Criba Privacy Policy

Criba cleans up your gallery without sending information outside your device.

What it reads

The app reads the device gallery through MediaStore.

It only requests READ_EXTERNAL_STORAGE on API 32 or earlier, READ_MEDIA_IMAGES, and READ_MEDIA_VISUAL_USER_SELECTED.

Coil loads thumbnails from the device and includes no network engine.

A local Room database records the MediaStore identifier of each photo you decide on and the decision you make.

That database is excluded from both cloud backup and device-to-device transfer.

A DataStore preferences file stores the trash mode and two aggregate counters: photos deleted and bytes recovered.

These preferences are included in Android's standard backup, but they do not identify any photo.

No photo, metadata, or statistic leaves the device: Criba does not have internet permission.

It also has no accounts, analytics, or third-party SDKs with network access.

Android always asks for your confirmation through its system dialog; Criba never deletes silently.

By default, photos go to the system trash, where they can usually be recovered for about 30 days.

This file's Git history records its changes. For questions, write to privacy@micaelapps.dev.