Terms of service
Version 2026-08-15
What you confirm at signup
I confirm I am responsible for informing every cleaner that their location, working times and completed work are recorded, for obtaining any consent this requires, and for having my client’s permission to photograph the inside of their building.
Who is responsible for what
Clock2Clean provides the software. You are the employer, and under the Protection of Personal Information Act you are the responsible party for the personal information of your cleaners. We process it on your instruction and for no other purpose.
Telling your cleaners that their location and their work are recorded — before they scan, not after — is your obligation, not ours. The door page shows every cleaner a plain-language notice and records their agreement, but that supports your duty; it does not replace it.
Photographs inside somebody else’s building
The photographs this product takes are of your client’s rooms. Whether you may take them, and what you may do with them, is a matter between you and your client — typically a clause in the cleaning contract. We cannot know what that contract says, and by using the product you confirm that you have the permission it requires.
The checklist screen tells every cleaner to photograph the work and never a guest, a colleague or anybody’s belongings. Reinforcing that in your own training is worth more than the sentence on the screen.
Photographs are held in private storage. They are only ever served through short-lived signed links to people you have given a login to; the storage bucket is not public and there is no URL that works without one.
What we do with the data
Clean records, locations and photographs are stored so that you can supervise your staff and demonstrate to a client that the work was done. We do not sell it, share it with third parties, or use it to train anything.
Photographs are destroyed automatically at the end of the retention period you set — 90 days unless you change it. The record of the clean is kept, because that is the service record.
A cleaner may ask you to delete their photographs at any time, and you can do so from the Cleaners screen without affecting the record that the rooms were cleaned.
What the record does and does not prove
A scan proves that a phone that had been given a cleaner’s PIN was at the building, and that somebody holding it ticked a list and took photographs of a room. It is strong evidence and it is not a witness. Treat a dispute as something to look at the photographs about, not something the software has already settled.
Corrections are always attributable: every manual change keeps a record of who made it and when.
Availability
The door page is built to keep working when the network does not — a clean is queued on the device and reconciled later, which is the normal case in a basement or a lift lobby. We cannot guarantee uninterrupted service, and you should keep a means of recording work by hand for the days nothing works.