Privacy Policy

This Privacy Policy explains how CleaningsOps ("we", "us", the "Service") collects, uses, shares, retains, and protects personal data in the CleaningsOps iOS and Android mobile application (the "App"). The Service is operated by Gevorg Narinyan, based in Dubai, United Arab Emirates. CleaningsOps is the product and trading name only. This policy applies to the App; it does not describe the public marketing website.

1. Data controller

Gevorg Narinyan, based in Dubai, United Arab Emirates, operates CleaningsOps and acts as the data controller for account and Service operation data, and as a data processor for operational records created by your operating company or client company. For privacy questions, exercise of your rights, or data protection requests, contact support@cleaningsops.com.

2. Data we collect

• Account data: full name, email address, phone number (where provided), role (admin, supervisor, cleaner, client company user), company association, and authentication identifiers and session information managed by Supabase Auth. Accounts are created by an authorised company administrator.
• Company and unit data: operating company and client company profiles, units (holiday homes / apartments) and their attributes including address, access codes, Wi-Fi details, instructions, and notes. This data is provided by admins.
• Operational data: bookings, job assignments, start/finish timestamps, status changes, approvals, linen quantities issued and returned, issues reported, notes, and reports.
• Photos: before/after images uploaded as evidence of cleaning state, stored in private object storage and accessible only to authorised users of the relevant operating company and client company.
• In-app notifications: a record of database-driven in-app notifications shown to you in the App.
• Basic technical information: standard request metadata produced by the App and our service providers, such as timestamps, IP address, and error information used for security and to diagnose problems.

We do not collect precise geolocation, contacts, microphone audio, biometric identifiers, advertising identifiers, health data, or cross-app tracking data. We do not use the App to send SMS or WhatsApp messages, and the App does not register device tokens for native push notifications.

3. How we use data

• To operate the App and provide its core features.
• To authenticate you and enforce role-based access control.
• To enable coordination between admins, supervisors, cleaners, and client companies within their company scope.
• To deliver in-app notifications about jobs, approvals, and status changes.
• To maintain a history of bookings, assignments, completions, approvals, linen movements, and issues for the relevant company.
• To secure the Service and prevent abuse.
• To comply with legal obligations.

4. Legal basis

Where data protection law requires a legal basis, we rely on (a) performance of a contract with your operating company or client company, (b) our legitimate interests in operating the Service securely and reliably, (c) compliance with legal obligations, and (d) your consent where required.

5. Sharing

We do not sell personal data and we do not share personal data for advertising. We share data only with:

• Supabase — our service provider for database, authentication, and private object storage.
• Your operating company or client company, within the boundaries of the role-based access model.
• Apple and Google, to the extent app distribution and standard operating-system services involve them when you install the App from their stores.
• Law enforcement and regulators when legally required.

6. Retention

• Account data is retained while your account is active and is deleted on request as described in Account deletion.
• Operational records (bookings, jobs, photos, linen movements, issues, reports) are retained while the operating company account is active, and afterwards only for the period the operating company or applicable law requires for audit, tax, and legal purposes.
• Basic technical information used for security and diagnostics is retained for a limited period and then deleted or aggregated.

7. Security

Data is transmitted over HTTPS / TLS. Access to operational records is enforced by Row Level Security policies in our database, so users can only read or write rows their role permits. Photos are stored in a private storage bucket that is not publicly listable. Administrative access to production systems is restricted to authorised personnel. No system is perfectly secure; please use a strong unique password and report suspected incidents to support@cleaningsops.com.

8. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, restrict, or delete your personal data, to object to certain processing, to withdraw consent, and to lodge a complaint with a supervisory authority. To exercise these rights contact support@cleaningsops.com. We respond within 30 days.

9. International processing

The Service is operated from the United Arab Emirates and relies on Supabase, whose infrastructure may be located outside your country. Where personal data is transferred internationally we rely on the safeguards offered by that provider under its own data protection terms.

10. Children

The Service is for business use and is not directed to children under 18. We do not knowingly collect data from children.

11. Changes

We may update this policy. Material changes will be announced in-app and the "Last updated" date above will change.

12. Contact

Email support@cleaningsops.com. See also Terms, Support, and Account deletion.