Privacy Policy

Your privacy is at the core of how Sweep is built. Learn how we handle your data.

Last Updated: July 2, 2026

This Privacy Policy describes how Ferrix Labs Inc., a company incorporated in Canada (“Company,” “we,” “us,” or “our”), collects, uses, shares, and protects information in connection with the Sweep mobile application, the sweep.photos website, and all related services, features, and functionality (collectively, the “Services”). The app is offered on the United States storefront of the Apple App Store, and the Services are directed to users in the United States.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy and our Terms of Use. If you do not agree, please do not use the Services.

The Short Version

Your photos and videos never leave your device — all photo analysis happens on-device, and we operate no servers that receive them. There are no accounts. What little data leaves your device is device-level and purchase-level information used to run subscriptions, deliver notifications, and measure how people discover the app — described in full below.

1. Who We Are and Scope

Ferrix Labs Inc. is a Canadian company and is the organization accountable for personal information handled in connection with the Services. This policy covers the Sweep iOS app and the sweep.photos website. It does not cover third-party websites, services, or applications that we do not control — including Apple's services and the third-party partners identified in Section 7, which process data under their own privacy policies.

2. On-Device Processing

We want to be precise about what stays on your device and never reaches us:

  • Your photos and videos are never accessed by us, uploaded, or transmitted off your device by the Services
  • Your photo library metadata (dates, locations, captions, or other EXIF data) is not collected by us. If you open a photo's detail view, the app may use Apple's system geocoding service to convert that photo's embedded coordinates into a readable place name — that lookup is handled by Apple and is never sent to us
  • Your organizational decisions (keep, delete, favorite) are stored locally on your device only and are deleted when you delete the app
  • Duplicate detection, similarity grouping, and all other photo analysis run entirely on your device
  • We do not use facial recognition or process biometric data
  • There are no user accounts, and we operate no backend that stores your content or a profile of you

3. Information We Collect

Information You Provide to Us

  • Support communications — if you email us, we receive your email address and the content of your message

Information Collected Automatically in the App

When you use the app, we and the partners identified in Section 7 collect limited device-level information:

  • Device and app information — device model, operating system version, app version, language and region settings, and device-generated identifiers (such as the identifier for vendor)
  • Advertising identifier (IDFA) — only if you grant permission through Apple's App Tracking Transparency prompt; used for install attribution and advertising measurement
  • Install and attribution events — app installs, first opens, and conversion events (such as trial starts and purchases), including through Apple's privacy-preserving SKAdNetwork framework
  • Purchase and subscription data — subscription status, product identifiers, transaction identifiers, and purchase history, processed from Apple's purchase receipts (we never see your payment card details)
  • Subscription-offer interaction events — views of and interactions with in-app upgrade screens, used to operate and improve our offers
  • Push notification token — a device token used to deliver notifications you have enabled
  • Network information — IP address, processed transiently by our service partners when the app communicates with them (which may yield approximate, city-level location; we do not collect GPS location)

Website Visits

The sweep.photos website sets no cookies and runs no analytics or advertising trackers (see Section 8). Our hosting infrastructure keeps standard, short-lived server logs (IP address, browser type, pages requested) for security and operations.

4. How We Use Information

  • Provide and maintain the Services — deliver core functionality, manage your subscription and PRO entitlement, and deliver notifications you have enabled
  • Advertising measurement and attribution — understand how users discover and install the app and measure the effectiveness of our advertising
  • Improve the Services — understand aggregate usage of subscription offers and remotely configure app behavior
  • Communications — respond to your inquiries and provide support
  • Safety, security, and legal compliance — detect and prevent fraud and abuse, and comply with applicable laws, regulations, and legal processes

5. How We Share Information

We share information only in the following circumstances:

  • Service providers and partners — the vendors identified in Section 7, which process device-level and purchase-level data on our behalf to provide subscription management, attribution, notifications, and remote configuration
  • Advertising and attribution partners — device identifiers and conversion events shared with attribution and advertising-network partners to measure advertising campaigns, as described in Section 6
  • Apple, for refund requests — if you request a refund for an App Store purchase, we may share information about your purchase and your use of the app (consumption data) with Apple to help it evaluate your refund request
  • Legal requirements — if required by law, regulation, legal process, or governmental request, or where disclosure is necessary to protect our rights, your safety, or the safety of others, or to investigate fraud
  • Business transfers — in connection with a merger, acquisition, sale of assets, financing, or similar transaction, information may be transferred as part of that transaction
  • Aggregated or de-identified data — information that cannot reasonably be used to identify you

We do not sell your personal information. Some privacy laws treat sharing device identifiers with advertising partners for cross-context advertising measurement as “sharing” or use for “targeted advertising.” Section 6 explains how to prevent this with a single device setting.

6. Advertising Attribution and Your Choices

We use mobile-attribution and advertising-network partners to understand how users discover the app and to measure advertising campaigns. These partners may receive:

  • Device identifiers, including the advertising identifier (IDFA) if you granted tracking permission
  • App installation and first-open events
  • In-app conversion events (such as trial starts and purchases)
  • IP address and derived approximate location

We also participate in Apple's SKAdNetwork, which reports install attribution to ad networks in aggregate, without identifying you individually.

