Privacy Policy

1. Who we are

Cleanedit.app is operated by Jovana Tokic, trading as Cleanedit.app (KVK 68661150), Vijzelstraat 28-4, 1017HK Amsterdam, the Netherlands ("Cleanedit.app", "we", "us", "our"). For the purposes of the General Data Protection Regulation (GDPR) and the Dutch GDPR Implementation Act (Uitvoeringswet AVG), we are the data controller for the personal data described in this policy.

You can reach us for any privacy question at jo@anythingproduct.nl.

2. What data we collect

We collect the following categories of personal data:

• Account information: your email address, name (if provided), password (stored hashed), and account settings.
• User content: the photos or files you upload to Cleanedit.app in order to clean, edit, or log them, together with metadata such as upload time and file type.
• Usage data: how you use the app, including log activity, streaks, feature usage, device type, and approximate location derived from IP address, collected via Google Analytics and PostHog.
• Payment data: our payment provider, Paddle, collects and processes your billing details (such as card number, billing address, and email) on our behalf. We do not receive or store full card details ourselves; we receive only confirmation of payment, subscription status, and a transaction reference.

3. Why we process your data (purposes and legal bases)

We process personal data on the following legal bases under Article 6 GDPR:

• Performance of a contract: to create and maintain your account, provide the core Cleanedit.app service (including tracking your daily logs and streaks), process subscription and in-app purchases, and provide customer support.
• Legitimate interests: to understand how the app is used and improve it (via Google Analytics and PostHog), to detect abuse, and to keep the service secure. Where required by Dutch or EU law, we will ask for your consent to analytics cookies before they are set.
• Legal obligation: to keep records required for tax, accounting, and consumer-protection compliance.
• Consent: where we rely on consent (for example, certain analytics or marketing communications), you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Who we share data with

We share personal data only with service providers who process it on our behalf (data processors), under written data processing agreements, including:

• Paddle.com Market Limited, our payment provider, which acts as the merchant of record for all purchases and processes billing and payment data.
• Google Analytics (Google Ireland Limited) and PostHog, for product analytics.
• Cloud hosting and infrastructure providers, for storing account data and user content.

Some of these providers may process data outside the European Economic Area. Where this occurs, we rely on the European Commission's Standard Contractual Clauses or another valid transfer mechanism to protect your data. We do not sell personal data.

5. How long we keep your data

We retain account information and user content for as long as your account is active, and for a reasonable period after closure to allow you to recover your account, resolve disputes, and comply with legal obligations (typically up to 7 years for financial records, as required by Dutch tax law). Analytics data is retained by our analytics providers in line with their standard retention windows, generally no longer than 26 months.

6. Children

Cleanedit.app is not directed at children under 16. In line with the age of digital consent set by the Dutch UAVG, we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

7. Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request erasure of your data ('right to be forgotten').
• Restrict or object to certain processing, including processing based on legitimate interests.
• Receive your data in a portable format.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or your local supervisory authority.

To exercise any of these rights, email jo@anythingproduct.nl. We will respond within one month, as required by the GDPR.

8. Cookies and similar technologies

We use essential cookies to operate the app and, where you consent, analytics cookies (Google Analytics, PostHog) to understand usage. You can manage cookie preferences through the in-app or website cookie banner, and through your browser settings.

9. Security

We use appropriate technical and organisational measures, including encryption in transit, access controls, and hashed password storage, to protect your personal data against unauthorised access, loss, or misuse. No system is completely secure, and we cannot guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or an in-app notice before the changes take effect. The 'Effective date' above shows when this version came into force.

11. Contact us

Jovana Tokic, trading as Cleanedit.app (KVK 68661150), Vijzelstraat 28-4, 1017HK Amsterdam, the Netherlands
Email: jo@anythingproduct.nl