Privacy Policy
This policy explains what information Roof Stacks Yazılım Anonim Şirketi (“Roof Stacks”, “we”) processes when you use the OneSnap app for iOS and Android (the “App”) and this website, how we use it and who we share it with.
In short
- Your photos, videos and files are scanned on your phone. None of them ever leave your phone or reach our servers.
- In Gmail we read only header details such as sender, subject, date and size. We never read the content or attachments of your emails, and this information stays on your phone too.
- You don't need an account.
- Nothing is deleted without your confirmation. What you choose first goes to your phone's trash or to Gmail's Trash.
- App analytics, ad measurement and personalised ads are on only if you allow them. You can change your choice from the settings icon on the home screen, under Privacy and preferences.
- We don't sell your personal information.
1. Data controller
Roof Stacks is the data controller under Turkish Personal Data Protection Law No. 6698 (“KVKK”) and, where it applies, the EU General Data Protection Regulation (“GDPR”).
Roof Stacks Yazılım Anonim Şirketi
MERSIS: 0735157008200001
Address: Atatürk Mahallesi, Ataşehir Bulvarı, Muhtar Hasan Sokak, Avrupa Office Ataşehir No:1, Kat: 29, 34758 Ataşehir/İstanbul, Türkiye
Email: apps@roofstacks.com
2. What stays on your phone
OneSnap's cleaning features run on your phone. The following is processed only on your phone and is never sent to us or to ad or measurement services:
- Photos and videos: the items in your library you give access to, examined on your phone to find similar shots, blurry photos and large videos.
- Gmail header details: if you connect Gmail, the sender, subject, date, size and unsubscribe information of your emails (details below).
- Apps and files (Android only): if you allow it, the names, sizes and last-used times of installed apps, and large or unneeded files.
- Your preferences: reminder time, your permission choices and your cleaning history (how much space you freed).
Deleting always takes two steps: you choose, then you confirm on a separate screen. What you choose is moved to your phone's trash (Recently Deleted on iPhone) or to Gmail's Trash, where it can be restored for about 30 days.
3. Gmail and Google APIs
Email cleaning is optional. If you connect your Gmail account, you grant OneSnap the gmail.modify permission on Google's own sign-in page. With this permission:
- we read only the headers of your emails: sender, subject, date, size and the unsubscribe link (List-Unsubscribe), plus your connected Gmail address;
- we don't read the content or attachments of your emails;
- we move only the emails you select and confirm to Gmail's Trash; we don't delete permanently and we never send email.
Gmail data travels directly between your phone and Google. It never reaches our servers, is never read by a person, is never used for advertising, analytics or training AI models, and is never transferred or sold to anyone. The access token is kept in your phone's secure storage (the Keychain on iOS).
OneSnap's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect at any time with Disconnect in the App's Settings, or on the third-party connections page of your Google Account.
4. Information we process
Purchases
OneSnap Pro payments are taken by Apple (App Store) or Google (Google Play). We never receive your card or payment details. To unlock and restore Pro, our purchase provider RevenueCat processes your purchase status, product, purchase and renewal dates, and an anonymous app user ID.
Usage and error information
- App usage: screens viewed and actions such as scanning, cleaning and opening the purchase screen, with numbers such as counts and sizes only. Photos, file names, email addresses or email content are never part of these events.
- Device information: app instance ID, device model, operating system and app version, language, and approximate country derived from your IP address.
- Experiment group: which test group you are in, for remote settings and A/B tests.
- Crash reports: technical details about the device and app state when the App crashes.
Ad and measurement information (with your permission)
- your device's advertising ID (IDFA on iOS, Advertising ID on Android);
- which ad brought you to OneSnap, and events such as first open, viewing the purchase screen and purchases;
- your permission choices and when you made them.
This website
The pages of this site use no cookies or analytics. Our hosting provider keeps standard server logs (such as IP address, browser type and request time) to operate and protect the service. If you fill in the Data request form, we receive your name, email address and request.
5. Why we use it
- to find extras on your phone and clean the ones you confirm;
- to unlock, verify and restore OneSnap Pro;
- to track your free clears and the rewards for ads you choose to watch;
- to keep the App working with remote settings and to test improvements;
- to fix crashes and errors;
- with your permission, to measure how the App is used and which ads bring users;
- with your permission, to show you ads that suit you better;
- with your permission, to send offers and news notifications;
- to answer your requests and meet our legal obligations.
6. Analytics, measurement and ad permissions
These permissions are optional; everything in the App works even if you say no. Measurement and ad services don't start until you answer. Which prompt you see depends on where you are:
- European Economic Area, United Kingdom and Switzerland: Google's consent form (UMP) is shown.
