KleanBox Privacy Policy

Introduction

KleanBox is an iOS app that filters unwanted SMS and MMS messages on your device. It uses Apple's IdentityLookup framework to classify messages locally — your messages never leave your device.

This policy explains what data KleanBox collects, what it does not collect, and how any collected data is handled.

Information We Collect

KleanBox collects a minimal amount of non-personal data to maintain app stability and improve the experience:

• Crash reports — via Firebase Crashlytics. This includes device model, OS version, and crash stack traces. No personally identifiable information (PII) is included.
• Anonymous analytics — via TelemetryDeck. We track rule-related events (such as adding, updating, deleting, or toggling a filter rule) along with rule metadata like pattern type, category, and match field. TelemetryDeck is privacy-first and does not collect PII. All signals are anonymous and cannot be traced back to individual users.

Information We Do NOT Collect

Specifically, we do not collect:

• Message content, sender information, or phone numbers
• Personal information such as your name, email, or address
• Location data
• Contacts or call history
• Browsing or usage history outside the app

KleanBox has no user accounts, no sign-in, and no authentication of any kind.

On-Device Processing

All SMS and MMS filtering is performed locally on your device using Apple's ILMessageFilterExtension. Filter rules you create and the on-device machine learning model both operate entirely offline. No message data is ever sent to any external server.

KleanBox uses the iOS Keychain and App Groups to securely share your filter rules between the main app and the message filter extension. This data stays on your device.

Third-Party Services

KleanBox integrates two third-party services, both of which are designed with privacy in mind:

• Firebase Crashlytics — used for crash reporting and app stability monitoring. Firebase Privacy Policy
• TelemetryDeck — used for privacy-friendly, anonymous analytics. TelemetryDeck is GDPR-compliant by design and does not collect personal data. TelemetryDeck Privacy Policy

KleanBox does not use any third-party advertising services.

Data Retention

Crash reports are retained by Firebase Crashlytics for 90 days. Anonymous analytics signals are retained by TelemetryDeck according to their data retention policy. Since no personal data is collected, there is no personal data to delete.

Filter rules and preferences are stored locally on your device and are removed when you uninstall the app.

Children's Privacy

KleanBox does not knowingly collect any personal information from anyone, including children under the age of 13. Since the app does not collect personal data, it is safe for use by people of all ages.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with a revised effective date. We encourage you to review this policy periodically.

Contact Us

If you have any questions or concerns about this privacy policy or KleanBox's data practices, contact us at:

support@kleanbox.app