This explains what we collect, why, and who touches it. Short version: your work data lives on your phone and travels with your account, so a new phone brings it back; we never sell your data, there are no ads from anyone else here, and every news email we send has a one-click way to stop.
1. Two responsibilities, not one
- CleanerFlow LLC (San Diego, California) is responsible for your account and for the app itself. You are responsible for the information you choose to store about your clients — see section 4 of the Terms. We hold it for you; you decide what goes in.
2. What we collect, and why
- Your account: email and, if you sign in with Google or Apple, the basic profile they return (your name and email and, with Google, your profile photo). The Google photo is used only if you haven't chosen one yet, and only as your picture in the app and on your quotes. A photo you choose always wins, and you can remove it any time in My details. Apple doesn't share a photo. With Apple you can choose to hide your real email — we then receive a private address from Apple that forwards to you. Used to identify you and let you back in. If you sign in with Apple, we also keep a technical code from Apple whose only use is to undo the link with Apple if you delete your account.
- Your details: name, phone and the logo or photo you choose. They go on the quotes you send, so your client sees who is quoting.
- Your work: clients, homes, cleanings, quotes, checklists and supplies. This is the app doing its job. It is kept on your phone and synced to your account automatically, which is what lets you sign in on another phone and find everything there.
- Your acceptance of our rules: which version of the Terms of Use and of this Privacy Policy you accepted, and when. It is our record that you agreed to the rules in force. When they change, the app asks you to read and accept them again.
- Your subscription: when you subscribe on our website, Stripe gives us codes that identify you and your subscription with them, the plan (monthly or yearly), whether it is active, the date the current period ends and whether you asked to cancel. We link this to your account and your email, so the app knows your plan is paid. We also keep a record that you agreed to the automatic renewal: when, and which version of the wording you saw. California law requires us to keep that proof. We never receive your card number.
- Your choice about the weekly tips by email: whether you get them, since when, how (the notice when you created your account, or a yes in the app), and which version of the wording you saw. If you later say stop, we record that too, so you are never added back by mistake.
- Your monthly schedule messages: for each month, which clients you already sent the schedule to, and when — never the text of the message. It keeps a new phone from showing everyone as "not sent", so you do not message the same client twice.
- How the app is used: events like which screen opened or which button was tapped, plus crash reports. They tell us what is broken and what nobody finds. If you get the weekly tips by email (section 5), we may also use them to choose which ones are useful to you — for example, not telling you about a feature you already use. They never leave CleanerFlow for this, are never sold and are never used for ads from anyone else.
- Where the access came from: the country and state your connection reports, your internet provider (the network number, like 7018 — not your name or your plan), and your internet address with the last part removed — 203.0.113.0 instead of the full number. It is enough to tell one network from another and it is not the address of any single person. We use it for two things: CleanerFlow Agenda serves cleaners working in the United States, so new accounts can only be created from there, and this is how we know; and the provider number helps us notice when an access may be going through a service that hides where it really comes from. Once your account is confirmed from the United States, which happens on its own the first time you open the app there, signing in and using it are never blocked: if you travel, everything keeps working. Never sold, never used for advertising.
- How you found the website: on your first visit we keep, at most, the label of the link of ours you used (utm_campaign), the source the link itself reports (utm_source — ChatGPT, for example, adds "chatgpt.com" on its own to the links it cites), only the name of the site you came from (like google.com or chatgpt.com — never the full address and never what you searched for), the page you landed on, and the date. We also record the pages you open and the buttons you tap on the website, with a random visit number kept in your browser. A direct visit, with no clue about where it came from, keeps none of this. It tells us which paths bring people to CleanerFlow Agenda. Never sold, never used for advertising. If a page breaks on your screen, the error report also carries the name and version of your browser and system (like Safari 18 on iPhone), so we can reproduce it.
- Click map of the website's open pages. On the pages anyone can see without signing in to an account (the home page, the blog, pricing, the quote calculator and the other open pages), we record where people click and how far down the page they scroll, so we can tell what is clear and what is confusing. For each click we keep only: the page and its language, where on the page the click landed, what was clicked (a link, a button, an image or text, and which one), the type of screen (phone, tablet or computer), and the date and time. This record does not carry the visit number described above, is not linked to any account, and stores no IP address, no cookie and no identifier on your device. We never record what you type, not even in the calculator, and we do not record your screen or your visit. None of this happens in the app, on the subscription and payment page, on the delete-account page, or on links that arrive by email. If your browser sends the Global Privacy Control signal or a Do Not Track request, we record no clicks at all. We do this ourselves, with no third-party tool, and never for advertising.
