Privacy Policy

Effective Date: August 24, 2026

Last Updated: August 24, 2026

App: NeatRoll (Android)

Developer: QIXIN TECH LIMITED

Contact: nancybarnardbond5@gmail.com

1. Scope and Introduction

QIXIN TECH LIMITED ("we," "us," or "our") provides NeatRoll, an Android mobile application that helps users review, organize, clean up, delete, and compress photos and videos on their devices (the "App"). This Privacy Policy explains what information the App accesses, what information may be transmitted from the device and collected, how it is used and shared, how long it is retained, and the choices available to users.

The App does not require a NeatRoll account or login. A Google Play account may be used by Google to download the App, process purchases, and manage subscriptions. A Google Play account is not a NeatRoll account, and we do not receive the user's Google password or complete payment-card details.

2. Key Privacy Summary

Photos and videos used for similarity review, cleanup, deletion, large-video review, and compression are processed locally on the device. We do not upload those media files to our servers for the App's core cleanup and compression features.

With permission, the App reads media and related metadata needed to provide the selected feature. The user initiates or confirms deletion or modification actions.

The App may collect limited analytics, attribution, purchase, crash, device, advertising, consent, and support information as described below.

Where advertising is enabled, the App uses Google AdMob and AdMob Mediation. Unity Ads is the currently integrated mediated advertising source. Advertising providers may process limited device, identifier, network, advertising-interaction, diagnostic, consent, security, and fraud-prevention information.

The App is intended for adults aged 18 or older and is not directed to children.

3. Information Accessed Locally but Not Collected by Us

3.1 Photos, Videos, and Media Information

With the user's permission, the App may access photos and videos stored on the device and analyze file type, file size, duration, resolution, creation date, thumbnails, visual similarity signals, and other media characteristics. This processing is performed locally on the device. The App does not transmit the contents of photo or video files to our servers for similarity grouping, screenshot review, large-video review, deletion, or compression.

If a user voluntarily attaches a screenshot, video, diagnostic log, purchase record, or other file to a support request, we collect that material because the user chose to send it and use it to respond to and resolve the request.

3.2 Device Permissions

The App may request Android permissions to read photos and videos so it can scan the library and provide the features selected by the user. Supported Android versions may allow full-library access or access to selected media only. Users may deny or withdraw permission in device settings, although some cleanup or compression features may then be unavailable or incomplete. The App does not request precise GPS location permission for its core features.

The App will not intentionally delete or modify a photo or video unless the user initiates or confirms the relevant action and Android permits it. Cloud-synchronized galleries, recycle bins, device backups, and third-party gallery services may separately affect storage or recovery.

4. Information Collected from the Device or User

4.1 Usage and Analytics Information

We use Google Analytics for Firebase to understand how the App is used and to improve functionality and performance. Depending on device and platform settings, collected information may include:

App-instance, installation, or similar pseudonymous identifiers.

App version, operating-system version, device model, language, time zone, and general region.

Screens viewed, buttons tapped, onboarding progress, permission state, scan and cleanup events, compression events, paywall and purchase-flow events, advertising events, and similar App interactions.

Session timing, engagement information, and aggregated usage statistics.

Analytics events are not intended to include the contents of photos or videos processed by the App.

4.2 Crash and Diagnostic Information

We use Firebase Crashlytics to identify and fix crashes and technical failures. Crash and diagnostic information may include installation identifiers, device and operating-system information, App version, crash time, stack traces, device state, available memory or storage indicators, and technical logs related to the failure. Crash reports are not intended to contain photo or video contents.

4.3 Attribution and Fraud-Prevention Information

We use Adjust to measure installation sources and selected in-App events, evaluate marketing performance, and prevent fraud. Depending on device settings and applicable law, Adjust may process an advertising identifier, app or device identifier, IP address, device model, operating system, App version, install referrer, campaign information, event timestamps, general geographic region, subscription or purchase event information, and fraud-prevention signals.

Where platform permission or consent is legally required before an advertising identifier or tracking technology may be accessed, the relevant choice will be requested or honored. Users may reset or delete the Android advertising identifier through supported device or Google settings.

4.4 Subscription and Purchase Information

Subscription and in-App purchase payments are processed by Google Play Billing. We do not receive complete payment-card details. The App, we, or service providers acting for us may receive product and base-plan identifiers, transaction or order identifiers, purchase tokens, purchase time, store country or region, subscription status, renewal or cancellation status, and entitlement information needed to provide paid features, restore purchases, prevent fraud, measure conversion, and provide support.

4.5 Support Communications

If a user contacts us, we collect information the user chooses to provide, such as an email address, message, attachments, device details, purchase information, and diagnostic information needed to investigate the request.

