How Qleen handles your data.

1. Scope and controller

Qleen provides a shared laundry reservation app for Swiss residential buildings. This Privacy Policy applies to the Qleen mobile app for iOS and Android, the qleen.ch website, and related support or owner setup flows.

For privacy questions, access requests or deletion requests, contact Qleen at [email protected].

2. Data we collect

Qleen collects only the data needed to operate building access, laundry reservations, owner configuration and support.

• Account and authentication data: email address, one-time password events, Supabase user ID, session and security identifiers.
• Profile and preferences: full name, language, calendar mode, status and optional avatar reference if provided.
• Building membership data: building, role, approval status, laundry group assignment, group color/name visibility and building access code usage.
• Reservation data: machine type, reservation date and time, duration, status, updates, cancellations and related laundry group.
• Owner and building configuration: building name, access code, washers, dryers, groups, rules, holidays, exceptions and post-laundry checklist settings.
• Notification data: Expo push token, platform, device name, notification delivery status and reminder metadata when notifications are enabled.
• Technical and security data: IP-derived request metadata, edge function logs, rate-limit counters, app errors shown locally, and basic device/network state needed for reliability.
• Local offline data: a small auth snapshot and selected cached app data stored on the device so the app can open with poor connection.
• Website analytics: qleen.ch currently does not load third-party analytics scripts.

3. Why we use data

• To sign residents and owners in with email OTP.
• To let residents request access to a building and let owners approve, reject or remove access.
• To show available washers, dryers, laundry groups and valid booking times.
• To create, edit, cancel and display reservations.
• To send service messages such as OTP emails and optional push reminders.
• To protect the service against abuse, spam, unauthorized access and operational errors.
• To provide customer support and improve the product for Swiss buildings.

4. Legal basis and Swiss data protection

Qleen is designed for use in Switzerland and follows the principles of the Swiss Federal Act on Data Protection: transparency, purpose limitation, proportionality, security and respect for user rights.

Where the GDPR applies, Qleen relies on the performance of a service relationship, legitimate interests in security and product operation, legal obligations, and consent for optional features such as push notifications.

5. Who can see or process data

Qleen does not sell personal data. Data may be processed or viewed only when needed to run the service.

• Building owners and administrators can see resident information needed to manage the building, such as name, membership status, reservations and laundry group assignment.
• Supabase processes authentication, database, edge function and storage-related data for the app backend.
• Email delivery providers process OTP and service emails.
• Expo, Apple and Google may process push notification tokens and delivery data when notifications are enabled.
• No third-party website analytics processor is currently used on qleen.ch.
• Authorities or other parties may receive data if required by applicable law or to protect rights and security.

6. International transfers

Some service providers may process data outside Switzerland. When this happens, Qleen uses providers and contractual safeguards intended to protect personal data in line with Swiss data protection requirements and, where applicable, GDPR requirements.

7. Retention and deletion

• Account, profile and membership data are kept while the account or building relationship is active.
• Reservation data is kept as long as needed for the booking service, building administration, security and support history.
• Push tokens are removed on account deletion and may also be cleaned up when a membership is no longer active.
• Rate-limit and operational logs are kept only as long as needed for security and troubleshooting.
• Residents can delete their account in the app. A sole active owner may need to transfer ownership before deletion so the building is not left unmanaged.
• Users may also request deletion by contacting [email protected].

8. Your rights

Subject to applicable law, you may request access to your personal data, correction of inaccurate data, deletion, restriction, objection, data portability where applicable, or withdrawal of consent for optional processing.

You may also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC) if you believe your data protection rights have not been respected.

9. Children

Qleen is not directed to children under 13 and does not knowingly collect data from children under 13. If you believe a child has used Qleen without the required permission, contact [email protected].

10. Security and changes

Qleen uses access controls, Supabase Row Level Security, encrypted connections, secure local session storage and operational rate limiting to protect data. No system is perfectly secure, but Qleen limits data access to what is needed for each user role.

This policy may be updated when Qleen changes features, providers or legal requirements. The date at the top of this page shows the latest update.