Your data, clearly explained.

1. Controller and contact

Data controller

David Escudero Digital Studio S.L.U.

Tax identification

CIF/NIF: ESB75653485

Address

Calle La Encina 44, Pezuela de las Torres, Madrid 28812, España.

Privacy and support contact

soporte@davidescudero.com

2. Application and versions

This policy applies to CleanConnect for Android, identified as clean.connection, and its services on extremapp.com. Earlier versions of the application may also appear as “CleanConnect Master Connection” or “CleanConnect - Limpia tu red”.

Available features depend on the installed version, Android, your permissions and your subscription. Describing a feature does not mean it is enabled in every version. CleanConnect v2 does not require you to create a separate account for the basic check. Your Google Play account is involved when you purchase or restore PLUS.

3. What data we process and why

Checks and local history

The application may access connection type, public IP address, available DNS servers, response times, download and upload speeds, available storage, RAM and battery readings. It stores measurements, dates, test status, labels you enter and errors needed to explain the result locally. This data is used to display results, charts and reports; it does not constitute a diagnosis of the phone’s overall health.

When looking up the IP address or running a speed test, the server necessarily receives the connection’s IP address and technical request data. Uploads use test bytes generated by the application, not your photos, documents or other files. The speed service does not store that test content. Technical server logs may also exist for operation and security.

Cleanup and rarely used apps

With the access you grant, the tools may read selected photos, videos or documents, names, sizes, dates, thumbnails and the content needed to identify duplicates. Analysis takes place on the device. We do not send that content or your file catalogue to the server for cleanup.

Analysis of rarely used apps locally checks accessible applications and their usage statistics when you authorize Android’s special access. We do not send their names or your usage statistics to advertising services or our own analytics. Deletion and uninstallation follow the tool’s confirmation flow and the applicable Android controls.

Tips, tasks and notifications

The phone downloads content and updates from our services. The IP address and parameters needed to deliver the content reach the server. Reading activity, completed tasks and preferences are stored locally. Access entitlement is checked for exclusive PLUS content.

If you enable notifications, Google’s Firebase Cloud Messaging uses installation identifiers or registration tokens and the technical data needed to deliver messages. Notifications may announce new content or provide reminders. You can disable them in the application or Android. Disabling their display in Android does not necessarily delete identifiers already processed by Google.

PLUS subscriptions

Google Play handles billing. Our verifier receives the installation identifier, app package and purchase token to check the subscription’s product, status and expiry. It also processes Google Play events, such as renewals, cancellations, refunds and expirations. This is used to grant, restore or withdraw PLUS features and prevent fraud. We do not receive your full card number or your Google credentials.

Support and voluntary communications

When you contact us by email, we process your address and the information you send us to assist you. CleanConnect v2 opens your email application to write to support@extremapp.com; it does not include a support form or automatically attach technical data or files. You review and send the message from your email application. Avoid including sensitive documents or unnecessary information about third parties.

Some earlier versions offer an optional form to receive tips by email. If you sign up, the name, email address and language you provide are processed for that purpose. You can request to unsubscribe by writing to the contact indicated. This registration is separate from the paid PLUS subscription and is not required to check your connection.

Optional statistics on our servers

CleanConnect v2 provides separate controls, initially disabled, for editorial counts and general statistics. The latter include app openings, the start and outcome of a check, opening offers, verified purchases or restorations and tool usage, with basic error categories. They do not include speed measurements, the displayed IP address, DNS, battery, RAM, files, app lists, personal labels or installation, purchase or advertising identifiers. Each event uses a random identifier only to prevent duplicates on retries; it does not identify a person or session. The server receives the connection’s IP address to handle and protect requests, but does not include it in these counts.