- United States: no prompt at launch; you can opt out of sharing your personal information under state privacy laws in settings.
- Türkiye and all other countries: three separate permissions are asked, all off by default: app analytics, ad measurement and personalised ads.
- iPhone: if you allow ad measurement or personalised ads, Apple's App Tracking Transparency prompt also asks whether your advertising ID may be used. If you decline, measurement happens only in aggregate through Apple's SKAdNetwork.
Unless you allow it, we process usage events without identifiers, as aggregate statistics only. You can change your choice at any time from the settings icon on the home screen › Privacy and preferences › Ad and measurement preferences.
7. Rewarded ads
When your free clears run out, you can choose to watch an ad to earn more. We show no other kind of ad, and OneSnap Pro has no ads. Ads are served by Google AdMob and the ad networks it mediates. If you haven't allowed personalised ads, only non-personalised ads are shown; ad networks may still use limited technical information for frequency capping and fraud prevention. To confirm your reward, AdMob sends a verification record (transaction ID, reward and an anonymous user ID).
8. Notifications
The check-up reminder is a service notification; it is turned on with your phone's notification permission and sent at most once a week. Offers and news notifications need a separate opt-in; the checkbox starts empty and, without your opt-in, they are never sent. You can turn them off at any time under Privacy and preferences › Offers and news notifications.
9. Who we share it with
We share information only with service providers that run the App on our behalf:
| Provider | Purpose |
|---|---|
| Google Firebase (Analytics, Crashlytics, Remote Config, A/B Testing, Hosting, Cloud Firestore) | Usage statistics (identified analytics only with your permission), crash reports, remote settings and experiments, this website and data requests |
| Google AdMob and the ad networks it mediates (AppLovin, Unity Ads) | Showing rewarded ads and verifying rewards; personalisation only with your permission |
| Google Ads | Ad measurement (only with your permission) |
| Apple (SKAdNetwork) | Aggregate, non-identifying ad measurement (iOS) |
| RevenueCat | Purchase verification and subscription status |
| Apple and Google | Payments, app distribution, notifications |
We may also disclose information when required by law, to protect our rights or the safety of users, or as part of a merger or acquisition, in which case this policy continues to apply.
10. International transfers
Our service providers may store and process information on servers outside Türkiye, including in the European Union and the United States. For transfers from Türkiye we use the standard contracts published by the Turkish Personal Data Protection Board under Article 9 KVKK; for transfers from Europe we rely on the GDPR safeguards (standard contractual clauses or adequacy decisions).
11. Retention and deletion
- On your phone: preferences and cleaning history stay until you uninstall the App. The Gmail access token stays until you disconnect or uninstall.
- Usage data: kept for up to 14 months, then deleted or aggregated.
- Crash reports: 90 days.
- Ad and measurement data: for the provider's retention period; when you withdraw permission, no new data is sent.
- Purchase records: for as long as tax and consumer law requires.
- Consent records: marketing opt-in and opt-out records for 3 years after you withdraw; other consent records and data requests for the statutory limitation period.
There is no account, so there is no account to delete; this page explains how to remove your data, in short: disconnect Gmail, turn off permissions, uninstall the App and send a data request for anything left on servers.
12. Your rights
Under Article 11 KVKK you have the right to learn whether your personal data is processed, to request information about it, to learn the purpose of processing and whether it is used for that purpose, to know the third parties it is transferred to in Türkiye or abroad, to ask for correction if it is incomplete or inaccurate, to ask for deletion or destruction under Article 7 KVKK, to ask that these actions be notified to third parties, to object to a result against you arising solely from automated analysis, and to claim compensation for damage caused by unlawful processing.
If you live in the European Economic Area, the United Kingdom or Switzerland, you also have GDPR rights of access, portability, restriction and objection. If you live in the United States, you can opt out of the sharing of your personal information for advertising under your state's law. You can withdraw consent at any time; this doesn't affect earlier processing. You can complain to the Turkish Personal Data Protection Board or to the data protection authority where you live.
To exercise your rights, use the Data request form or write to apps@roofstacks.com. We reply free of charge within 30 days at the latest.
13. Age limit
OneSnap is intended for people aged 16 and over. We don't knowingly collect personal data from children. If you believe a child has given us personal data, write to us and we will delete it.
14. Security
Data is encrypted in transit. The Gmail access token is kept in your phone's secure storage and can be used only on that device. Data requests are stored in a database closed to the public, accessible only to authorised staff. No method of transmission or storage is completely secure, but we work to protect your information.
15. Changes and contact
We may update this policy from time to time. We'll change the date at the top of this page and announce significant changes in the App. Questions: apps@roofstacks.com
The Turkish version of this policy is at Gizlilik politikası. If the two differ, the Turkish text prevails for users in Türkiye.