Your Choices

  • Decline or revoke tracking permission — go to Settings > Privacy & Security > Tracking on your iPhone. If tracking is not permitted, the app cannot access your IDFA for cross-app attribution.
  • Limit Apple ad personalization — Settings > Privacy & Security > Apple Advertising
  • Disable notifications — Settings > Notifications > Sweep, or the toggles inside the app's settings screen
  • Contact us — email sweep@ferrixlabs.com with the subject line “Opt-Out of Targeted Advertising” and we will honor your request as required by applicable law

7. Third-Party Services

The app uses the following third-party services, which may process the device-level and purchase-level data described in Section 3. Each processes data under its own privacy policy, and we require that partners receiving user data protect it consistent with this policy and applicable law:

  • Apple — App Store distribution, payment processing, purchase receipts, and operating-system services used by the app (such as geocoding and push notification delivery) (privacy policy)
  • RevenueCat — subscription state management and receipt validation (privacy policy)
  • Superwall — display and measurement of in-app subscription offers (privacy policy)
  • AppsFlyer — mobile install attribution and SKAdNetwork measurement (privacy policy)
  • Google Firebase — push notification delivery and remote app configuration (privacy policy)
  • Meta and TikTok — advertising-network SDKs used for install measurement in connection with advertising campaigns (Meta privacy policy, TikTok privacy policy)

The Services may also contain links to third-party websites or services we do not control; this Privacy Policy does not apply to them.

8. Website: No Cookies or Analytics

The sweep.photos website does not set cookies and does not use analytics, advertising, or social-media trackers of any kind. If that ever changes, we will update this policy first and, where required, ask for your consent. Because the website deploys no tracking, there is nothing on it to opt out of.

9. Data Retention

  • On-device data — your decisions, preferences, and cached content live on your device and are deleted when you delete the app
  • Support communications — retained for as long as necessary to resolve your inquiry and for a reasonable period thereafter for quality and legal purposes
  • Data held by partners — the partners in Section 7 retain device-level and purchase-level data according to their own retention policies; purchase records are retained as long as needed to honor your entitlements (a lifetime purchase, for example, requires a durable transaction record) and to meet legal and accounting requirements

We may retain information for longer periods where required by law or to resolve disputes. You may request deletion of information we hold at any time (Section 12).

10. Data Security

We use commercially reasonable technical and organizational safeguards designed to protect the limited information we handle, including encryption of data in transit and access controls. The most important protection is architectural: your photos, videos, and library metadata never leave your device, so they cannot be exposed by us. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. International Data Processing

We are a Canadian company, and the service partners identified in Section 7 operate primarily in the United States. Device-level and purchase-level information may therefore be processed in the United States, Canada, or other countries where those partners operate, which may have data protection laws that differ from those of your place of residence. Where required by applicable law, we ensure appropriate safeguards are in place for such processing.

12. Your Privacy Rights

Because Sweep has no accounts and keeps your content on your device, the personal information we can hold about you is limited — typically support emails and device-level records held by our partners. We honor the following rights for all users, and additional rights where applicable law provides them:

All Users

  • Request access to the information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your information
  • Withdraw consent where processing is based on consent (for example, by revoking tracking permission in iOS Settings)

United States State Privacy Laws

Depending on your state of residence (including under the California Consumer Privacy Act as amended and similar laws in other states), you may have rights to know, access, correct, delete, and obtain a copy of personal information, to opt out of the “sale” or “sharing” of personal information or its use for targeted advertising, and to non-discrimination for exercising these rights. We do not sell personal information; you can prevent the sharing of your advertising identifier as described in Section 6, and we honor these rights as required by applicable law.

Canada

As a Canadian organization, we handle personal information in accordance with Canadian federal privacy law (PIPEDA). You may request access to or correction of personal information we hold, challenge our compliance with our privacy obligations by contacting us, and contact the Office of the Privacy Commissioner of Canada if you are not satisfied with our response.

How to Exercise Your Rights

Contact us at sweep@ferrixlabs.com with the subject line “Privacy Request.” We may need to verify your request (for example, by corresponding from the email address involved), and we will respond within the timeframe required by applicable law — typically within 30 days. You may designate an authorized agent to make a request on your behalf. We will not discriminate against you for exercising your privacy rights. Note that for device-level data held by the partners in Section 7, we may fulfill deletion requests by directing the request to the relevant partner or by providing you the means to make the request directly.

13. Children's Privacy

The Services are not directed at children under the age of 13, and our Terms of Use require users to be adults. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete it promptly. If you believe a child has provided us with personal information, please contact us at sweep@ferrixlabs.com.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. If we make material changes, we will provide notice through the Services or on our website, and we will update the “Last Updated” date at the top of this page. Your continued use of the Services after any changes take effect constitutes your acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Ferrix Labs Inc. (Canada)

Email: sweep@ferrixlabs.com

For privacy-related requests, please include “Privacy Request” in your subject line.

Sweep by Ferrix Labs Inc. is built with privacy at its core. Your photos and videos are processed on your device and are never uploaded to our servers. We collect only the minimum information necessary to provide, maintain, and improve the Services and to measure the effectiveness of our advertising.