4.6 Advertising, Consent, and Advertising-Revenue Information

Where advertising is enabled, the Google Mobile Ads SDK, Google AdMob, AdMob Mediation, Google User Messaging Platform, Unity Ads SDK and Unity mediation adapter, and participating advertising technology providers may automatically process information such as:

IP address, which may be used to infer an approximate location such as country or city; the App does not provide precise GPS location to these services for advertising.

Device model, operating-system version, App version, language, locale, time zone, carrier, connection type, and network information.

Android Advertising ID where available and permitted, App Set ID, and other app, installation, or device identifiers.

Ad requests and interactions, including App launches, ad requests, bid or mediation responses, impressions, clicks, video views, completions, rewarded-ad events, and ad placement or format.

Advertising source, currency, and estimated impression-level revenue or advertising-performance information.

SDK performance, technical, diagnostic, security, invalid-traffic, and fraud-prevention information.

Consent strings, privacy choices, opt-out signals, age-treatment signals, and other regulatory information.

This information may be used to request, auction, select, deliver, personalize where permitted, frequency-cap, measure, and report advertisements; validate rewarded-ad completion; operate mediation; prevent fraud or invalid traffic; diagnose failures; and record and honor privacy choices.

Whether an advertisement is personalized depends on applicable law, consent, device or account settings, and advertising-partner eligibility. Contextual, non-personalized, or limited ads may still require processing of IP address and technical information for delivery, measurement, security, fraud prevention, and consent recording. We do not provide advertising providers with the contents of photos or videos processed by NeatRoll's core cleanup and compression features.

4.7 Information We Do Not Collect

We do not require or maintain a NeatRoll user account.

We do not collect NeatRoll passwords or login credentials.

We do not receive a user's full payment-card number from Google Play.

We do not upload photo or video files to our servers for the App's core cleanup and compression features.

We do not provide the contents of locally processed photos or videos to Google AdMob, Unity Ads, Adjust, or Firebase for advertising or analytics purposes.

5. How We Use Collected Information

Provide, maintain, secure, troubleshoot, and improve the App.

Understand onboarding, permission flows, feature usage, conversion, retention, and technical performance.

Verify subscription status, restore purchases, prevent entitlement abuse, and provide paid features.

Measure installation sources and marketing performance and prevent attribution or purchase fraud.

Request, deliver, personalize where permitted, frequency-cap, measure, and report advertisements.

Operate advertising mediation and validate rewarded-ad completion.

Record and honor consent, opt-out, and other privacy choices.

Diagnose crashes, errors, failed purchases, advertising failures, and performance problems.

Respond to support, consumer-rights, and privacy requests.

Comply with legal, regulatory, accounting, tax, security, advertising, and app-store requirements, and protect users, systems, partners, and the public from fraud or unlawful activity.

6. How We Share Information

We may disclose collected information to the following recipients only for the purposes described in this Privacy Policy:

Google Firebase and Google Analytics, for analytics, crash reporting, diagnostics, and service operation.

Adjust, for attribution, campaign measurement, selected event measurement, purchase or subscription measurement where configured, and fraud prevention.

Google LLC and participating advertising technology providers through Google Mobile Ads, AdMob, AdMob Mediation, and Google User Messaging Platform, for ad delivery, auctions, mediation, consent management, measurement, reporting, security, and fraud prevention.

Unity Technologies and its applicable advertising partners through Unity Ads and the Unity mediation adapter, for ad bidding, delivery, measurement, reporting, security, and fraud prevention.

Google Play, for App distribution, purchases, subscriptions, refunds, tax, fraud prevention, and entitlement management.

Technical, legal, security, analytics, advertising, and customer-support providers that process information for us under appropriate obligations.

Authorities, regulators, courts, law-enforcement bodies, or other parties when disclosure is required by law or reasonably necessary to protect rights, safety, security, or the integrity of the App.

A purchaser, successor, affiliate, or adviser in connection with a merger, financing, restructuring, acquisition, or sale of all or part of our business, subject to applicable law.

We do not sell photos, videos, or personal information for money. Disclosures of advertising identifiers, device information, and App or ad-interaction data to advertising partners for personalized advertising, cross-context behavioral advertising, or measurement may nevertheless be treated as a 'sale,' 'sharing,' or targeted advertising under certain U.S. state laws. Where applicable, users may use the App's Privacy Options or contact us to exercise an opt-out.

7. Third-Party Services

Third-party providers process information under their own privacy policies and terms. Principal services used by the current Android App include:

Firebase privacy and security: https://firebase.google.com/support/privacy

Google Privacy Policy: https://policies.google.com/privacy

How Google uses information from apps that use its services: https://policies.google.com/technologies/partner-sites

Google AdMob, Google Mobile Ads, and AdMob Mediation privacy information: https://developers.google.com/admob/android/privacy

Google User Messaging Platform: https://developers.google.com/admob/android/privacy

Adjust Privacy Policy: https://www.adjust.com/terms/privacy-policy/

Unity Game Player and App User Privacy Policy: https://unity.com/legal/game-player-and-app-user-privacy-policy

Google Play and Google privacy information: https://policies.google.com/privacy

Advertising partners and demand sources participating through Google or Unity may change over time. Their own privacy notices and the privacy or consent message shown in the App may provide additional details. If a future release activates another advertising source, we will update this Policy and the App's consent configuration as required before or with that release.

