How Roomier protects your photos
A photo cleaner asks for the most personal folder on your phone. That deserves a specific answer rather than a reassuring one, so this page names exactly what stays and what goes — including the parts that aren't zero.
The scan runs on your device
Finding duplicates, similar shots, screenshots, blurry photos and oversized videos all happens locally — Apple's Vision and Core Image frameworks on iOS, MediaStore on Android. There is no server that sees your library, because there is no server in this part of the app at all. You can put the phone in airplane mode and every scanning and cleaning feature still works.
What never leaves your phone
- Your photos and videos — no file, no copy, no re-encoded version
- Thumbnails and previews generated during a scan
- Filenames, album names and folder structure
- EXIF data: capture dates, camera model, and location
- Anything derived from the content of an image, such as detected objects or faces
What does leave your phone
Three SDKs make network requests. Saying “we collect nothing” would be untrue, so here is each one and what it actually sends.
PostHog (analytics)
Event names and aggregate properties — which screen you reached, how long a scan took, how many items were cleaned, total bytes recovered, and purchase outcomes. Linked to an anonymous customer id. Session replay and screen recording are switched off in code, because an automatic screenshot of this app would be a screenshot of your photo library.
RevenueCat (purchases)
Your subscription status and the store transaction, so the app knows whether Premium is active and can restore it on a new device.
Google AdMob (free tier only)
Standard ad-request data, including a device advertising identifier and coarse IP-derived location. Premium removes ads entirely. Your photos are never used for ad targeting.
You confirm every deletion
Roomier never deletes anything on its own. It builds a suggestion, you review it, and the deletion itself goes through the operating system's confirmation dialog — which the app cannot bypass or pre-approve. Favourites and edited photos are excluded from suggestions outright, and in every duplicate group one copy is always kept. Removed items sit in Recently Deleted for 30 days, so a mistake is recoverable without us.
Common questions
Does Roomier upload my photos?
No. Every scan runs on your device using Apple's Vision and Core Image frameworks on iOS, and MediaStore on Android. No photo, video, thumbnail, filename or album name is ever transmitted, and the app works with no network connection at all.
Can Roomier delete photos without asking me?
No. Roomier only ever builds a suggestion. Deleting goes through the operating system's own confirmation dialog — PhotoKit on iOS, MediaStore's delete request on Android — which Roomier cannot bypass or auto-confirm. Favourites and edited photos are excluded from suggestions entirely.
What data does Roomier collect?
Anonymous product-usage events: which screens you reach, whether a scan finished, whether a purchase succeeded, and aggregate counts and byte totals. Never anything derived from the content of a photo. Purchases are handled by RevenueCat, and the free tier serves ads through Google AdMob.
What happens to my data if I delete the app?
Everything Roomier stored is inside the app's own container — your scan history and free-tier counters — and iOS and Android delete that with the app. Photos you already removed stay in Recently Deleted for 30 days, where you can restore them independently of Roomier.
Is anything sent when I'm offline?
Nothing. Scanning, grouping and blur detection all run locally, so the app is fully usable in airplane mode. Only purchase validation and anonymous analytics need a connection, and both queue harmlessly until one exists.
The formal terms are in the privacy policy and terms of use. For how the free tier and Premium differ, see pricing.