resident, though we would like a chance to sort it out first.

For residents of US states

California and the other US states with privacy statutes give residents the right to know what personal information a business holds, to have it deleted or corrected, and to opt out of its “sale” or its “sharing” for cross-context ads.

• Sale. None. Korvianex does not sell personal information.
• Sharing. Measuring ads with Meta and Google may be labelled “sharing” by certain state laws. To opt out, disable tracking on the device or write to us using “Do Not Share” as the email subject.
• Categories collected over the last 12 months: identifiers (IDFV, SDK IDs, and IDFA where tracking was allowed); commercial information (App Store purchase history); internet or other electronic network activity (in-app events); device details such as IP address; and whatever you wrote to support.
• Equal treatment. Exercising a right never costs you a different price or a worse service.
• Authorised agents. A person you appoint in writing can submit requests for you, and we may still confirm your identity with you directly.
• “Shine the Light”. Californians may ask whether we disclose personal information to third parties for those parties’ direct marketing. We don’t, and we will confirm that on request.

Built for people aged 16 and up

Zen Cleaner is not designed for under-16s, and we never knowingly gather their personal data. Think a child has sent us something? Write to hello@korvianex.ink and we will erase it.

Revisions to this notice

New features or new laws may lead us to rework this notice. The date at the top always shows which version you are reading, and any significant revision will additionally be announced inside Zen Cleaner ahead of taking effect.

Privacy questions

Requests about your rights, or any other privacy question, go here: