Cleanzi Android app privacy notice

Version: 8 September 2026 · This notice supplements the full Cleanzi Privacy Policy.

1. Who is responsible

Cleanzi Rafał Dudek, ul. Jankowicka 23/25, 44-200 Rybnik, Poland, NIP 6391936558, REGON 365765292, is responsible for registration, service, security and support data. For employee and operational data entered by a customer organisation, that organisation is the controller and Cleanzi acts as its processor. Privacy contact: kontakt@cleanzi.pl.

2. Data used by the app

• account and identity data supplied by the organisation, such as name, work email, user ID, role and organisation;
• work activity, including START/STOP events, QR and zone events, working-time history and task status;
• optional user content, including comments and a proposed missing STOP time;
• a single foreground location point at an explicit START or individual-order action when enabled and permitted;
• security and technical metadata needed for sign-in, access control, fraud prevention and service reliability.

3. Camera and QR scanning

The camera is activated only after the user intentionally opens the QR scanner. Camera frames are analysed locally on the device solely to decode a QR code. Frames, photographs and recordings are not stored or uploaded to Cleanzi, Google Cloud or Firebase. Only the decoded QR identifier and the operational data required for the selected action are transmitted. QR scanning does not work without camera permission.

4. Location

The app does not track a route and does not collect background or continuous location. At an explicit START or individual-order action it may request one foreground location reading as evidence of the place where work began. The point is sent securely to Cleanzi and may be available to the employer or an authorised coordinator. Refusing location does not enable background tracking and the app does not use location for advertising.

5. Purposes and recipients

Data is used to authenticate users, record work and cleaning events, provide history, handle missing-STOP proposals, secure the service and provide support. Operational data is available only to the relevant customer organisation and authorised users. Google Cloud and Firebase process data as service providers for hosting, authentication, storage and security. Data may also be disclosed where required by law.

6. Security and retention

Data is encrypted in transit. Cleanzi uses role-based access controls, audit logging and safeguards appropriate to the risk. Account and operational data is retained under the customer agreement, documented customer instructions and applicable law. Security logs are normally retained for up to 12 months and closed support requests for up to 24 months, unless a longer period is required for an incident, legal obligation or claim. Backups expire according to the applicable backup cycle.

7. Requesting deletion

If an employer or another Cleanzi customer supplied the data, contact that organisation first because it is the controller. You may also email kontakt@cleanzi.pl with the subject “Usunięcie danych – aplikacja Cleanzi”. State the organisation/employer, the sign-in identifier and the requested scope. Never send a password. Cleanzi may verify identity and will assist the controller.

A request may cover profile and contact data, account and device identifiers, work-time and presence history, foreground location points, QR events, tasks, checklists, comments, attachments and support records. Data required by law, security, accounting or legal claims may be retained for the applicable period. Employee-record retention is determined by the relevant controller.

8. Rights and contact

Depending on the legal basis, a person may request access, correction, deletion, restriction, portability or object to processing. Questions and requests can be sent to kontakt@cleanzi.pl with “RODO” in the subject. A complaint may be lodged with the President of the Polish Personal Data Protection Office.