Privacy Policy
Gon · Last updated 19 October 2026 · Deutsch
Gon is operated by Daniel Kholodov ("we"), the data controller. Contact: support@kholodov.com. Full details in the Impressum. This policy covers the Gon iOS app and this site; our other apps have their own.
1. Your photos
Gon reads your photo library so you can swipe through it, find duplicates and large videos, and delete what you no longer want. All of this happens on your iPhone, using Apple's own frameworks. Your photos and videos, their contents, file names, album names and locations never leave your device. We never receive them, and we never share or sell them.
Photos are only deleted after you confirm in the iOS system dialog. iOS then keeps them in Recently Deleted for up to 30 days, where you can recover them. You can change or revoke photo access at any time in iOS Settings → Privacy & Security → Photos.
2. What we process
There is no account. We never ask for your email address or phone number.
- A random identifier created on your device and kept in your iCloud Keychain, so a subscription survives a reinstall. Everything below is linked to it and to nothing else.
- Usage data: screens opened, swipes (keep or delete), which kind of collection you review (for example a month, an album, screenshots, duplicates or large videos) with an internal reference to it, how many photos and videos you reviewed and deleted, how much storage was freed, scan results and durations, onboarding steps, language changes, and actions on the subscription screen. These are counts and categories, never photo contents.
- Device data: app and iOS version, device model, language, time zone, connection type, notification and subscription status, and your App Store country.
- Diagnostics: crash and error reports and app performance measurements.
- An Apple App Attest token, confirming a request comes from a genuine copy of the app.
- Which version of a screen you were shown, when we test improvements.
- If you installed Gon from an Apple Search Ads ad, the campaign that led to the install, which Apple provides without any advertising identifier.
- A push token, only if you allow notifications.
3. What stays on your device
Your keep and delete decisions, your progress through each collection, your totals (storage freed, photos reviewed) and your settings (language, haptics, video sound) are stored only on your iPhone. They are deleted when you delete the app.
4. Why we process it
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Running the app and providing your subscription | Performance of a contract |
| Understanding how the app is used, so we can improve it, including testing versions of a screen | Legitimate interest |
| Crash reports, diagnostics and performance | Legitimate interest |
| Preventing abuse of our servers | Legitimate interest |
| Knowing which Apple Search Ads campaign brought an install | Legitimate interest |
| Answering support requests | Legitimate interest |
| Photo library access and notifications | Consent, via the iOS permission prompts |
| Tax and accounting records | Legal obligation |
Your right to object. Where we rely on legitimate interest you may object at any time, by emailing support@kholodov.com. In the EU and EEA you can also switch off usage analytics yourself under Settings → Privacy in the app. Anyone can withdraw a permission in iOS Settings.
5. Who receives it
Processors acting on our behalf: Google (hosting, crash reporting, performance monitoring, remote configuration, anti-abuse), Superwall (subscriptions), Apple (payments, App Attest, Search Ads attribution, push delivery), and Cloudflare (hosting this website). Payment is handled entirely by Apple; we never see your card details or billing address. If you request a refund, Apple may ask us to confirm how the app was used.
We do not sell personal data. There is no advertising, no advertising identifier and no attribution or advertising SDK in this app. We may disclose data where the law requires it.
6. Transfers
Our servers are in the European Union. Some processors are in the United States; those transfers rely on the European Commission's Standard Contractual Clauses and, where applicable, the EU–U.S. Data Privacy Framework.
7. Retention and security
We keep usage data for as long as we run Gon, because its purpose is to show how the app is used over years. The criteria are how long the data remains useful for operating and improving the app, and any legal obligation to keep it. Crash reports follow our provider's retention, currently 90 days. If you ask us to delete your data, we delete every record tied to your identifier.
Data is transmitted over encrypted connections and stored encrypted at rest, and every endpoint is protected by Apple's App Attest.
8. Your rights
You may request access to your data, correction, deletion, restriction, portability, or object to processing, and withdraw consent at any time. Because your data is tied only to a random identifier, we need it to find your records: open Settings in the app, tap the copy button next to the User ID at the bottom, and include it in your email. You may also complain to a data protection supervisory authority.
9. California
We collect the categories in section 2 for the purposes in section 4. We do not sell or share personal information for cross-context behavioural advertising, and we do not collect sensitive personal information. California residents may request access, deletion or correction at the address above, and we will not discriminate for doing so.
10. Children
Gon is not directed at children under 16 and we do not knowingly collect their data.
11. Changes
We may update this policy. The date above shows the current version, and material changes are announced in the app.