The local queue holds up to 100 events for 24 hours, in batches of up to 20. Disabling the option deletes pending events and cancels active transmissions when still possible. Counts already received cannot be withdrawn by user because they are not linked to an identity. The server retains deduplication identifiers for up to two days and general daily counts for 90 days, purging them when processing new events; these are voluntary observations, not unique-user figures. Editorial analytics has its own control. These controls are independent of advertising consent.

Google Analytics for Firebase, optional

Versions that include this feature provide a separate control for sending usage statistics to Google Analytics for Firebase. It is initially disabled, and authorizing statistics on our servers does not enable it. If you authorize it, we measure flows such as opening the app, starting or finishing a check, using a tool and opening the PLUS offer, with limited result or error categories. This helps us understand which features are useful and where difficulties arise.

In addition to the events we define, the SDK may process automatic events, instance or session identifiers and technical application and device data. This is not an anonymous channel. We do not add names, emails, purchase tokens, files, app catalogues, measurements from your checks or free text to these events. We configure this channel without collecting the advertising identifier and with advertising storage, data use and personalization denied; its preferences are independent of AdMob advertising. See Firebase’s privacy information.

Crash diagnostics with Firebase Crashlytics, optional

Another separate control allows technical reports to be sent to Google’s Firebase Crashlytics to investigate unexpected crashes and errors. It is initially disabled. Reports may include code stack traces, app version, technical installation identifiers and device state or metadata at the time of the failure. We do not promise anonymity: this data allows incidents from one installation to be grouped. We do not add names, emails, files, tokens, app lists or personal text to our own logs. Non-fatal errors that we explicitly record are limited to technical categories, without arbitrary messages from files or servers.

Automatic sending remains disabled. When prior authorization exists, the app requests that pending reports be sent at startup; enabling this option discards earlier reports, and withdrawing it discards pending reports. The SDK may retain local technical information for a pending report even when automatic sending is disabled. If you also authorize Analytics, its events may provide context about actions before the failure. See the data processed by Firebase SDKs.

You can withdraw each authorization in Settings without losing CleanConnect features. Disabling a service prevents its future transmissions according to its controls and deletes pending items when the SDK permits. Resetting analytics data or deleting local data does not automatically delete reports or statistics already received by Google. To exercise your rights regarding that data, use the contact indicated in this policy.

This website

This document is served as static HTML: it contains no forms, advertising pixels, analytics scripts or first-party cookies. The hosting provider may log IP address, date, requested resource and technical browser data to serve the page and protect the service. External links are governed by their owners’ policies.

4. Legal bases

• Provision of the requested service: performing checks, delivering content, managing PLUS and handling service-related issues.
• Consent: advertising processing that requires it, optional statistics, optional crash diagnostics and voluntary communications. You may withdraw it without affecting the lawfulness of earlier processing.
• Legitimate interest: maintaining security, preventing abuse and fraud and managing technical incidents, balancing your rights and limiting data to what is necessary.
• Legal obligation: responding to valid requests and retaining information required by applicable rules.

Android’s technical permission controls access to the device; it does not replace advertising consent or imply acceptance of other purposes. If you do not provide the data essential to a feature, that feature may be unavailable, although you may continue using others.

5. Advertising and your preferences

The version without PLUS may display ads through Google AdMob. When advertising is requested or displayed, the SDK and its providers may process IP addresses—from which approximate location may be estimated—advertising or application identifiers, ad interactions and technical diagnostic data. Purposes include serving and measuring ads and detecting fraud. See Google’s policy and how Google uses information from partner applications.

Where applicable, a consent message is presented with the relevant options and providers. You can accept, reject or manage your preferences and review them again through the advertising privacy options available in the application. Rejecting personalization does not necessarily mean all ads disappear: the availability of limited advertising depends on the options permitted by Google and your choices.

CleanConnect v2 tools do not request precise GPS location or send personal files or app lists for ad targeting. Each provider’s purposes are detailed in the consent message. We do not use local history to create our own advertising profiles. PLUS removes CleanConnect ads while the entitlement is valid; it does not remove processing needed to verify the purchase or provide other features.

