Privacy

What data Pruneo for Mac, Pruneo for iPhone and this website handle, why, and for how long.

Last updated: November 5, 2026

Who is responsible

The data controller is Leandro Vitale Tasso, based in Spain. For any privacy question, write to [email protected].

The Mac app

Pruneo has no account, telemetry or analytics. What it finds on your disk stays on your Mac.

The app connects to the internet only for this:

• Checking for a new version. Once a day it requests https://pruneo.app/version.json. To know how many Macs use Pruneo, the request includes the app version, the language, whether you are a member, whether your Mac is Intel or Apple Silicon and, the first time, that it is a new install. We only keep each day's total per version, language and chip type, without your IP address or anything that identifies you. The catalog rules (rules.json and comunidad.json) are downloaded with that same request and send nothing. You can turn it off in Settings › “Check for updates automatically”.
• Validating your member key, only if you contributed. Once a week the key and the Mac's name are sent to Lemon Squeezy, which processes payments.
• What you turn on: the AI agent, Help out and MCP, explained below.

The AI agent (optional)

You can connect an AI agent: Apple Intelligence, Ollama, Claude Code, Codex or Gemini CLI. Pruneo asks it about the large folders it doesn't know yet, only when you tap “Ask”. It sends the path of each folder (with “~” instead of your user name), the names of its subfolders and their sizes. It never sends the contents of a file.

Apple Intelligence and Ollama run on your Mac: the request never leaves it. Claude Code, Codex and Gemini CLI send it to Anthropic, OpenAI or Google with your own account, and what they do with it is governed by their terms and privacy policies. The answers are stored only on your Mac, and you can delete them with “Ask again”.

Help out (optional, off by default)

If you turn on “Help make Pruneo smarter”, Pruneo sends us what your agent identified, so what it learned works on every Mac:

• The generic path of the folder inside your home folder, for example Library/Application Support/Caches/ledger-live-desktop-updater. Only what is inside Application Support, Containers and Group Containers is sent. Before sending, Pruneo drops any name that looks personal: your name, identifiers, long numbers or email addresses. It never sends the hidden folders in your home folder.
• What kind it was (cache, logs, temporary files, updates or old versions) and which app.
• Whether you then cleaned it or restored it from quarantine.
• The app version, which agent you used and a random number Pruneo creates on your Mac. That number isn't linked to you.

To count how many different Macs agree, we keep that number and your network (your IP address without its last part) only as summaries hashed with a secret key. The network summary changes every month. We don't store your IP address.

When 5 or more Macs agree, the path goes into the public list every Mac uses (comunidad.json), with the kind, the app and how many Macs suggested it. We keep contributions for two years at most.

You can turn it off at any time in Settings › AI agent: anything not sent yet is deleted. What was already sent isn't linked to you, so we can't find it to delete it.

MCP (optional)

With pruneo mcp you can connect Pruneo to an AI agent such as Claude Code or Codex. The agent can scan your disk and clean what Pruneo considers safe, always to quarantine. MCP runs on your Mac and sends us nothing. What the agent reads from the scan (paths and sizes) reaches that agent's provider, under its own terms.

The iPhone app

Pruneo for iPhone has no account. Your photos, videos and contacts are analyzed on your iPhone and Pruneo never uploads them to its servers: not the photos, not their thumbnails, not the fingerprints the app computes to compare them, not your album names, not your contacts. The only thing uploaded is what you choose to move to a shared iCloud album, and that goes to your Apple account, not to Pruneo.

• Photos. With your permission, Pruneo reads your photo library to find copies, similar and blurry photos, screenshots, large videos and Live Photos. What you delete, convert or compress goes to Recently Deleted in Photos for 30 days.
• Contacts (optional). Only if you open Duplicate contacts and allow access. Before merging contacts, Pruneo saves a copy (.vcf) inside the app, on your iPhone, so you can restore them.
• Purchases. Apple processes them. We never see your card or your Apple Account.
• Reminders. They are local notifications: they're scheduled on your iPhone, without going through any server.

Ad measurement on iPhone

To know which ad or channel brings each person and which campaigns work, the iPhone app measures the install, the start of the free trial and purchases. Nothing about your photos or contacts is ever sent.

• Apple (App Store, Apple Ads and AdAttributionKit). Apple tells us, in aggregate, which campaign an install or a purchase came from, without identifying you. For this, the app sends Apple an attribution token.
• RevenueCat. It receives your subscription status from Apple (trial, payment, renewal, cancellation or refund) together with an anonymous ID created by the app. We use it to know how many people pay and to report those purchases to Apple Ads and Meta.
• Meta (Facebook and Instagram). The app uses the Meta SDK to measure the install and app opens. In addition, RevenueCat reports each trial, purchase, renewal and cancellation to Meta (the product, the amount and the date) together with the app's anonymous ID, so Meta knows which ads bring people who pay. This happens for every purchase, also if you don't allow tracking. If you allow tracking in the iOS prompt, Meta also receives your iPhone's advertising identifier; if not, it doesn't.

These services may also receive technical data such as the iPhone model, iOS version, country and IP address. Each one handles it under its own policy: Apple, RevenueCat and Meta. RevenueCat keeps the purchase history as long as we need it for your subscription and as the law requires.

How to say no. In the “Allow Pruneo to track your activity…?” prompt, choose “Ask App Not to Track”. You can change it any time in Settings › Privacy & Security › Tracking. In the European Union, the European Economic Area, the UK and Switzerland, the Meta SDK stays off until you accept it on a screen in the app, and you can withdraw that consent from Pruneo's settings. Saying no doesn't change anything the app does for you.

The purchases RevenueCat reports to Meta are sent even if you say no to tracking, without the advertising identifier. If you don't want yours reported, write to us at [email protected].

This website

This website and what we receive from the app are hosted on Cloudflare.

This website uses analytics and marketing cookies only if you accept them. If you don't, they are not loaded. You can change your choice at any time from “Cookie preferences” at the bottom of every page.

We also count, anonymously, how many downloads the app gets, with no data that identifies you. And we store your preferences, such as your language, in your browser.

The iPhone beta. If you sign up for the beta, we store your email, the day, the page language and where you came from, only to invite you to try the app. We get an internal Slack notice with the same data. We delete your email after one year, or sooner if you ask.

Who we work with. Cloudflare (hosting for the website and for what the app sends), Google Tag Manager and Google Analytics, and the Meta pixel (only if you accept cookies), Slack (internal beta notices), Lemon Squeezy (contributions and member keys), and Apple and RevenueCat (purchases in the iPhone app). Some are in the United States; transfers rely on the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

Your rights

Each use of data has a legal basis: your consent for everything that comes switched off (below), performing what you ask for (checking your member key, adding you to the beta), and our legitimate interest in counting downloads and active Macs in aggregate and in protecting the website from abuse.

The AI agent, Help out, the Meta SDK in the iPhone app and analytics cookies are based on your consent: they are off until you accept them, and you can withdraw your consent at any time.

Reporting purchases to Meta and Apple Ads from RevenueCat is based on our legitimate interest in knowing which ads work. You can object at any time by writing to [email protected].

You can ask for access to, correction or deletion of your data, or object to its use, by writing to [email protected].

If you think we're not handling your data properly, you can complain to the Spanish Data Protection Agency (aepd.es) or to the authority in your country.