Cleanavo Privacy Policy

Applies to: the Cleanavo app for hosts (on a phone, or in a web browser at cleanavoapp.com/app), the Cleanavo Cleaner app for cleaners, and the Cleanavo cleaning service.
Effective date: 23 September 2026
Last updated: 4 November 2026

This policy also covers our website, cleanavoapp.com. Its marketing pages (the home page, the pricing page, the page for cleaners and our guides) use Cloudflare Web Analytics, which sets no cookies, and Google Analytics, which sets cookies, to count visits and see which pages are read (Section 3.2), and the Google Ads tag and the Meta Pixel to measure and show our advertising (Section 3.2). They contain no forms. Our policy pages, our invitation pages and the host app load none of these. Apart from that, the only information we receive from the website is what any web server receives when it delivers a page (Sections 7.1 and 8.7) and anything you choose to include in an email to us (Section 2). The host app at cleanavoapp.com/app is the app, not the marketing site, and this policy applies to it in the same way as to either app on a phone.

---

1. Who we are

The Cleanavo apps and service are operated by Finavo LLC, doing business as Cleanavo ("Cleanavo," "we," "us," or "our"), a Texas limited liability company. We are responsible for the personal information described in this policy, and under certain US state privacy laws we are the "controller" of that information.

You can contact us about this policy at info@cleanavoapp.com, or by mail at Finavo LLC (dba Cleanavo), 2405 Falmer Court, Cedar Park, TX 78613-1582, USA.

Cleanavo currently operates only in Lubbock, Texas. This policy is written for users in the United States and does not address rights under the GDPR or the UK GDPR. We will update this policy before we begin serving people outside the United States.

2. Who this policy covers

Cleanavo is a two-sided marketplace with two separate apps. This policy covers three groups of people:

1. (a)Hosts, who use the Cleanavo app to list a property, schedule cleanings and pay for them, either on a phone or in a web browser at cleanavoapp.com/app. It is the same app and the same account in both places, and anything you do in one is reflected in the other.
2. (b)Cleaners, who use the Cleanavo Cleaner app to find, claim and perform cleaning jobs and to receive payment. A cleaner can also sign in at cleanavoapp.com/app to change the account password or delete the account, and cannot do anything else there.
3. (c)Other visitors, meaning anyone who visits our website or emails us without an account. We receive what any web server receives when it delivers a page (Sections 7.1 and 8.7) and the contents of any email you send. We use an email only to respond to it and to follow up on its subject, and we keep it for the period stated in Section 8.2.

Hosts and cleaners provide different information, and some information passes between them. This policy therefore describes host data in Section 4, cleaner data in Section 5, and the information shared between hosts and cleaners in Section 6. Sections 7 onward apply to everyone.

If you are both a host and a cleaner, Sections 4 and 5 both apply to you. You have one Cleanavo account, not two.

3. Information we do not collect

We limit what we collect, and the following commitments apply throughout this policy:

1. (a)No analytics in the apps. The apps, including the host app in a web browser, do not use Google Analytics, Firebase Analytics, Amplitude, Mixpanel, Segment, PostHog or any similar tool. Our marketing website uses analytics only as Section 3.2 describes. Notifications you turn on are delivered through Apple's and Google's notification services (Section 7.1), which we use only to deliver them and never to measure what you do.
2. (b)No advertising or attribution tools in the apps. The apps, including the host app in a web browser, do not use AppsFlyer, Adjust, Branch, AdMob, the Meta SDK, the Meta Pixel, Google Ads tags or any similar tool. Our marketing website uses advertising tags only as Section 3.2 describes.
3. (c)No crash reporting. We do not use Sentry, Bugsnag, Crashlytics or any similar tool.
4. (d)No tracking in the apps. The apps do not use the Advertising Identifier (IDFA), we do not fingerprint your device, and the apps do not track you across other companies' apps or websites. Because they do not track you, the apps never display Apple's App Tracking Transparency prompt. The advertising tags on our marketing pages let Google and Meta recognize a visit to those pages (Section 3.2), and you can turn them off.
5. (e)No cookies in the apps, and only essential browser storage. The apps set no cookies, and that includes the host app in a web browser. On a phone, each app stores your sign-in and a small number of settings in its own storage on the device. In a browser, the host app keeps the same things in that browser's local storage for cleanavoapp.com and nowhere else. That information is read only by the app, is not used to follow you elsewhere, and is cleared when you sign out or delete your account (Deletion Policy Section 8). While you are on Stripe's payment page, the app also stores a record of which screen to return you to and, when your bank is confirming a tip, which tip it is. That record is held in the browser tab's session storage, contains no sign-in or card information, and is removed when Stripe returns you to the app or when the tab is closed. The web app loads no third-party scripts. The only external pages it sends you to are Stripe's pages on stripe.com (Section 7.3), where Stripe's own cookies and privacy policy apply. A Street View picture of a property is an image your phone or browser loads from Google (Section 7.1), not a script.
6. (f)No location tracking. We do not track your movements or keep a record of where you have been. The only exception is the arrival check in the cleaner app, which is not tracking and is described in Section 3.1 and Section 5.8.
7. (g)No access to contacts, the microphone or calendars. We do not read your address book. The referral program (Sections 4.1 and 5.1) does not change this: you share an invitation through your own phone's or browser's share sheet, or by sending a code yourself, to people you choose, and we never send messages to anyone on your behalf.
8. (h)No sale of personal information for money. Nothing from the apps or the service is sold or shared for advertising. Visits to our marketing pages are shared with Google and Meta through their advertising tags as Section 3.2 describes, which some state laws call "sharing" or a "sale", and you can opt out of it (Section 10.2(a)).
9. (i)No background checks. See Section 5.7.

3.1 The arrival check

When a cleaner starts a job and when they finish it, the cleaner app reads the cleaner's position twice, once at each tap, to confirm that they are at the property. No position is read between those two moments or while the app is closed, and no coordinates are stored. The check records a single moment rather than a movement, and it never prevents anyone from working. Section 5.8 describes it in full.

Hosts. The Cleanavo app never requests or collects your device's location, on a phone or in a browser. The coordinates on your property record are obtained by geocoding the street address you enter; they do not come from your phone or your browser.

Cleaners. The Cleanavo Cleaner app requests "While Using the App" location permission and nothing broader. It never requests "Always" access, does not use background location, and does not register system geofences, so it cannot read your position while you are not using it.

Not tracking. The arrival check is not cross-app or cross-site tracking and does not trigger an App Tracking Transparency prompt. The position is sent to our own server and compared with one property's coordinates, and only the result of the check is kept (Section 5.8).

Sensitive information under state law. California's privacy law treats the two readings as precise geolocation, a category of sensitive personal information. They are collected in that law's sense when the app sends them, even though we keep no coordinates, and Section 10.2 explains how we handle them. Texas and most other states with comprehensive privacy laws treat a precise position as sensitive data that may be processed only with your consent. The location permission your phone requests is that consent, and Section 5.8 explains that refusing or withdrawing it has no effect on your ability to work.

3.2 Analytics and advertising on our website

The marketing pages of cleanavoapp.com (the home page, the pricing page, the page for cleaners and our guides) use two analytics tools to tell us how many people visit, which pages they read, which site or search sent them, and roughly where they are, by country and region, and, since 2 November 2026, two advertising tags that tell us whether our ads led to a visit or a click on Get started and let Google and Meta show our ads to people who have visited. None of the four runs on our policy pages, our invitation pages or in the host app at cleanavoapp.com/app, and none is in either app on a phone.

1. (a)Cloudflare Web Analytics (Cloudflare, Inc.) counts page views and measures how quickly pages load. It sets no cookies, stores nothing in your browser and does not identify or follow you.
2. (b)Google Analytics (Google LLC) counts visits and the links you click on a page, such as Get started or a Google Play badge. It sets two first-party cookies for cleanavoapp.com, _ga and _ga_ followed by an identifier, each lasting up to two years, so that a second visit from the same browser is counted as a returning visitor. It receives the address of the page, the page you came from, your browser and device type, an approximate location derived from your network address and a random identifier stored in those cookies. Google states that Google Analytics does not log or store network addresses. We do not send Google your name, email address, phone number or anything you type, and the pages have no forms. We have switched off Google Analytics' advertising features (Google signals and ad personalization), so Google Analytics itself is not used to show you ads; the Google Ads tag below is separate. We keep Google Analytics data for no longer than 14 months.
3. (c)The Google Ads tag (Google LLC) records that a visit or a click on Get started or Sign up followed a click on one of our Google ads, and adds visitors to an audience Google can show our ads to on other sites and on Google's own services. It sets a first-party cookie, _gcl_au, lasting 90 days, and Google may read or set its own cookies on Google's domains. It receives the address of the page, the ad click identifier in the link you followed, your browser and device type, your network address and those cookie identifiers.
4. (d)The Meta Pixel (Meta Platforms, Inc.) records a visit and a click on Get started or Sign up, so Meta can tell us whether our Facebook or Instagram ads led to them and show our ads to people who have visited. It sets first-party cookies, _fbp and, if you arrived from a Meta ad, _fbc, each lasting 90 days. It receives the address of the page, the ad click identifier, your browser and device type, your network address and those cookie identifiers, and Meta may link the visit to a Facebook or Instagram account you are signed in to in the same browser. We have switched off its automatic advanced matching and automatic event collection, so it does not read the page for anything else.
5. (e)What we send, and what Google and Meta do with it. We never send Google or Meta your name, email address, phone number or anything you type, and the pages have no forms. Google and Meta use what their tags receive under their own privacy policies (policies.google.com/privacy and facebook.com/privacy/policy), as independent companies and not as our service providers. What we see in our Google Ads and Meta accounts is aggregated, such as how many clicks an ad led to, and does not identify you.
6. (f)Your choices. At cleanavoapp.com/privacy-choices you can turn off the advertising tags, Google Analytics, or both, for your browser. If your browser sends a Global Privacy Control signal, our website loads none of them, and we treat that signal as a request to opt out of the sale and sharing of your personal information. Visitors in the European Economic Area, the United Kingdom and Switzerland get no advertising tags and no Google Analytics cookie. Blocking cookies in your browser also stops the tags from recognizing you and does not stop any page from working. Cloudflare Web Analytics sets nothing that could be switched off.

4. Host data

4.1 Information we collect from hosts

4.2 Information from a host's calendar feed

If you connect a booking calendar's iCal feed, we read only the booking dates and a booking identifier, so that we can schedule a cleaning after a guest checks out. We do not read the description field of calendar entries, and we do not store guest names, guest contact details or any other information about your guests. Your guests are not Cleanavo users, and we do not create records about them.

4.3 What hosts are charged, and the authorization behind it

Cleanavo publishes a base price of $54 for a property of up to three rooms, counting bedrooms and bathrooms, and $18 for each room beyond three; a property with fewer rooms is priced at the three-room base. A 10% service fee is charged to you in addition. Cleaners set their own rate, from the base price up to 1.40 times the base price, and you set the maximum you will pay for each property. You are charged the lower of the two amounts, which is fixed when a cleaner accepts the job. Sales tax of 8.25% is added to the cleaning price and the service fee; no sales tax is charged on tips. Residential cleaning is a taxable service in Texas, and the tax is sourced to Cleanavo's place of business in Cedar Park.

Before we save a card, you must review and accept a billing authorization stating that we will charge the card when you are not present, either when a cleaning is completed or when a cancellation fee becomes due. We record that authorization with its exact text and version, and the record cannot later be edited or deleted, because it is the record of what you agreed to.

Cancellation and no-show charges are described in the Cancellation & Refund Policy.

4.4 Notifications

If you turn notifications on, the app first asks you to choose Minimal or All, then asks your phone for permission. The phone's question is yours to answer: you can say no, and you can change your answer in the phone's settings at any time. You can change between Minimal and All in Settings.

Minimal notifications tell you when a cleaner or Cleanavo support messages you, a cleaning is cancelled, your cleaner hands a job back, your card is declined, your calendar changes, or a booking less than 24 hours away needs scheduling. All adds when a cleaner is found for a cleaning, another cleaner covers a job, a cleaning starts or finishes, an unscheduled cleaning is 72 hours away, and when you can refer a friend. We send no notification for marketing or promotion.

Each notification names the property and the date, or the person who wrote to you. It never contains the text of a message, an address or a door code, because a notification passes through the services in Section 7.1 and can appear on a locked screen. Notifications may be late or may not arrive, and the app shows the same information. The host app in a web browser sends none.

5. Cleaner data

5.1 Information we collect from cleaners

5.2 Cleaners' access to hosts' homes

Cleaners are given access to private homes, and we limit that access as follows.

When you claim a job, you are given the street address of a private home. When you check in for the visit, you are given the entry instructions and door or access code. The home may be unoccupied when you enter.

The system limits this access by design:

1. (a)You cannot see the street address of a job you have not claimed. Open jobs show only the city, the state and a description of the work.
2. (b)Your access to the street address ends automatically when the job is no longer active, meaning when it is completed, canceled or skipped.
3. (c)You can access the door code only while the job is in progress. You cannot read it before check-in or after check-out.
4. (d)Ninety days after a job is completed, the system no longer displays the other party's name to you.

You must keep everything you learn about a host's home confidential. That is a contractual obligation under the Cleaner Terms and Independent Contractor Agreement, and misusing that information may result in the closure of your account and legal liability.

5.3 Photographs taken inside a home

You photograph the rooms before and after each job. These photographs show the inside of a private home and may capture the occupants' possessions, documents and, occasionally, people.

1. (a)Location metadata (EXIF) is removed when the photograph is taken, so the photographs do not contain coordinates.
2. (b)Both you and the host can see the photographs.
3. (c)The photographs are deleted 90 days after the job is completed, or 90 days after its scheduled date if it did not take place.
4. (d)Photograph only what the job requires. Do not photograph people, documents, screens or valuables beyond what is needed to show the condition of the room.

5.4 Payouts, and the information Stripe collects

We pay cleaners through Stripe Connect. To receive payments, you set up a Stripe Express account on Stripe's own hosted pages. Stripe, not Cleanavo, collects and holds the information US law requires in order to pay you and report your earnings: your legal name, date of birth, address, taxpayer identification number, bank account details and, in some cases, a government identity document.

We never receive that information. We hold only your Stripe account identifier, whether Stripe has enabled payouts for you, and, for each bank account or debit card you add on Stripe's pages, the bank's name or the card's brand and its last four digits, which the app shows you so you can choose where a payout goes, and which we record on each payout. We never receive a full account or card number. Stripe's handling of your information is governed by Stripe's privacy policy and by the Stripe Connected Account Agreement, which you accept directly with Stripe during onboarding.

There are two limited exceptions. First, Stripe provides us with the name on your identity document, which we use once to compare with the name on your account and do not store (see Section 5.7). Second, Stripe provides the name and address we need to file your Form 1099-NEC, as described below. All other information listed above, including your date of birth, your taxpayer identification number, your bank details and the identity document itself, remains with Stripe.

Cleanavo is the merchant of record for the host's payment. We charge the host and then transfer your share to your Stripe account. You receive the full cleaning fee. Our 10% service fee is charged to the host in addition to the cleaning fee and is not deducted from your pay.

Tax reporting. Because Cleanavo sets the price of every cleaning, Cleanavo, not Stripe, is responsible for filing your Form 1099-NEC. We file the form, and send you a copy, if your earnings for the year reach the reporting threshold ($2,000 for 2026).

To do this, Stripe collects your Form W-9 information, including your taxpayer identification number, on Stripe's own pages during payout setup, and provides us with only the information we need to file: your name, your address and the total we paid you. Your Social Security number or other taxpayer identification number is never sent to Cleanavo's systems.

5.5 How your supplies information is used

We compare the cleaning supplies you have told us you have with the supplies a job's checklist requires, and show you any difference on the job listing (for example, "This job requires a mop, which is not in your kit").

This comparison affects only the information shown to you. It does not filter the jobs you can see, and it does not prevent you from claiming any job. The only thing that decides which open cleanings you are shown is the cleaning area you choose (Section 5.1): you see every open cleaning in that city, and it is your decision whether you are equipped for a job.

5.6 Reliability, recorded breaches and ending the agreement

We measure and store:

1. (a)your completion rate, which is calculated once you have completed at least five jobs;
2. (b)your punctuality, which is measured by the system from your check-in time rather than reported by anyone; and
3. (c)recorded breaches of your service agreement, which are recorded when you release a job at or after its start time, fail to arrive, or start a job and do not finish it, and, when a member of Cleanavo's staff finds that a report about your conduct or the quality of your work is well founded, by that person. You can see each breach recorded against you, including the note written about it; the note never says who made a report.

Repeated breaches may lead us to end the agreement and close your account. That decision is made by a person who reviews the record, not automatically by software. You can request a copy of your record by emailing info@cleanavoapp.com.

Breach records expire. Only breaches in the last 12 months are considered for that decision, and each breach record is deleted after 24 months. The only exception is that, if we end your agreement, we keep the record on which the decision was based for 4 years after the agreement ends (see Section 8.2).

5.7 Identity checks and background checks

This section explains what we use to identify cleaners and what we do not check.

We do not perform criminal background checks or reference checks on cleaners. We state this in the Privacy Policy as well as in the Terms because users may reasonably assume otherwise about a service that sends a person into a home, and because it means that we do not collect, or ask you to authorize us to collect, any consumer report or background-check information.

If that changes, we will obtain your written authorization and provide the standalone disclosure required by the Fair Credit Reporting Act before any check is run, and we will update this policy first.

Cleanavo checks every cleaner's identity with Stripe before they can see or take work. You photograph a government identity document and take a selfie on Stripe's own pages, and Stripe compares the two and tells us only whether the check passed and when. The app asks for it once your Stripe payout setup is complete.

A cleaner is also identified by a confirmed phone number, a review of the application by a person, and the identity and taxpayer information that Stripe collects during payout onboarding. A cleaner who cannot complete Stripe's onboarding is not paid and is not shown any work.

We never receive the identity document, its number, the photographs or your date of birth. None of this information passes through Cleanavo's systems, and we do not hold a copy of any of it. We store only whether the check passed and the date.

Name comparison. Stripe provides us with the name on the document. We use it once, for one purpose: to compare it with the name on your Cleanavo account, which is the name a host sees before someone comes to their home. We do not store the name from your document. We keep only the result of the comparison: whether the names matched, partly matched or did not match. If you later change the name on your account, the result is marked as out of date and reviewed by a person.

A name difference does not prevent you from working. Nicknames, middle names, married and former names, compound surnames and accents that are missing from a keyboard can all make two correct names appear different. The comparison only brings unusual cases to a person's attention. You are prevented from taking work only if you have not completed the check, never because of the result of the name comparison.

The identity check is not a background check. It confirms that a real person holds a genuine identity document that matches their face. It provides no information about criminal history, driving record, employment or references, and neither we nor anyone else may describe it as if it did.

It is also how the 18+ requirement is enforced for cleaners. Stripe does not verify anyone under the age of majority, so a cleaner who passes the check is an adult. Stripe does not tell us your age, and we do not ask for it. We are not given, and do not hold, your date of birth (see Section 9).

The 18+ rule also rests on the confirmation given at sign-up, described in Section 9, and on your app store's age category where the store provides one.

5.8 The arrival check

When you start a job and when you finish it, the Cleanavo Cleaner app checks whether your phone is at the property. This is the only time the service reads a person's location, and this section describes the check in full.

When we read your position. Twice per job: at check-in and at check-out. Each reading is triggered by your tap on a button, while the app is open on your screen. There are no other readings.

When we do not read your position. We do not read your position between those two moments, before you arrive, after you leave, between jobs, or at any time while the app is closed or running in the background. The app requests "While Using the App" access only and is built without background location or system geofencing, so it cannot read your position when you are not using it. If we do not have a map location for a property, we do not read your position at all, and the app does not request it.

What we keep. Your position is compared with the property's coordinates and not stored. No database field holds a cleaner's coordinates, and there is no history of your locations. The cleaning record stores only the result of the check (that you were at the property, that you were not, or that no position was available) and, if you indicated that the check was wrong, which of four reasons you selected. The distance is recorded only as a band (nearby, elsewhere in town, or a different area) rather than as a measurement, because an exact distance from a known address would itself reveal an approximate location.

The check never prevents you from working. If the check indicates that you are not at the property, the app tells you and offers two options: Got it, if you tapped early and are still on your way, or I'm here anyway, which asks you to select a reason and then starts the job. Every reason starts the job. The result does not affect your standing, your pay, your completion rate or the jobs you are shown, and it is not a breach of your agreement. Cleaner Terms Section 6.2 contains the same commitment.

If you decline the permission. The decision is yours and has no consequences. The check has nothing to compare, the job starts as normal, and the record shows "no position", which describes the reading and says nothing about you.

Consent. The location permission prompt is your consent within the meaning of state privacy laws. It asks for one specific permission, it is given separately from your acceptance of these terms, and it is freely given because declining it has no consequences. Before you respond, you are told what you are agreeing to: the two readings, their purpose, that your position is not stored, and that you can still work if you decline. On an iPhone, that explanation appears in the system prompt. Android's prompt has no space for it, so on Android the app first displays the same explanation in a notice that also offers Not now; if you choose Not now, your phone does not ask for the permission, the check records "no position", and the job starts. You can withdraw the permission at any time in your phone's settings: on an iPhone, Settings → Cleanavo Cleaner → Location → Never; on Android, Settings → Apps → Cleanavo Cleaner → Permissions → Location. Withdrawing the permission has the same effect as declining it: the check records "no position" and the job starts.

What the host sees. The host sees that you checked in and when. The host does not see where you were, your coordinates or whether the check passed. The system is designed so that the result is never shown to a host.

Accuracy. Consumer GPS is often inaccurate by tens of meters, so the check is satisfied anywhere within approximately 200 meters of the property. That allows for a phone under tree cover or a cleaner who taps finish from their car.

Purpose. A host is allowing someone into their home while they are away, and the check allows the service to confirm that the visit took place at the property. The check also helps us correct addresses that have been placed incorrectly on the map: cleaners sent to such an address are the only people who can report the error, and the list of reasons allows them to do so.

Limitations. The check is not a fraud control, and we do not describe it as one. A person who is determined to mislead the app can do so, and preventing that would require the kind of location tracking this section says we do not perform.

5.9 Checking a job before it is paid

When a cleaner completes a job, the service compares two times our server records, when the cleaner checked in and when they checked out, with the same two times on the cleaner's other jobs. If the visit was shorter than 30 minutes, or overlapped another visit by the same cleaner, the pay for that job is not sent until a person at Cleanavo has checked the job's record and photographs, for up to 7 days (Cleaner Terms Section 5.2). No location is used, and the arrival check (Section 5.8) plays no part.

