Privacy Policy
Last updated: May 2026
1. Who we are
CleanLog is a bathroom facility management service operated by Fimula (the "Provider"). We process personal data on behalf of our customers ("Facility Managers") who use CleanLog to manage cleaning operations.
2. What data we collect
When you use CleanLog, we may collect:
- Account data — name, email address, password hash, language preference.
- Facility data — location names and addresses, bathroom identifiers, cleaning schedules.
- Cleaning log data — timestamp, duration, checklist results, GPS coordinates of check-ins, photos attached to cleaning logs.
- Usage data — IP address, browser type, pages visited (via server access logs, deleted after 30 days).
3. Why we collect it
We process this data under the following legal bases (Art. 6 GDPR):
- Contract performance — to provide the CleanLog service to our customers.
- Legitimate interest — error monitoring (self-hosted GlitchTip), service improvement, security.
- Consent — cookie preferences (see Section 7).
4. GPS and photo data
Cleaning logs may include GPS coordinates and photos. GPS data verifies that cleaning staff were on-site. Photos document bathroom conditions. Both are visible to the Facility Manager who operates the location. Photos are stored on AWS S3 (EU region). GPS coordinates are scrubbed from error reports before transmission to our monitoring service.
5. Data sharing
We share data with:
- Paddle — our Merchant of Record for subscription payments. Paddle processes payment data under their own privacy policy.
- Hetzner — our hosting provider (Germany). All application data resides on Hetzner infrastructure.
- AWS S3 — photo storage (EU region, encrypted at rest).
We do not sell personal data. We do not use third-party analytics or ad trackers.
6. Data retention
Cleaning logs and associated data are retained for the duration of the customer's subscription plus 30 days. Users may request data export or deletion at any time via the GDPR hub in their account settings.
7. Cookies
CleanLog uses essential session cookies for authentication (required for the service to function). With consent, we also set a preferences cookie to remember your theme choice. We do not use tracking, advertising, or third-party cookies.
8. Your rights
Under the GDPR, you have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your data ("right to be forgotten")
- Export your data in a machine-readable format
- Object to or restrict processing
- Withdraw consent at any time
To exercise any of these rights, use the GDPR tools in your account settings or contact us at the email listed in the imprint.