8. Legal Bases for Processing

Where applicable law requires a legal basis, we rely on one or more of the following:

Performance of a contract, including providing App features or subscription benefits requested by the user.

Consent, including permission to access device media and consent required for personalized advertising, identifiers, tracking, or device-storage access technologies.

Legitimate interests in securing and improving the App, measuring performance, providing contextual or limited advertising where permitted, preventing fraud, and providing support, where those interests are not overridden by user rights.

Compliance with legal obligations and protection of legal rights, safety, and security.

Withdrawing consent does not affect processing already performed lawfully. Depending on applicable law, withdrawal may not prevent contextual or limited advertising or processing necessary for security, fraud prevention, consent recording, and technical ad delivery.

9. Choices and Controls

Media access: change photo and video permission in Android settings. Withdrawing access may prevent cleanup or compression features from working.

Advertising privacy options: where required or available, use the App's Privacy Options entry to review or change advertising consent choices. Changes apply prospectively.

Advertising identifier: reset or delete the Android Advertising ID and adjust ad-personalization settings through supported device or Google settings.

U.S. state opt-outs: where applicable, opt out of processing treated as a sale, sharing, or targeted advertising through Privacy Options or by contacting us.

Subscriptions: manage or cancel a subscription in Google Play. Deleting the App does not cancel a subscription.

Support: ask us to stop a support exchange, subject to records that must be retained for legal, accounting, security, or fraud-prevention reasons.

10. Data Retention and Deletion

Because NeatRoll does not create user accounts, we do not maintain NeatRoll account profiles for deletion. Photos and videos processed for cleanup remain on the device unless the user chooses to delete or modify them, or voluntarily sends them to us for support.

We retain information only for as long as reasonably necessary for the purposes described in this Policy, including support, security, analytics, performance measurement, ad delivery and measurement, consent records, fraud prevention, financial recordkeeping, and legal compliance. Retention may differ by data category and provider. For example, Firebase Crashlytics states that crash stack traces and associated identifiers are generally retained for 90 days before removal begins. Google, Unity, Adjust, and other providers retain information according to their own policies and product settings.

Users may request deletion of personal information held directly by us by emailing nancybarnardbond5@gmail.com. We may request information reasonably necessary to verify the requester and locate relevant records. Some information may be retained when required for legal compliance, fraud prevention, security, consent records, disputes, or financial recordkeeping. Aggregated or de-identified information that can no longer reasonably identify a user may be retained. Google Play purchase and subscription records must also be managed through Google Play.

11. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect collected information. Information transmitted to service providers is sent using HTTPS or other encryption supported by those platforms. Access is limited according to operational need. No method of transmission, storage, or processing is completely secure, and absolute security cannot be guaranteed.

12. International Data Transfers

We are established in Hong Kong. Analytics, attribution, advertising, app-store, and technical providers may process information in Hong Kong, the United States, the European Economic Area, Singapore, and other jurisdictions. Privacy laws in those locations may differ from those in the user's country. Where required, we use or rely on legally recognized safeguards for international transfers.

13. Privacy Rights

Depending on where a user lives, the user may have rights to access, correct, delete, obtain a copy of, restrict, or object to processing of personal information; withdraw consent; opt out of processing treated as a sale, sharing, or targeted advertising; appeal a privacy decision; or complain to a data-protection authority.

To submit a request, email nancybarnardbond5@gmail.com. We may request information reasonably necessary to verify identity and locate records. Rights may be subject to legal exceptions. Hong Kong residents may have access and correction rights under the Personal Data (Privacy) Ordinance. Residents of the European Economic Area, United Kingdom, California, and other jurisdictions may have additional rights. For information controlled directly by Google, Unity, Adjust, or another provider, a request may also need to be submitted to that provider.

14. Children

The App is intended for adults aged 18 or older and is not directed to children. We do not knowingly direct personalized advertising to children or knowingly collect personal information from children through the App. If we learn that a child provided personal information to us, we will investigate and take appropriate steps, including deletion where required.

15. Changes to This Privacy Policy

We may update this Policy to reflect changes in the App, subscriptions, advertising sources, providers, legal requirements, or data practices. We will publish the revised version at the URL below and change the Last Updated date. We will provide additional notice or request consent where required by law.

Privacy Policy URL: https://sites.google.com/view/privacy-policy-neatroll/

16. Contact Us

QIXIN TECH LIMITED
RM C, 13/F, HARVARD COMM BUILDING
105-111 THOMSON ROAD
WAN CHAI, HONG KONG
Email: nancybarnardbond5@gmail.com
Telephone: +852 6282 4844