Privacy Policy
In short
- Sweepcheck checks a room, a car or a walk home for Bluetooth trackers, cameras on the Wi-Fi and smart glasses. It does the work on your iPhone and keeps what it finds there.
- Nothing about your checks leaves the phone: no scans, device lists, sightings, places, reports or photos. We run no server that receives them and have no way to see them.
- No account, no sign-in, no email address. No analytics, crash reporting, advertising or tracking. Nothing is sold.
- Location is used only for Still with you, and only on the phone.
- Purchases go through Apple and RevenueCat, the service that confirms them, under a random ID made for this install. That purchase record is the only data that leaves the phone.
1. Who we are
Sweepcheck is an iPhone app for checking that a room, a car or a walk home is not being watched. It is published by an individual developer, referred to here as “the developer of Sweepcheck”, “we” or “us”.
The developer of Sweepcheck is the controller of the limited personal data described in this policy and can be reached at app.sweepcheck@proton.me.
2. What stays on your phone, and for how long
| What | How long |
|---|---|
| A scan’s list of devices | In memory, only while the screen is open. Gone when you leave it. |
| Sightings and places (Still with you) | 7 days. Places are rounded to about a city block before they are written. If a sighting led to an alert, it is kept for 30 days so you can show it to someone who can help. |
| Reports you save | Until you delete them. |
| Tags you mark as yours (Mark as mine), and your settings | Until you remove them or delete the app. |
| Camera frames in the lens check | Shown on screen and not recorded or saved. |
None of this is in your iPhone or iCloud backups. If you want a copy of a report, share it as a PDF. Deleting the app deletes all of it.
Other people’s devices are shown by kind only (for example “Headphones”), never by the name they advertise, and are not kept.
3. Location
Location is used only for Still with you, an optional check that tells you if a tag keeps moving with you. It runs on your phone to tell places apart. No address is looked up, and no location is sent to us or to anyone. The check is off until you turn it on. You can choose For this trip or Always on, and change it in iOS Settings at any time.
4. Purchases: Apple and RevenueCat
Sweepcheck Plus is bought through Apple’s In-App Purchase. Apple takes the payment and sees your payment and purchase history; Sweepcheck never sees your payment details. Purchases show in your App Store history and receipts, and in Family Sharing where it applies.
Purchases are managed with RevenueCat (RevenueCat, Inc., its privacy policy), which acts for us as a processor. This is the only data the app sends off the phone:
- Purchase history: the App Store’s record of what you bought or restored, so the app can confirm Plus on this install and the next.
- An anonymous app user ID: a random ID RevenueCat makes on the phone for this install. It is not your Apple Account and is tied to no name, email or phone number.
- A device ID: the identifier for vendor (IDFV) that iOS gives the app on this phone. It is not the advertising identifier.
When the app opens, it asks RevenueCat which plan this install has and what the plans cost, whether or not you buy anything; these two IDs go with that request, with ordinary request details such as the app and iOS versions and the App Store country. RevenueCat gets nothing about your checks, sightings, places or reports, and the app sets no name, email or other attribute in it.
This data is not linked to you, is used only to give you what you bought (App Functionality), and is not used for advertising or tracking. The app shows no App Tracking Transparency prompt because it does not track you.
5. What else goes out of the phone
Apart from purchases, Sweepcheck connects to very little, and none of it is collected by us:
- Apple map tiles. Places are drawn on your phone as a plain numbered diagram. If you choose Show on a map, your iPhone downloads the map of that area from Apple, as any map does. Sweepcheck does not send your sightings or places.
- Help-line pages. If you open a help line’s page, it loads from that organisation’s own website, inside the app. That site sees an ordinary visit. Calls you make appear in your phone’s Recents.
- An AirTag’s page. If you tap an AirTag with your iPhone’s NFC reader, iOS opens Apple’s page in Safari.
- Your own network. The Wi-Fi devices check sends short requests to devices on the Wi-Fi you have joined, to label them. They stay on that network. The network’s owner may see them in its logs.
- Tags you ask it to check. When you tap Check it or Make it beep, your phone connects to that tag over Bluetooth. Nothing is sent to us.
6. What we do not do
- No account, sign-in or email address is asked for.
- No analytics, crash reporting, advertising or tracking. The only third-party software in the app is RevenueCat’s, and it handles purchases only.
- We do not upload scans, device lists, sightings, places, reports or photos.
- We do not sell or share data. The purchase records RevenueCat keeps for us are used only to give you what you bought.
7. Permissions
The app asks for each permission only when you start the check that needs it: Bluetooth to listen for trackers and smart glasses, Location for Still with you, Notifications to tell you about it (local, on the phone), Local Network for the Wi-Fi check, Camera for the lens check, and Face ID if you turn on Lock history and reports. You can turn any of them off in iOS Settings. The checks that need them stop, and the others keep working.