We keep a record of each check: which job, why it was started, when, and what the person decided and wrote. It is part of the cleaning record and is kept for as long as that record (Section 8.2). Only Cleanavo's staff can see it. The cleaner can see in the app that a job's pay is being checked and by when it will be sent; the host is never told.

This is not profiling that produces a legal or similarly significant effect (Section 10.3). The automatic part only delays a payment, and pays it automatically when the period ends. A decision not to pay is always made by a person, who tells the cleaner why, and it can be appealed under Community Guidelines Section 13.

5.10 Notifications

If you turn notifications on, the app asks your phone for permission. On an Android phone it first explains what it will send; on an iPhone the only question is the phone's own. You can say no, and you can change your answer in the phone's settings at any time.

We notify you about the work you have taken and the money you are owed: a reminder 24 hours and 1 hour before a cleaning and when it is time to start; a warning before a cleaning that has not been started, or not finished, is cancelled automatically; when a cleaning is cancelled, or another cleaner accepts your cover; a tip, and a payment held for review (Section 5.9); a message from a host or from Cleanavo support; when your application is approved; when you can refer a cleaner; and when a breach of your service agreement is recorded (Section 5.6). We send no notification for marketing or promotion.

Each notification names the property and the date, or the person who wrote to you, and an amount if you were tipped. It never contains the text of a message, an address or a door code, because a notification passes through the services in Section 7.1 and can appear on a locked screen. Notifications may be late or may not arrive, and the app shows the same information. They do not change your responsibility for starting and finishing a cleaning on time (Cleaner Terms).

6. Information shared between hosts and cleaners

Other users see only a cleaner's average rating. A rating consists of stars only (an overall score and up to three category scores), with nothing written. A host choosing a cleaner sees the cleaner's published rating, shown as stars and calculated from all the ratings the cleaner has received, and the number of cleanings the cleaner has completed. Hosts do not see a breakdown by category, any individual rating, or any information about who gave a rating, including the host's name, the property, the cleaning or the date. An individual rating can be viewed only by the host who gave it and the cleaner it concerns.

7. How we share your information

7.1 Service providers

We use a small number of service providers. Each acts on our behalf and may use your information only to provide its services to us, except where a row below says that it acts under its own privacy policy.

7.2 Other disclosures

We do not share personal information with anyone else, except:

1. (a)when you direct us to do so;
2. (b)when we are legally required to do so, in response to a valid subpoena, court order or other lawful request;
3. (c)when we reasonably believe disclosure is necessary to protect the rights, property or safety of a Cleanavo user or another person;
4. (d)when you visit one of our marketing pages, through the Google Ads tag and the Meta Pixel described in Section 3.2, to Google LLC and Meta Platforms, Inc., which use it as independent companies under their own policies, unless you have opted out; or
5. (e)if Finavo LLC is involved in a merger, acquisition or sale of assets, in which case information may be transferred as part of that transaction and this policy will continue to apply until it is replaced by a policy you are notified of.

7.3 Card details

Your card number is never sent to Cleanavo's systems. Cards are entered on Stripe's own checkout page. On a phone, that page opens in a separate browser window; in the host app in a browser, the tab goes to stripe.com and returns when you have finished. We receive a token, the card brand, the last four digits and Stripe's identifier for the card, which we keep only as a one-way fingerprint (Section 4.1). Because we do not hold your card number, we cannot disclose it.

8. Data retention

We do not keep any information indefinitely. Each category below has a maximum retention period, enforced by an automated process that runs nightly, and each period reflects how long we need the information, plus a stated margin.

Where the law sets a retention period, we use that period and identify the law. Where no law sets one, we explain the period we chose.

8.1 Information deleted while you are still using the service

Why 90 days. A host has 24 hours to raise a quality claim, which is the only routine reason to review a job after it is completed. Ninety days allows a substantial margin beyond that period. Where a longer period is needed, the retention period is not extended; instead, the records are placed on hold, as described in Section 8.3.

8.2 Information kept for longer periods

8.3 Holds on contested records

If a report is made about a cleaning, or a card dispute is raised against its charge, the records of that cleaning are placed on hold (its photographs, chat, checklist and arrival checks), even if the 90-day retention period would otherwise have ended. When the report is resolved or the dispute is closed, the normal retention period applies again and the records are deleted by the next nightly process.

Reason for the hold. A report or a dispute means that something about the job is contested. Deleting the evidence while the matter is open would destroy the only record available to either party, including evidence that could clear the person who was reported. A cardholder has up to 120 days to dispute a charge, which is longer than 90 days; we address that by holding the contested job rather than by keeping the photographs of every other home for longer.

Scope of the hold. The hold applies to a report about the cleaning, one of its photographs or a message in its thread, and to a dispute raised against the payment for that cleaning or a tip on it. A report about a person, or about a property in general, does not place any cleaning's records on hold.

Records of both parties. A hold may result in information being kept because of another person's action. If a cleaner reports a job, the host's photographs of that job are also held, and vice versa, because a record that contains only one side of a conversation is not useful.

Limit on holds after a deletion request. A hold has no fixed end date while the matter is open, but it cannot delay a deletion request indefinitely. Keeping records beyond 90 days while a matter is open is a retention decision, and it lasts as long as the matter. Responding to a request to delete your account is not a retention decision, and we apply a maximum of 180 days (see Section 8.5). If you have closed your account and a matter concerning one of your cleanings is still open six months later, the text of your messages is deleted regardless.

