Privacy Policy — CleanSnap

1. Who We Are

CleanSnap is a marketplace platform connecting customers with independent cleaning professionals in the United Kingdom. We operate as an intermediary — we facilitate the connection but do not provide cleaning services directly.

Contact: support@cleansnap.co.uk

2. Data We Collect

We collect the following personal data:

Account information: Name, email, phone number, password (hashed)
Address data: Property addresses for cleaning service delivery
Photos: Room photos uploaded for AI quote generation (stored on AWS S3)
Payment data: Processed securely via Stripe — we never store card numbers
Device data: Push notification tokens for service updates
Cleaner-specific data: National Insurance number (encrypted), bank details (encrypted), DBS certificate, identity documents

3. How We Use Your Data

To create and manage your account
To generate AI-powered cleaning quotes from your photos
To match you with available cleaners in your area
To process payments and manage bookings
To send push notifications about your bookings
To comply with legal and regulatory requirements (HMRC, DAC7)

4. AI Photo Analysis

When you upload room photos, they are analysed by AI services (Google Gemini and OpenAI GPT-4o) to generate accurate cleaning quotes. Photos are:

Transmitted securely via HTTPS
Processed for the sole purpose of quote generation
Stored on AWS S3 with encryption at rest
Deleted upon account deletion request

5. Third-Party Services

We use the following third-party services to operate CleanSnap:

Stripe: Payment processing and cleaner payouts
AWS (S3): Photo and document storage
Google Gemini / OpenAI: AI photo analysis for quotes
Expo: Push notifications
Railway: Application hosting

6. Data Retention

Account data: retained while your account is active
Booking data: retained for 7 years (HMRC requirement)
Photos: retained while your account is active, deleted on account deletion
Financial data: retained for 7 years (legal requirement)

7. Your Rights (UK GDPR)

You have the right to:

Access: Request a copy of all your personal data
Rectification: Correct inaccurate personal data
Erasure: Request deletion of your account and data (30-day cooling period)
Portability: Export your data in a machine-readable format
Objection: Object to processing based on legitimate interests

You can exercise these rights directly in the app via Profile → Data & Privacy, or by contacting us at support@cleansnap.co.uk.

8. Security

We protect your data with:

HTTPS encryption for all data in transit
Encryption at rest for sensitive data (NI numbers, bank details)
JWT-based authentication with refresh token rotation
Rate limiting on all public endpoints
Row-level security — users can only access their own data

9. Children

CleanSnap is not intended for use by anyone under the age of 18. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via push notification or email.

11. Contact

For privacy-related questions or to exercise your rights:

Email: support@cleansnap.co.uk

ICO: If you are not satisfied with our response, you can contact the Information Commissioner's Office at ico.org.uk.