- The founding list on our website: if you leave your email there, we keep the email, the language of the page, the date and — if you joined through a group link — that link's label, plus how you found the website (the same clues described above: the link's label, the source it reports, the name of the site you came from and the page you landed on) and the country and state your connection reports. If you get a founding spot, its number and date. We use it to tell you when it is your turn and to keep the founding-spot promise. To stop abuse, we count how many sign-ups come from the same place within an hour using a one-way fingerprint of your internet address, deleted after an hour. We also keep the random visit number from your browser (the same one described above), which links your sign-up to the pages you opened on our website before joining, so we can see which pages helped.
- The blog list, no account needed: if you leave your email on the blog to get the weekly post, we keep the email, the language, the exact text you agreed to, the date and time and your browser's internet address at that moment. First we send an email to confirm: you only join the list when you tap its button. If you don't confirm within 30 days, we delete your email. Once you confirm, you get a welcome email and, every Wednesday, the new post. To learn which posts are useful, we record when an email is opened or a link is tapped, with the internet address cut short at the end and the type of device and browser; this is kept for 12 months and then deleted (only the totals of each send remain). To leave, click the link at the bottom of any email. When you leave, or if you don't confirm within 30 days, we delete your contact along with those records and the internet address, and keep only the email address on a block list, with no end date, so we never write to you again. If you also have an app account with the same email, it is one contact: leaving the blog list also stops the account's weekly tips, and stopping the account's tips also stops the blog post. This list creates no account and asks for nothing but your email.
- The quote calculator on our website: it works without an account, and the numbers you type stay in your browser. If you use a share button, the message goes out from your own email or messaging app — not from us — and we keep an internal record of that share: which app you shared through, the name, email and phone you typed for yourself and for your client, the ZIP code, city and state of the home being quoted, and the quote itself. It tells us the calculator is being used for real, and in which areas. Never sold, never used for advertising, and we never contact your client.
3. The permissions you can say no to
- Notifications: to send your reminders. Say no and the app still works — you just stop being reminded.
- Location: to know you arrived at a cleaning and to order your day’s route. It is read on your device; we do not keep a trail of where you went. If you use "Gas stations", your approximate location is sent once to our server and to Google Places to find the stations, and it is not stored.
- Calendar: read-only, to spot a conflict with something you already had scheduled. We do not write to your calendar and we do not store its contents.
- Photos: the image you pick for your logo or profile picture, and — only if you add one — a photo of a client's front door or building, so you recognise the right address when you arrive. Nothing else is read from your photo library.
- Microphone and speech recognition: only when you tap the microphone to dictate a quote. What you say is turned into text right on your phone, and the text fills in the quote (bedrooms, bathrooms, type of cleaning). The audio is not recorded, not saved and not sent to us, to Apple, to Google or to anyone. If your phone can't do this without the internet, the microphone doesn't show up. The quote you finish is saved like any other quote (see "Your work" in section 2).
4. Who else touches it
- Supabase stores the database and handles sign-in. Vercel hosts this website. Amazon SES sends the emails the app needs (confirmation, password reset) and your subscription emails. Mailmundo, CleanerFlow LLC's own email platform, sends the weekly tips, news and offers — to account holders who haven't asked us to stop (see section 5) and to people who joined the blog list (see section 2). Google Firebase delivers push notifications to your phone. All of them work under contract, only on our instructions, and none of them may sell your data.
- Payments are handled by Stripe, Inc. When you subscribe, you type your card on Stripe's own page, not ours. Stripe receives your card, your email, your billing ZIP code and country, and your internet address and basic browser details. It uses them to charge you and to keep your receipts. Stripe also uses some of this, under its own privacy policy, to stop fraud and to meet the legal duties of a payment company. We do not send Stripe anything from your agenda or about your clients.
