Saaf Privacy Policy

Last updated: 22 September 2026

Everything Saaf looks at stays on your phone. Saaf has no server, no account and no analytics. The only data that leaves the device is what the Google ads in the free version send to Google, described under Advertising.

What Saaf accesses, and why

Each feature reads only what it needs, only after you open it, and only on this phone. None of it is collected, uploaded, sold or shared.

Photos, videos and audio

With your permission, Saaf reads your photos, videos and audio files to show them as cards you can keep or bin. It reads file details (name, size, date, folder, dimensions, length), plays videos and audio inside the card, and makes small preview images and similarity fingerprints to find duplicate photos. These details, previews and fingerprints are stored only on your device.

Documents and other files

To find large files, Saaf reads the folders you pick in Android's folder picker. If you also turn on "All files access" in Android settings, it can look through every folder on the phone, including Download. It reads file names, sizes, types, dates and folders. Opening a file hands it to an app of your choice on the phone.

Installed apps

The Unused apps screen lists the apps on your phone with their names, icons, install dates and the size of their installed files. If you choose to turn on "Usage access" in Android settings, Saaf also reads when each app was last opened and how much storage it uses, including data and cache. Apps are removed only through Android's own uninstall confirmation.

Contacts

With your permission, the Duplicate contacts screen reads your contacts' names, phone numbers, email addresses and the account each one is saved in, to find entries for the same person. Merging uses Android's own "link contacts": Saaf never deletes a contact, and you can unlink them again in your Contacts app.

Device safety checkup

The safety checkup reads how your phone is set up: whether a screen lock is set, whether USB debugging or developer options are on, whether Google Play Protect is on, the date of the latest security update, the Android version, and common signs that the phone is rooted. For installed apps it reads which store installed them, which sensitive permissions they have been granted, and whether they can act as a device administrator, use accessibility services, install other apps or draw over other apps. No extra permission is needed for any of this.

Permissions

PermissionUsed for
READ_MEDIA_IMAGES, READ_MEDIA_VIDEO, READ_MEDIA_AUDIOShowing your photos, videos and audio as cards
MANAGE_EXTERNAL_STORAGE (optional)Finding large files in every folder, not only the ones you pick
PACKAGE_USAGE_STATS (optional)Last-opened dates and full storage use of installed apps
REQUEST_DELETE_PACKAGESOpening Android's uninstall confirmation for an app you choose
READ_CONTACTS, WRITE_CONTACTSFinding duplicate contacts and linking them
INTERNETAds and Google Play purchases only

You can withdraw any of these at any time in Android settings. The rest of the app keeps working.

Deleting things

Saaf never deletes anything without your confirmation. Photos, videos and audio you bin go to Android's own trash, where you can restore them until they are permanently deleted (after up to 30 days, or sooner if you empty the bin). Documents you bin are moved to Saaf's own bin folder on the phone and stay there until you restore them or delete them for good.

Everything Saaf stores is kept in its own app storage on your phone, including the index, previews, fingerprints, settings and Saaf's bin folder. It is all deleted when you uninstall Saaf.

Advertising

The free version shows ads from Google AdMob. To serve and measure ads, the Google Mobile Ads SDK collects your device's advertising ID, IP address, device model and approximate location, and shares them with Google. See how Google uses information from apps that use its services. Where required (for example in the EEA and UK), you are asked for consent first and can change your choice under Settings → Ad privacy choices. You can also reset or delete your advertising ID in Android settings.

The ads never receive your photos, files, contacts or app list.

If you buy "Remove ads", the ad SDK is not started at all and no advertising data is sent.

Purchases

The one-time "Remove ads" purchase is processed by Google Play, in your local currency. Saaf only learns whether you own it; it never sees your payment details.

Children

Saaf is not directed at children under 13.

Changes to this policy

If a new version of Saaf accesses anything not listed here, this policy is updated first, and the date at the top changes.

Your rights and contact

Because Saaf holds no personal data on any server, there is nothing for us to access, correct or delete on your behalf. For questions or grievances, including under India's Digital Personal Data Protection Act, 2023, contact our grievance officer at contact@locleo.com.