Privacy Policy
1. Your data stays on your phone
Dupsy reads the photos in your gallery (or only the photos you selected, if you chose “Selected photos”) to find exact copies, resized copies and similar shots. Photos are compared on your phone only, using small image fingerprints (hashes) and sharpness scores computed on the device. No photo, thumbnail or fingerprint is ever uploaded, collected or shared, and we operate no servers that process your photos. The fingerprints are kept in the app's private database so the next scan takes seconds; cloud backup of that storage is disabled.
Dupsy never deletes anything by itself: every deletion goes through Android's own confirmation dialog. Photos you delete are first copied into the app's private Trash, kept for 7 days (30 days with Dupsy Pro) so you can restore them to their original album, and then permanently deleted. Uninstalling the app removes the Trash and everything in it. Photos stored only in a cloud service such as Google Photos are never touched.
2. Permissions
- Photos and videos / Photos (READ_MEDIA_IMAGES, Android 13+) — asked when you start your first scan, to read your photos for comparison on the device. On Android 14 you can allow only selected photos (READ_MEDIA_VISUAL_USER_SELECTED); Dupsy then scans just those.
- Storage (READ_EXTERNAL_STORAGE, Android 12 and older only) — the same purpose on older Android versions.
- Deleting photos — no special permission: Android shows its own dialog for each batch and you confirm it. Dupsy does not request “All files access”.
- Notifications (POST_NOTIFICATIONS) — optional, can be turned off: scan progress, a weekly note when new similar photos were found, and a reminder before Trash items expire.
- Internet — ads, analytics, purchases and consent. Your content is never sent.
3. Analytics and crash reports (Google Firebase)
With your consent where required, we use Google Analytics for Firebase and Firebase Crashlytics to understand how the app is used and to fix crashes. We log anonymous events such as “paywall viewed” or “purchase completed”, plus device model, OS and app version, approximate region and an app-instance identifier. We never log your content; the app enforces this with an allow-list of event parameters. Crash reports contain the error type and stack trace only. Firebase Remote Config is used to tune paywall and ad settings.
4. Advertising (Google AdMob and Unity Ads)
The free version shows ads: one slim banner on the Home and Trash screens, an occasional full-screen ad after a clean-up, back on the home screen, and optional rewarded ads you choose to watch to unlock a Pro tool for a while. Ads never appear while scanning, while you review a group, in the delete dialog, during onboarding or on the paywall, and never in the first two minutes of first use. Dupsy Pro removes all ads.
Ads are served by Google AdMob, with Unity Ads competing through AdMob mediation and serving the banner directly. These partners may collect the advertising ID, device and usage information and approximate location derived from your IP address to serve and measure ads. See Google's and Unity's privacy policies.
5. Your choices (GDPR, UK GDPR, Swiss FADP, US state laws)
In the EEA, the UK and Switzerland, Dupsy asks for your consent through Google's consent message (IAB TCF) before personalised ads or analytics are used. If you decline, ads are non-personalised and analytics stays off. In US states with privacy laws (such as California, Virginia, Colorado), you can opt out of the “sale” or “sharing” of personal information and targeted advertising. You can change your choice at any time in Settings → Privacy choices.
Legal bases (GDPR): consent for analytics and personalised ads; performance of a contract for the features you use and for purchases; legitimate interest for crash diagnostics where consent is not required. You may request access, deletion, correction or portability of data we control, object to processing, or lodge a complaint with your supervisory authority. California residents (CCPA/CPRA): we do not sell personal information for money; ad partners may receive identifiers as described above, which you can opt out of in Privacy choices. We do not discriminate against users who exercise their rights.
6. Purchases
Subscriptions and the lifetime purchase are processed by Google Play. We never receive your payment details; Google tells the app whether Pro is active.
7. Retention and deletion
Photo fingerprints stay in the app's private storage until you uninstall the app or clear its storage. Deleted photos stay in the app's Trash for 7 days (30 days with Dupsy Pro) and are then permanently deleted; you can empty the Trash at any time, and uninstalling the app removes it. Analytics data is retained by Google for up to 14 months. See how to delete your data.
8. Children
Dupsy is not directed to children under 13 (under 16 in the EEA) and we do not knowingly collect their data.
9. Changes
We will update this page if our practices change and revise the date above.