8. If someone else uses your phone
Someone who can unlock your phone may see that you checked for trackers: sightings, alerts and reports in the app (unless you turn on Lock history and reports), notifications on the Lock Screen (unless you keep Discreet notifications on), your App Store purchase history, and Screen Time. In the app, Settings and privacy has a page, What someone else could see, that lists them.
9. Delete your data
In the app, open Settings and privacy and choose Delete history to remove sightings and places. Reports are kept unless you choose to delete them too, because they can be evidence. Each report can also be deleted on its own. Deleting the app removes everything it stored.
Deleting the app does not delete the purchase record at RevenueCat or Apple, so that a purchase can be restored. To have the RevenueCat record deleted, see section 14.
10. Support emails and this website
If you write to us, we receive your email address and what you wrote, and use them only to answer you. Our mailbox is hosted by Proton. We delete support emails when they are no longer needed, and on request.
This website sets no cookies, runs no scripts and loads nothing from other sites. Its host, Cloudflare, processes your IP address and standard request data to deliver and protect it.
11. Service providers
We share data only with the providers below, only for the purposes described here.
| Provider | Role | Data | Where |
|---|---|---|---|
| RevenueCat | Purchase management (processor) | Purchase history, the anonymous app user ID, the identifier for vendor (IDFV), and ordinary request details (app and iOS versions, App Store country) | United States |
| Apple | App Store, payment, map tiles if you open a map | As described in Apple’s privacy policy | Worldwide |
| Cloudflare | Hosts this website | IP address and request data, in transit | Global network; requests are handled in a data centre near you |
| Proton | Support mailbox | Emails you send us | Switzerland and the European Economic Area |
The data RevenueCat receives may be processed outside your country, in particular in the United States. Where the GDPR or the UK GDPR applies, such transfers rely on the safeguards those laws provide for: an adequacy decision where one exists, or standard contractual clauses in the provider’s data processing terms.
We may also disclose information when the law requires it, for example in response to a valid court order. Because we hold no names and nothing about your checks, there is very little we could disclose.
12. How long data is kept
| Data | Kept for |
|---|---|
| Everything on your iPhone | As set out in section 2, and until you delete it or the app |
| Purchase records at RevenueCat and Apple | Under their own retention rules, or until you ask us to have the RevenueCat record deleted |
| Support emails | As long as needed to help you |
13. Purposes and legal bases
We use the data above only to manage purchases and to answer you. We do not use it for advertising or profiling, and we make no decisions about you by automated means.
Where the GDPR or the UK GDPR applies, the legal bases are performance of a contract (Article 6(1)(b)) for managing purchases and confirming your plan, and legitimate interests (Article 6(1)(f)) for answering support emails and keeping this website available. What stays on your iPhone is not processed by us at all: we never receive it.
14. Your rights
Under the GDPR, the UK GDPR and Swiss law you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable form. For an app that holds no account, this is what that means in practice:
- On your phone. Everything about your checks is on your phone, where you can see it, share a report as a PDF, or delete it (section 9).
- Purchase records are held by Apple and by RevenueCat under the anonymous app user ID. We have no name or email to look you up by (GDPR Article 11), and the app does not show that ID. Write to us with the order ID from Apple’s receipt for your purchase (it is also at reportaproblem.apple.com), and we will find the RevenueCat record and have it deleted. A later restore makes a new one.
Write to app.sweepcheck@proton.me. We answer within one month, and it costs nothing. You also have the right to complain to the data protection authority where you live or work: in France, the CNIL; in Belgium, the Data Protection Authority; in Switzerland, the FDPIC; in the UK, the Information Commissioner’s Office (ICO).
If you live somewhere else, the law there may give you similar rights (for example, Law 25 in Québec or the LGPD in Brazil). The same answers apply, and you can write to us at the same address.
15. California
This section is for California residents and uses the terms of the California Consumer Privacy Act (CCPA). We give you these rights whether or not the law applies to a developer of our size.
- We do not sell personal information, and we do not share it for cross-context behavioural advertising. We have not done so in the past twelve months, including for anyone under 16.
- Categories collected in the past twelve months: identifiers (the anonymous app user ID and the identifier for vendor sent to RevenueCat) and commercial information (purchase history). All of it comes from your device.
- Purposes and recipients. We use it for the purposes in section 13 and disclose it only to the service providers in section 11.
- Your rights: to know what we hold and to receive a copy, to have it deleted or corrected, and not to be put at a disadvantage for asking. Write to app.sweepcheck@proton.me; you may use an authorised agent. As we hold no name or email, we check a request against the order ID it quotes, not against your identity.
16. Children
Sweepcheck is not directed at children under 13, and we do not knowingly collect personal information from them. It asks no one for a name, an email or any other personal detail; the only thing that leaves the phone is the purchase record described in section 4.
17. Changes
If this policy changes, the new version is published here with a new date, and the in-app privacy page is updated in the same release.
18. Contact
Questions about privacy: app.sweepcheck@proton.me.