8.4 Chat messages

A cleaning's chat thread is deleted 90 days after the job ends, on the same schedule as the photographs. The entire thread is deleted, including both parties' messages. The exception is a cleaning that has been reported or disputed, which is held until the matter is resolved (Section 8.3).

Please note the following:

1. (a)Messages cannot be edited or recalled. Once sent, a message remains until the thread expires or you close your account, whichever happens first.
2. (b)Until then, the other party can read every message you sent them. A message cannot be withdrawn from an active conversation.
3. (c)If this cleaning is reported, the 90-day period is suspended until we have resolved the report. See Section 8.3.

8.5 Deletion of your messages when you close your account

When you delete your account, the text of every message you sent is deleted immediately, rather than at the end of the 90-day period. The other party sees that a message was sent, but not its content. Your name has already been removed from the message, and the link between you and the message is also deleted, so nothing remaining in the thread is connected to you.

We do not delete the messages the other person sent you. Those messages were written by the other person, and they are also that person's record of what was agreed about their home. Deleting them would remove information belonging to someone who has not requested its deletion. The California and Texas privacy statutes both expressly recognize this limit. California provides an exception for information needed to "ensure the right of another consumer to exercise that consumer's right of free speech", and the Texas statute provides that it "may not be construed as imposing a requirement … that adversely affects the rights or freedoms of any person, including the right of free speech." Accordingly, the messages you wrote are deleted, and the messages you received remain until the entire thread expires at 90 days.

Exception for open matters. If a report or a card dispute concerning that cleaning is open (Section 8.3), deleting the messages would destroy evidence on which someone is relying, including evidence that could clear the person who was reported. In that case, the messages are deleted when the matter closes, and in any event within 180 days of your deletion request, whether or not the matter has closed. We do not hold messages indefinitely on the basis that a matter remains open: 180 days is longer than the 120-day period card networks allow for disputes, and considerably longer than the time we commit to for reviewing a report. All other parts of the deletion, including your name, your sign-in, your cards and your messages on every other cleaning, take place immediately.

We do not attempt to identify the sender of a deleted message. What remains is a timestamp and whether the sender was the host or the cleaner. We will keep it that way and will not attempt to link it to you.

8.6 Messages to support

Get help → Chat with support in either app is a conversation with Cleanavo, and it is kept separately from your cleaning threads: each app has one conversation, which is visible only to you and to Cleanavo. It is not screened by the filter described in Community Guidelines Section 11, because it is where you tell us what another person said to you, and a filter could prevent you from quoting it.

When you send a message, a copy is emailed to our support inbox so that a person sees it. The reply time stated in Community Guidelines Section 9 depends on this. The email is sent through the provider named in Section 7.1 and only to us. The copy is an email and is kept for the email retention period in Section 8.2.

When we reply, the reply appears in the app and, if you have turned notifications on, we notify your phone (Sections 4.4 and 5.10). The notification says that Cleanavo support replied and nothing of what the reply says.

The conversation is deleted 24 months after its last message, and deleted entirely, rather than retained in part, when you close your account. A cleaning thread is retained in part because the other party's messages belong to them (Section 8.5). Here, the other party is Cleanavo, and we keep none of it. If something in a support conversation requires a longer record, such as a report, an unpaid balance or a breach of a cleaner's agreement, that record is created separately and follows its own retention period in Section 8.2.

8.7 Server logs

Our systems create operational logs, as does the platform that hosts them. These logs contain some personal information, as described below.

What our own code records is identifiers and outcomes: the identifier of an account, a cleaning, a calendar link, a payment, a payout or a verification session; a status; and the error code and message a provider returns when something fails. It does not record your name, phone number, email address, street address, door code, the text of your messages, the name you gave a calendar link, or any part of a card number or its brand. This rule is enforced by an automated check that reviews every logging statement in our code.

What the hosting platform records automatically, for every request, is what any web server records: the network address the request came from, the approximate location and time zone derived from that address, the device's browser or app identifier, the address of the request (which identifies tables and record identifiers, but not their contents), and the request's status and timing. We do not create these records and cannot disable them.

When you use the host app in a browser, the files that make up the app are delivered by Cloudflare (Section 7.1), and Cloudflare's request logs record the same kinds of information for each page load: the network address, the approximate location derived from it, the browser, the address of the page, and the request's status and timing. Your activity in the app is sent to the hosting platform described above, not to Cloudflare.

Logs are kept for no more than 7 days. The exact period is set by our providers' plans, and on our current plans it is within that limit. If we ever need to keep operational logs for longer than seven days, we will update this section first.

8.8 Scope of these retention periods

The retention periods in this Section 8 are maximum periods. Deletion runs once a night, so information may remain for a few hours after its retention period ends. The retention periods in this Section 8 are ours; the providers listed in Section 7.1 keep their own records under their own policies, which we do not control.

Only the following three categories of information have no fixed retention period:

1. (a)A block you have placed on another user. Deleting a block would remove it without your consent. It remains while both accounts exist and is deleted when either account is closed.
2. (b)An open safety report or an open card dispute. These are closed when they are resolved; an open report is a matter awaiting our action, not a retention decision.
3. (c)A balance you still owe. It is written off after 30 days, but the record remains until the balance is paid or for five years, whichever is earlier.

8.9 Final deletion of your account

When you close your account, your name is no longer displayed immediately (Section 11). The records that remain are those on which other people's records depend: a cleaning a host needs to see, a payment we are required to keep, or a rating that forms part of a cleaner's record.

Those records expire under the retention periods above, and when the last of them has been deleted, the remaining account record is deleted as well, leaving no name, placeholder or database row. For an account with no unpaid balance and no recent activity, that takes a few months. For an account with a completed and paid cleaning, it takes the five years for which that record is kept.