- The videos that explain each page of this website are delivered by Bunny.net (BunnyWay d.o.o., a company based in the European Union). When you press play, your browser downloads the video from Bunny's network, so Bunny receives your IP address and basic browser details, as any website does, only to deliver it. We don't send Bunny your name, your email or anything from the app, and the videos have no ads. Bunny counts how many times each video is played; we only see the totals, not who watched. This applies to the website only; the app does not use Bunny.
- To keep robots out, signing in with a password, creating an account and asking for a code by email go through a check by Cloudflare, Inc. (Turnstile), on this website and inside the app. Cloudflare receives your internet address and basic information about your browser or phone, only to tell whether a person is there. We don't use it for ads, and we don't keep anything from that check. Signing in with Google or Apple skips it.
- One thing you should know: to turn an address into map coordinates, the address is sent to Nominatim, the public geocoding service of OpenStreetMap. Only the address text goes — not your name, not your client’s name, not the cleaning. If you would rather not, leave the address field empty; the app still schedules the cleaning.
- Your account and app data are processed in the United States.
5. We do not sell, and there are no ads
- We do not sell or share your personal information for cross-context behavioral advertising, as those terms are defined by California law. There is no ad network, no advertising tracker and no data broker in this app. Since we do not do it, there is nothing for you to opt out of — and we honor browser and device privacy signals should that ever change.
- Weekly tips, news and offers by email. When you have a CleanerFlow Agenda account, you get one email a week with the new post from our blog, news and offers from CleanerFlow Agenda and, now and then, from another CleanerFlow LLC product that fits what you do. To stop, click the link at the bottom of any of these emails (no sign-in needed), or turn it off in Settings. When you unsubscribe, you choose whether to stop just these or every CleanerFlow email. Stopping changes nothing about your account. If you cancel your plan, we ask whether you want to keep getting them. If you delete your account, your contact is removed from our sending. We keep when you joined and left the list, and where, as a record of your choice. Account emails (sign-in, password and security) still arrive, because the service needs them. Accounts created before November 4, 2026 get these emails only if they asked for them. They are sent by Mailmundo, which receives only your email, your name and your language. It notes whether each email arrived, whether you opened it and which links you tapped, plus the internet address with the last part removed, the type of phone or browser and the approximate country and state at that moment. That is only so we know the emails arrive and what is useful to you. Never sold and never used for ads from anyone else. Your clients are never added to this list. Joining the founding list on our website is not creating an account.
6. Your rights
- Wherever you live, we give you the same rights: to know what we have, to get a copy, to correct it, to delete it, and to not be treated differently for asking. Most of it you can do yourself in the app. For the rest, write to privacy@cleanerflowagenda.com and we answer within 45 days.
7. How long we keep it
- While your account exists. When you delete it, there is a 30-day grace window in case you change your mind; after that we erase your personal data from our systems, keeping only what the law requires us to keep. Uninstalling the app removes the copy on the phone, but not the one in your account — for that, delete the account.
- Website visit records (pages, buttons, where the visit came from, and calculator shares) are deleted after 180 days. Clicks and scrolling on the website's open pages are deleted after 90 days; only the daily totals remain, with nothing that points to anyone. The founding list is kept for as long as CleanerFlow Agenda exists, or until you ask us to remove you at privacy@cleanerflowagenda.com; if you create an account and later delete it, your email leaves the list with it. The details of opens and taps on news and offers emails are deleted after 12 months; only overall totals remain, with nothing that points to you. Your yes or no to these emails is kept while your account exists; if you say stop, we keep only your email on a do-not-send list, so you are never emailed again by mistake. Records of your subscription and payments, and the proof that you agreed to the automatic renewal, are kept for 7 years after your subscription ends, because tax and subscription laws require us to keep them, even if you delete your account. The rest of your subscription details leave with your account. Stripe keeps its own records under its own privacy policy.
8. Security, and the honest part
- We use encryption in transit and at rest, hashed passwords and row-level isolation so one account cannot read another. No system is perfectly secure; if an incident affects you, we will tell you and the authorities as the law requires.
9. Age, changes and contact
- The app is for people 18 and older; we do not knowingly collect data from children. We may update this policy — material changes are announced in the app or by email and the date at the top is updated. Questions: privacy@cleanerflowagenda.com. This policy is not legal advice and is subject to attorney review.
Still have a question?
Contact support Talk to us. A real person answers.
Also read