Analytics and crash diagnostic preferences do not replace advertising consent. Processing by AdMob, Google Play and Firebase Cloud Messaging is governed by their purposes and controls described in this policy.

6. Recipients and international transfers

Necessary data may be processed by hosting and maintenance providers under our instructions; by Google Play for purchases and their verification; by Firebase to deliver notifications and, if you authorize it, Analytics and Crashlytics for statistics and diagnostics; and by Google AdMob and the providers identified in the advertising message according to their respective roles and your choices. We may disclose information to authorities where there is a valid obligation.

Google and other providers may process data outside the European Economic Area. Applicable transfers must be covered by GDPR mechanisms, such as an applicable adequacy decision or standard contractual clauses and additional safeguards where necessary. See Google’s information on transfers and Firebase privacy. You may request information about the safeguards applicable to processing we manage.

7. Retention and deletion

• V2 history: records are retained locally for up to 90 days. BASIC displays 7 days and PLUS up to 90; when PLUS ends, the view is limited without immediately deleting older data. Records beyond the retention period are purged when the repository operates. You can delete history from Settings.
• Preferences, reading activity and tasks: they remain locally while in use or until you delete them. Email messages and drafts are managed in your chosen email application.
• PDF: a temporary local copy is created for sharing. When you share it, the receiving application and the people you choose may retain a copy outside CleanConnect’s control. Deleting history does not retrieve those copies.
• Purchases: they are processed as long as necessary to verify entitlements, handle issues and prevent fraud. The verifier’s technical event log uses derived identifiers and purges entries older than seven days when new events arrive. Google Play’s own records are governed by its terms and obligations.
• Support, communications and technical logs: these are retained for the time needed to handle the request, maintain authorized communication, investigate incidents or defend claims. Where there is a legal retention obligation, use will be restricted to that purpose. You may request erasure and information about the periods applicable to your case.
• Google services: their identifiers and data are retained according to the service, chosen preferences and their policies, linked above.

Uninstalling the app or deleting its data in Android removes private local data according to how the system works, but does not cancel PLUS or automatically delete data retained by Google or messages already sent to support. PLUS cancellation is managed through Google Play.

8. Permissions and controls

The basic check does not require access to your photos or usage statistics. Additional tools request access when used: images/videos or partial selection, files or folders chosen through Android, and app usage access to identify rarely used apps. You may deny or revoke these accesses in Android settings; the affected feature will no longer have that data available.

V2 does not request all-files access, an accessibility service, contacts, camera, microphone or precise location to run its tools. Declared permissions may vary in earlier versions and depending on Android. Notifications are controlled through channels and preferences. Options to delete local data do not delete your personal documents or cancel the purchase.

9. Your rights

You may request access, rectification, erasure, restriction, portability or objection where applicable, and withdraw consent. Write to soporte@davidescudero.com indicating that your request concerns CleanConnect. We will ask only for proportionate information necessary to locate the processing and verify your identity; do not initially send a copy of your identity document.

We will respond within GDPR time limits, generally within one month, with the extensions provided for complex cases. You may also lodge a complaint with the Spanish Data Protection Agency or the competent supervisory authority.

If data exists only on your phone, we cannot access or delete it remotely: use the local controls or ask for guidance. We do not make solely automated decisions with legal or similarly significant effects on you based on phone checks.

10. Security, minors and changes

We apply technical and organizational measures appropriate to the processing: HTTPS connections in v2 services, restricted access and separation between local data and server verification. No system offers absolute security.

Where authorization from a legal representative is necessary to consent to processing, it must be obtained in accordance with applicable law. If you believe we have received a minor’s data without the necessary authorization, contact us so we can review it.

We will update this policy when features or processing change. The date appears at the beginning. Significant changes will be communicated by appropriate means and new consent will be obtained where necessary; publishing an update does not replace that consent.