8.10 Backups

We do not take database backups. Our hosting provider (Supabase, Section 7.1) backs up projects on its paid plans; this project is on the Free plan, which does not include backups, daily or point-in-time. We have confirmed this: on 10 September 2026, the provider's API reported that no backups exist and that point-in-time recovery is disabled for this project.

As a result, a deletion does not have to wait for a backup cycle to complete before it takes full effect.

Limitations. Supabase operates its own infrastructure, and we do not control or have knowledge of what a hosting provider retains within its own systems for its own resilience. Section 7.1 describes what our providers do with their own records. In addition, this statement describes our current plan and is not a commitment about every plan we may use in the future: if we move to a plan that includes backups, that plan's retention period will apply, and we will update this section and Deletion Policy Section 11 before the change takes effect.

9. Age requirement

You must be 18 or older to use Cleanavo. The service is not directed to children, and we do not knowingly collect personal information from anyone under 18.

Hosts and cleaners confirm at sign-up that they are 18 or older, and we record the date of the confirmation. Our systems enforce this requirement: an account that has not provided the confirmation cannot be given a host or cleaner role.

We do not collect your date of birth. We ask you to confirm that you are an adult, but we do not ask you to prove it, and we do not hold a date of birth.

App store age signals. Each time either app opens on a phone, it asks the App Store or Google Play for the age category the store holds for the account on the phone, where a state law requires the store to provide one (Texas, from 2026, and other states as their laws take effect) or where you or a parent have chosen to share it. If the store indicates that the account belongs to someone under 18, the app will not open: it signs you out and displays a message explaining why. The app uses the store's response only for this decision. It does not send the response to us or store it, and we never learn what the store reported. If the store provides no category, or indicates that you are an adult, the app opens normally. Where a store provides no category, your confirmation at sign-up is the only age check. If the store's category is incorrect, it can be corrected through the age on your Apple Account or Google Account, and the app will check again the next time it opens.

In a browser there is no app store to ask. The host app at cleanavoapp.com/app does not read an age category, because a web browser does not provide one, and for a host who signs in there, the confirmation at sign-up is the only age check, as on a phone whose store provides no category. The cleaner app is not available in a browser: a cleaner who signs in there can access only the Sign-in & security page and cannot view or accept work.

For cleaners, Stripe, not Cleanavo, collects a date of birth on its own pages, as part of the information required to pay you and report your earnings and as part of the identity check described in Section 5.7. That information is never sent to us. See Sections 5.4 and 5.7.

In summary, for cleaners, the 18+ rule rests on the confirmation given at sign-up, on your app store's age category where the store provides one, and on the identity check in Section 5.7, which you complete before any work is shown to you. Stripe does not verify anyone under the age of majority, so a cleaner who passes it is an adult. We are told that the check passed. We are not told an age.

If you believe that someone under 18 has provided us with personal information, email info@cleanavoapp.com and we will delete it.

10. Your privacy rights

10.1 Rights available to all users

Wherever you live, you can ask us to:

1. (a)tell you what personal information we hold about you and how we use it;
2. (b)provide a copy of it in a portable format;
3. (c)correct it if it is inaccurate; and
4. (d)delete it (see Section 11 and the separate Account & Data Deletion Policy).

To make a request, email info@cleanavoapp.com. We will respond within 45 days and will let you know if we need up to 45 additional days. We verify requests by confirming that they come from the phone number or email address on the account. If we cannot verify your identity, we will tell you, and we will not disclose your information. We will not discriminate against you for exercising any of these rights.

10.2 California residents (CCPA/CPRA)

If you are a California resident, you have the rights described above, as well as the right to know the categories of personal information we collect, the sources of that information, the business purposes for which we use it and the categories of third parties to which we disclose it (all set out in Sections 4 through 8), and the right to limit the use of sensitive personal information. We provide these rights whether or not we meet the CCPA's thresholds in a given year.

1. (a)Sale and sharing. We do not sell personal information for money, and nothing from the apps or the service is sold or shared for advertising. Since 2 November 2026, the Google Ads tag and the Meta Pixel on our marketing pages send visit information to Google and Meta (Section 3.2), which California law treats as "sharing" for cross-context behavioral advertising and may treat as a "sale". To opt out, use "Do Not Sell or Share My Personal Information" at cleanavoapp.com/privacy-choices, linked as Your privacy choices at the foot of every page of our website, or send a Global Privacy Control signal, which we honor automatically. Before 2 November 2026 we did not sell or share personal information for advertising.
2. (b)Sensitive personal information. Of the categories California defines as sensitive, we collect two: your account credentials and, if you are a cleaner, your precise geolocation, twice per job, at check-in and at check-out (Section 5.8). A cleaner's date of birth, taxpayer identification number and identity documents are collected by Stripe, not by us, and are never sent to us (Sections 5.4 and 9). We use and disclose sensitive personal information only for the purposes that California's regulations permit without a right to limit, namely to provide the service you requested and to keep your account secure (11 C.C.R. §7027(m)(1)–(2)), and we do not collect or process it to infer characteristics about you. For that reason, and because this policy states it, we do not provide a "Limit the Use of My Sensitive Personal Information" link (11 C.C.R. §7014(g)). In particular, a cleaner's position is compared with one property's coordinates and then discarded; it is not used for any other purpose, and only the result of the check is kept (Section 5.8).
3. (c)Retention. The retention period for each category is set out in Section 8, together with the reason for each period. We do not keep any information longer than is reasonably necessary for the purpose for which it was collected, and we do not keep any information indefinitely.
4. (d)Authorized agents. You may designate an authorized agent to make a request on your behalf.

