Privacy policy
Effective 15 October 2026
This policy explains what personal data we process when you use kleenee.com and the Kleenee app, why, for how long, and what your rights are. We have kept it plain; if anything is unclear, write to us.
Who processes the data
For website visitors, account owners and customers, the controller is Kleenee, [email protected].
For data an organisation enters about its staff and work (tasks, photos, notes, pay), that organisation is the controller and we are the processor acting on its behalf.
What data we process
Account: email address, name, chosen language, role and the organisation you belong to.
Work: tasks, checklists, notes, photos, reported issues and found items, start and finish times and pay per task.
Devices: if you turn on notifications, the address used to deliver them to that device.
Technical data: IP address, browser type and request time, in short-lived server logs used for security and fixing errors.
Payment: you enter card details only with Paddle and we never see them. From Paddle we receive the buyer’s name and email, country, plan and subscription status.
Guests: we do not collect guests’ names, contact details or documents. From Booking.com or Airbnb calendars we keep only stay dates and a booking reference.
Why, and on what basis
To provide the service and charge for it (performance of a contract), to meet tax and accounting duties (legal obligation), and to protect the service from abuse and fix errors (legitimate interest).
We send news by email only if you agreed to it, and you can withdraw consent with one click. Messages the service needs (sign-in, invoices, important changes) are always sent.
Who we share data with
Supabase (database, sign-in and photos), on servers in Frankfurt, EU.
Vercel (running the app and the website), processing in Frankfurt, EU.
Resend (sending sign-in emails).
Sentry (Functional Software, Inc.; reports of errors in the app, without names, email addresses or cookies), on servers in Frankfurt, EU.
Paddle.com Market Limited (payments, invoices and tax), as an independent controller of payment data.
Apple, Google and Mozilla deliver notifications to the devices where you turned them on.
Some of these providers are based in the US. Transfers outside the EU and Serbia rely on standard contractual clauses or the EU–US Data Privacy Framework. We never sell data or share it for advertising.
How long we keep data
While the account is active. After a trial or subscription ends we keep it for another 90 days in case you continue, then delete it. Backups are deleted within 30 days after that.
When a manager removes a user, their work stays in the organisation’s history. Invoices and payment records are kept as long as the law requires. Server logs are deleted within 30 days.
Cookies
kleenee.com uses no tracking or analytics cookies. Its only cookie remembers a language you chose yourself (one year). On a first visit we pick the language from the country of your IP address at the moment of the request; we do not store the address.
The app uses only necessary cookies: one for sign-in and one that remembers how the menu is shown. The Paddle payment window uses its own cookies needed for payment and fraud prevention.
Your rights
You have the right to access your data, have it corrected or erased, restrict processing, receive it in a portable form, object, and withdraw consent. Send requests to [email protected]; we reply within 30 days.
If your employer or the organisation you work for entered the data, contact them first, and we will help them respond.
You can complain to the Commissioner for Information of Public Importance and Personal Data Protection in Serbia or to the supervisory authority in your country.
Security
All connections are encrypted. Access is limited by role inside the database itself, so each organisation sees only its own data and staff only their own tasks. Photos are private and open through temporary links, and invitation and sharing links are stored only as a one-way hash from which the link cannot be recovered.
Changes to this policy
We publish changes on this page with a new date and email account owners about material changes.