Privacy policy

Who we are

CleanFlo is a service provided by WhealBit (whealbit.co.uk), based in Cornwall, United Kingdom. "We", "us" and "our" in this policy mean WhealBit, who is the data controller for this site. WhealBit is the trading name of T. Clarke, a sole trader, and is not a limited company. Our address for service is CleanFlo, Rocky Field Close, St Ives, TR26 2FY.

Data requests, and anything else about this policy, go to info@cleanflo.io, or by post to CleanFlo, Rocky Field Close, St Ives, TR26 2FY.

Who this covers

This policy covers cleanflo.io, the public marketing site, and what the CleanFlo mobile apps for iPhone, iPad and Android do on your device (below). The CleanFlo application, at app.cleanflo.io and in the mobile apps, handles your business data: your staff, clients, sites and invoices. That is governed by the terms and privacy notice you accept when you create an account, and where your employer put your details into CleanFlo, your employer is the controller of them and we process them on its behalf.

The CleanFlo mobile apps

The CleanFlo app is distributed by Apple through the App Store and by Google through Google Play. The store you download it from processes your download under its own privacy policy; we receive no personal data about you from either store beyond aggregate download and crash statistics the store shows every developer. You cannot sign up or pay in the app, so the app collects no payment details. It uses these device features, each only after you allow it in the phone's own permission prompt, and each can be switched off at any time in the device settings:

• Location, only while the app is open. When a cleaner starts or finishes a job, the app takes a location reading so the employer can confirm they were on site, and if a cleaner raises a safety alert it shares their location with their employer. The app does not track location in the background or between those moments.
• Camera and photo library. To take or attach photos of work, receipts, vehicle checks and reported issues. Only the photos you choose are uploaded, to your company's CleanFlo account.
• Notifications. If you allow notifications, your device gives the app a push token, which we store against your login so we can send you job, message and safety alerts. On iPhone and iPad the alert is delivered by Apple Push Notification service; on Android by Google's Firebase Cloud Messaging, which we use only to deliver notifications. The notification text passes through that service. The token is deleted when you turn notifications off in CleanFlo, or when the delivery service tells us it is no longer valid.

So that a cleaner can work without signal, the app keeps a copy of recently viewed CleanFlo data on the device for up to 24 hours, and clears it when you sign out. The app contains no advertising, no third-party analytics and no crash-reporting SDK, and it does not track you across other companies' apps or websites.

Deleting your account. In the app, a member of staff can ask for their login and personal data to be deleted from Settings, under "Delete my account"; the request comes to us, and is carried out subject to the employer's own legal record-keeping duties. An account owner can close the whole company account from Settings, Privacy, in the app or the browser: it is deleted 30 days later unless the closure is cancelled first. See our data retention policy for what is kept and for how long.

What this site collects

This site has no accounts and no sign-up forms, and it asks for no payment detail. The free calculators run entirely in your browser: the figures you type into them are never transmitted to us and never stored anywhere but your own device for the length of the visit.

What is collected is limited to:

• The contact form, if you use it. The name, email, company, team size and message you type on our contact page are delivered to us by Netlify, who host this site, so that we can reply. We keep an enquiry no longer than twelve months unless it becomes an ongoing conversation, and we never use it to market to you.
• Your own display preferences. If you dismiss a notice at the top of the page, that choice is stored in your browser's local storage so we do not show it again. It never leaves your device.
• Where your visit started. On the first page of a visit we store the path of that page, and any campaign parameters the link you followed carried (utm_source, utm_medium, utm_campaign, utm_term, utm_content, gclid, ref), in your browser's session storage under cf-attrib, and we add them to any link you press through to app.cleanflo.io, so that a trial can be credited to the page that earned it. One label is added to that link without being stored: the name of the control you pressed, for example ref=cta:pricing-bottom, so the credit can name the button as well as the page; a ref you arrived with takes its place. It holds nothing that identifies you and nothing you have typed, and your browser deletes it when you close the tab. If you create an account, five of those labels are recorded once against it and cannot be rewritten afterwards: source, medium, campaign, ref and the landing path. The address of the site that linked you here is not among them. The full list is on our cookie policy.
• Server request logs. Netlify, who host this site, record standard web-server information: IP address, browser user agent, the page requested and the time: to serve the site and defend it from abuse. Their retention is set by them, and is described in Netlify's privacy notice.
• Page-count analytics, without cookies. We use Plausible to count how many people read each page and which free tools get used. It sets no cookies, stores nothing on your device and does not follow you between websites. What it records is the page address, the site that linked you here, your country, and your browser and device type, all aggregated into counts. None of it identifies you.
• Behaviour analytics, with cookies. We use Microsoft Clarity to see how people actually use the site: heatmaps of where they click and scroll, and recordings of individual sessions, so we can find the parts of a page that confuse people. Clarity sets cookies on your device (including _clck and _clsk) to tie your clicks and scrolls together into one session, and it masks free-text input by default. See Microsoft's Clarity documentation for what it collects and how long it is kept. Full details of the cookies it sets are on our cookie policy.

Why we are allowed to hold it

Server logs are processed under legitimate interests: running a website securely is not possible without them. Analytics, both Plausible's page counts and Clarity's session recordings, is also processed under legitimate interests: understanding how the site is actually used, so we can fix the parts that don't work, without it being used for advertising, sold on, or attached to anything else we know about you. You can stop Clarity's cookies at any time by blocking them in your browser; see our cookie policy for how.

Who else sees it

We do not sell personal data and we do not share it for advertising. The only third parties involved are the suppliers who make the site work: Netlify, who serve it and deliver the contact form; Plausible, which counts pages without cookies; and Microsoft, whose Clarity product records how the site is used. Each acts on our instructions for this site, save for the fields Microsoft itself sets as an independent controller under its own privacy statement, linked above.

If you use the chat ("Ask Flo"), your questions go to Anthropic, whose Claude model writes the answers, and the check that you are not a robot is run by Cloudflare Turnstile. We keep the chat text for up to 90 days to see which questions the site fails to answer. We do not store your IP address with it, only a one-way hash used to limit how much one visitor can send. If you use "Talk to a person", the name, email, company and any phone number and message you give are kept so that we can reply, and are emailed to us with the chat through Resend. Both suppliers are listed on our sub-processor page.

Typefaces are served from this site rather than from Google. That is deliberate: loading a font from Google's servers would send your IP address to Google on every page you open, which is a thing we would then have to ask you to accept. Nothing on this site contacts a third party to render it.

How long we keep it

The periods for this site are given above, beside each item. For the application, including records cleaning businesses keep in CleanFlo and what happens when an account closes, see our data retention policy. To improve Flo, the assistant inside the application, we review anonymised Flo question text (email addresses and phone numbers removed, never Flo's answers), kept for 90 days.

Your rights

Under UK GDPR you can ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, object to how we are using it, or ask us to restrict that use. Write to info@cleanflo.io. To stop Clarity's cookies specifically, block them in your browser, see our cookie policy for how.

We answer requests within one month. If we get it wrong, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

If this policy changes materially we will update the date at the top of this page. Continued use of the site after that date means the revised policy applies.

Related

See also our cookie policy, terms of service and how to get in touch.