Categories collected in the last 12 months (using the CCPA's categories): identifiers; personal information described in Cal. Civ. Code §1798.80; commercial information; internet or other electronic network activity, limited to server logs and, on our marketing pages, the website analytics and advertising tags described in Section 3.2; geolocation data, meaning the property address a host provides and a cleaner's position at check-in and check-out, which is compared and not retained (Section 5.8); visual information (photographs); professional information (a cleaner's supplies, chosen cleaning area and work history); and sensitive personal information as described above. We do not collect biometric information, education information or inferences drawn to create a profile. When you use a passkey, the Face ID or fingerprint check takes place on your own device, and no information from it is sent to us.

10.3 Texas residents (TDPSA)

Cleanavo operates in Texas, and most of our users are Texas residents. Under the Texas Data Privacy and Security Act, you have the rights described in Section 10.1, as well as the right to opt out of targeted advertising, the sale of personal data and profiling that produces legal or similarly significant effects. The advertising tags on our marketing pages are targeted advertising under the Act (Section 3.2), and you can opt out of them at cleanavoapp.com/privacy-choices or with a Global Privacy Control signal. We do not sell personal data for money or engage in that kind of profiling. If we deny your request, you may appeal by replying to our decision, and if we deny your appeal, you may submit a complaint to the Texas Attorney General.

Texas treats a precise position as sensitive data, which may be processed only with your consent (Tex. Bus. & Com. Code §541.101(b)(4)). For cleaners, the location permission your phone requests is that consent; Section 5.8 explains how to decline or withdraw it and that doing so has no consequences. We comply with the Act whether or not its small-business exemption applies to us in a given year.

10.4 Residents of other states

Residents of Colorado, Connecticut, Virginia, Utah, Oregon, Montana, Delaware, New Jersey and other states with comprehensive privacy laws have similar rights, including the rights of access, correction, deletion and portability and the right to opt out of sale, targeted advertising and certain profiling. We provide the rights described in Section 10.1 to all users, wherever they live. The opt-out of targeted advertising and sale described in Sections 3.2 and 10.2(a) is available to everyone. If your state provides a right to appeal, that right is available to you. If your state treats a precise position as sensitive data, the consent described in Section 5.8 is the consent your state's law requires.

11. Deleting your account

You can delete your account in either app: More → Sign-in & security → Delete my account. A host can also delete the account from the same place in the host app in a browser, at cleanavoapp.com/app, without a phone. A cleaner can do the same: signing in at that address opens a cleaner account on its Sign-in & security page, which contains the same button. If you no longer have the app, email info@cleanavoapp.com from the email address on your account and we will delete the account for you. Deletion Policy Section 1 describes that process and what to expect.

Deletion applies to your entire account, including both the host and cleaner roles if you hold both, and we do not refuse deletion requests. If you have cleanings scheduled close enough to their start time that a cancellation fee applies, you are shown exactly which cleanings will be canceled and the fees before you confirm.

The Account & Data Deletion Policy, which forms part of this policy, sets out exactly what is deleted, what is kept and why. In summary: your name, phone number, email address and saved cards are deleted; your Stripe customer record is deleted; your property photographs are deleted; stored door codes are deleted; the text of every message you sent is deleted, together with the link between you and those messages (see Section 8.5 for the one case in which this is delayed, and its maximum period); messages the other party sent you remain until the thread expires after 90 days, because they were written by that person; and your ratings and the financial records of jobs performed and payments made are kept with your identity removed.

12. Security

We protect your information as follows:

1. (a)All data is transmitted over encrypted connections, and our database and file storage are encrypted at rest by our hosting provider. On a phone, the sign-in session the app keeps is encrypted too, with its key held in the phone's own secure storage (the Keychain on an iPhone, the Keystore on an Android phone).
2. (b)Access to your data is enforced in the database by row-level security rules tied to your account, not only by application code.
3. (c)Passwords are stored only as hashes. Signing in with a password always takes a one-time code as well, sent to your phone or to your confirmed email address, and our systems refuse a sign-in made with the password alone or with the code alone. Changing your password, email address or phone number requires a sign-in of that kind, or with a passkey, within the previous ten minutes (the one exception is the link in your welcome email, which can confirm only the address you signed up with and works once, for 14 days), and resetting a forgotten password requires a code sent to your confirmed email address and a code sent to your phone. Deleting your account asks you to confirm it is you again, in the same way, so that nobody who picks up your unlocked phone can delete it. To stop anyone guessing passwords, we keep a record of each password check for one day: a one-way fingerprint of your account (or, where there is no such account, of the phone number or email address entered) and of the network address it came from, and whether the password was right. For the same reason, and for the same day, we count how often one network address asks to reset a password or searches for a city while signing up, and how often one account searches for an address, as one-way fingerprints, so that none of these can be used to send a flood of email or to run up lookup costs. You can sign in with a passkey instead, using Face ID, a fingerprint or your screen lock, without typing anything. A passkey cannot be phished or reused on another site, and your face or fingerprint never leaves your device. We send an email to your confirmed address whenever a passkey is added to or removed from your account. Cleaners set up a passkey when joining, on a phone that can hold one.
4. (d)Card numbers are never sent to us.
5. (e)In a browser, you remain signed in on that browser. cleanavoapp.com/app (the host app, or a cleaner's Sign-in & security page) keeps you signed in until you sign out, as the phone app does. If you use a shared computer, sign out when you finish.

No system is completely secure. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by law.

13. Changes to this policy

If we change this policy, we will post the new version and update the "Last updated" date at the top. If we begin collecting or using information in a materially different way (for example, by adding analytics, setting cookies or loading third-party scripts in the web app, adding advertising tags to our website, collecting location beyond the two readings described in Section 5.8, beginning to run background checks, or keeping or sending the app store age category that Section 9 says is read and discarded), we will update this policy and notify you before the change takes effect.

14. Contact us

For questions, requests or complaints, contact Finavo LLC (dba Cleanavo), 2405 Falmer Court, Cedar Park, TX 78613-1582, USA, info@cleanavoapp.com.