Privacy policy
How we collect, use, retain, and protect your personal information.
Last updated: 25 August 2026
1. Who we are (controller)
The data controller is Kleen App Ltd (trading as Kleen), operating kleenapp.co.uk and related apps (customer dashboard, contractor portal, admin).
Privacy contact: privacy@kleenapp.co.uk. We do not currently appoint a separate external DPO; privacy requests are handled by our data protection contact at that address.
2. Personal data we collect
- Identity and contact: name, email, phone, account role (customer / contractor / admin)
- Address and job details for cleaning bookings
- Payment and payout data via Stripe (we do not store full card numbers)
- Contractor onboarding: business details, service areas, ID documents for vetting
- Communications: support messages, dispute threads, transactional emails
- Technical: IP/security logs, auth cookies, device/browser needed to run the service
3. Purposes and lawful bases (UK GDPR)
- Contract — create accounts, match jobs, quotes, escrow payments, contractor onboarding, deliver the marketplace service.
- Legitimate interests — platform safety, fraud prevention, service improvement, defending legal claims, securing our systems (balanced against your rights).
- Legal obligation — tax/accounting records, responding to lawful requests.
- Consent — non-essential cookies/analytics (if enabled), optional marketing where consent is required. You can withdraw consent at any time.
4. Processors and sharing
We use specialist providers under contract. We do not sell your personal data.
- Supabase — database, authentication, file storage (jobs evidence, contractor documents)
- Stripe — payments, escrow/authorisations, contractor Connect payouts
- Resend — transactional email
- Vercel — application hosting and edge delivery
Relevant job details are shared with contractors who quote or are booked. We may share data with professional advisers or authorities where required by law or to protect rights, safety, or fraud prevention.
5. International transfers
Some providers may process data outside the UK. Where that happens, we rely on appropriate safeguards (for example UK adequacy regulations or standard contractual clauses / equivalent transfer tools offered by the provider). Details are available on request.
6. How long we keep data (retention)
Summary below. The full internal matrix is maintained for staff as Data retention matrix (aligned with this policy). Periods may be extended only under a documented legal hold (see §8).
| Category | Typical period |
|---|---|
| Account profile | While account is active |
| Account deletion grace | 30 days after you request erase (cancelable in-app) |
| Job & payment ledgers (anonymised after erase) | Up to 6 years (tax / accounting / claims) |
| Disputes / chargebacks | Up to 6 years from relevant event |
| Contractor ID / vetting documents | Up to 24 months after leave/erase, unless legal hold |
| Support correspondence | Typically 2–3 years |
| Marketing preferences | Until withdrawn or account erased |
7. Account deletion and anonymisation
You can schedule account deletion from your dashboard (Account settings). After the 30-day grace period we:
- Remove your login and scrub profile identifiers
- Anonymise job records (redact full address/notes; keep job reference, status timeline, outward postcode area, and payment amounts / Stripe IDs needed for ledgers)
- Delete stored payment methods and saved addresses
- For contractors, start the document retention countdown; ID files are purged when that period ends unless a legal hold applies
Deletion may be delayed if an active legal hold applies. Contact privacy@kleenapp.co.uk for help.
8. Fraud, safety, and legal claims (legal holds)
Where reasonably necessary for fraud prevention, safety, establishing or defending legal claims, or regulatory/lawful requests, we may place a legal hold on a user, contractor, or job. Access is restricted to authorised admin/legal staff. Holds are purpose-limited and reviewed; they are not a blanket reason to keep all personal data forever. When a hold is released, normal retention and erasure rules apply.
We prefer anonymised job ledgers plus payment provider references and timestamps over keeping full identifiable profiles indefinitely.
9. Contractor documents
ID and vetting documents are stored in private storage, accessible to the contractor and authorised Kleen admins (signed URLs). They are retained only as long as needed for vetting, safety, and the periods above, then deleted from storage unless a legal hold applies.
10. Your rights
Under UK GDPR you may have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase data (subject to legal exceptions such as tax or legal claims)
- Restrict or object to certain processing
- Data portability (where applicable)
- Withdraw consent where processing is consent-based
- Complain to the ICO (ico.org.uk)
To exercise rights, email privacy@kleenapp.co.uk from your account email (or with enough detail for us to verify you). We respond within one month where required by law.
11. Cookies
We use essential cookies for security and sign-in. Non-essential analytics cookies are used only if you opt in. See our Cookie policy.
12. Children
Kleen is not directed at children under 18. We do not knowingly collect their data.
13. Changes
We may update this policy. The “Last updated” date will change; material changes may also be notified in-product or by email where appropriate.
14. Contact
Privacy: privacy@kleenapp.co.uk
General: info@kleenapp.co.uk