Your data belongs to you.

Your data belongs to you. We keep what the food-safety job needs, say plainly what we keep, and let you take it or delete it.

This policy is from Praiseworthy Apps LLC, which makes CleanCleaver, at 9241 January Dr, Las Vegas, NV 89134. Questions? Call or text (415) 640-1667. A person will answer.

Your email is how you sign in (a 6-digit code, no password), how a business invites you, and how we send notices about your account and billing. We send tips and offers only if you say yes.

A free app usually pays for itself with your data. CleanCleaver is paid for by the businesses that use it, so we have no reason to sell what you record. That is the whole business model.

• For your account, billing, emails and this website, we decide what is kept and why (we are the "controller").
• For the records a business keeps about its own work and its workers (checks, readings, the team list, check-ins), the business decides; we keep them for it under our data processing addendum (we are its "processor"). If you work at a business that uses CleanCleaver, that business's own privacy notice covers those records too.

Planning checklists and guides, like the Utah permit checklists, ask for your email before the PDF downloads. We ask for it so we can send you one useful email, and only if you say yes.

• What we keep. Your email, the kind of place you picked, and the page and checklist you downloaded, or the library guide you opened past the free ones. If you tick the box, also when you ticked it, the words next to the box, and a discount code.
• The box is empty until you tick it. It says Send me CleanCleaver food-safety tips and offers (unsubscribe anytime). The download needs only your email. With the box empty, we send you nothing.
• What we send. If you tick the box, one email about a day later: the checklist again, 10% off your first month for your kind of place, and one tip from the checklist. We tell you in the email why you are getting it.
• How to stop. Every email has an unsubscribe link, and your email app can unsubscribe you with one tap. It takes effect at once. We keep your address on a list of people not to email, so we do not email you by mistake.
• Library guides. You can read 4 guides free. The next guide shows its first section, then asks for your email to open the rest, or you can start the free trial. The whole text stays on the page for search engines; the page only hides it until you leave an email.
• Safety guides never ask. Guides for a sick worker, vomit or diarrhea cleanup, a cut or burn, chemicals and similar moments download with nothing to type.
• Who sees it. People at CleanCleaver, and the email service that sends the message. We do not sell it or share it with advertisers.
• Bots. The form has a hidden field only a bot fills in, and a limit on tries from one place. We use the address that sends a request for that limit while it is happening, and do not save it.

Want your address removed? Call or text (415) 640-1667.

Your answers stay private. Your manager only sees whether you're OK to work.

That is the promise. Here is what is behind it, and where it stops.

• Your manager and the person in charge see the action, not the symptom.
• Your yes or no answers are stored in your check-in. The manager screens do not show them.
• Health answers are left off the record of changes.
• The inspection binder shows each check-in's result, never the answers.
• A sick report keeps only that one happened. It keeps no symptoms.
• Insights does not count health check-ins or health reports.
• Voice notes are not offered on the health check-in or the illness report.

We do not say health answers are never stored. They are. Only the manager screens hide them.

One more thing. If you photograph a filled-in paper health sheet, its symptom columns become ordinary log entries. Please do not photograph it.

The first time you visit, a banner asks. Necessary storage (sign-in, security, your saved work, the free-guide limit, your choice itself) is always on. The free-guide limit is also counted on our server by a salted hash of your address, never the address, kept 30 days. Preferences (your state and county, text size) and Analytics (linking your visits: paths and taps tied to your session) stay off until you say yes. Separately, we count page views, taps and time on page anonymously: nothing is stored on or read from your device, no id, no address kept, and the server only adds up numbers. For a visit that came from another site we count that site's domain (google.com, chatgpt.com), never the address of the page or what you searched. With Analytics on, a random visit id in this tab's session storage joins the pages of this visit (gone when you close the tab or turn Analytics off; the pages are kept 90 days, never tied to your account). Global Privacy Control or Do Not Track stop even that. The three buttons, Accept all, Reject non-essential and Choose, carry equal weight, and nothing is ticked for you. We keep your choice with its date and version. Change it any time with Cookie settings at the bottom of any page. Global Privacy Control or Do Not Track count as a no. The cookies page lists every item.

The Chat with us button is run by Crisp (crisp.chat), a company that makes chat tools. Pressing it is your choice, and nothing is sent to Crisp until you do.

• Before you press it. This site does not load anything from Crisp, and Crisp learns nothing about your visit.
• After you press it. Your browser loads Crisp's chat from Crisp. What you type in the chat, and any email address you give there, go to Crisp so the chat can work and a person at CleanCleaver can reply. Crisp may also set its own cookies in your browser.
• What we do not send. We do not pass Crisp your account, your email or your phone number from this site. Only what you type in the chat goes.
• Please do not type health details about a person, or a card number, into the chat.

Crisp's own rules apply to what it keeps: Crisp privacy policy.

Prefer not to chat? Call or text (415) 640-1667.

These steps use AI. Each one only works when an AI key is set on our server. The AI use notice has the details, and the subprocessor list names each company.

• Ask. Emails, phone numbers and known names are stripped from your question before it goes to a model. Exact limits, like thaw times, keep times and sanitizer tables, are answered by our own code, not a model.
• Paper scan. A photo of a log sheet goes to Google Gemini to read the handwriting. Then it goes to Claude to fit it to the columns. Doubtful cells go to a person to check.
• Set up from a photo. A photo of a kitchen or a receipt goes to the same two models. Nothing is added until you tap.
• Food photo. Google Gemini reads a photo of food. It is a paid add-on.
• Never: a health check-in answer, a sick report or your card goes to an AI model.

Voice. Uses your phone's speech recognition. We never keep the recording, only the words you save. Your phone or browser may send the audio to Apple or Google to turn it into words. For languages other than English and Spanish, the words go to Google Gemini to be translated.

We have not measured how accurate these steps are. Check what they read.

In the United States. Our servers and database run on Fly.io; the other companies above are mostly in the United States too (Crisp is in the European Union). If you are in Europe or the UK, your data is sent to the United States under the European Commission's Standard Contractual Clauses and the UK Addendum in each company's data processing terms.

In the app, without asking anyone (Profile, then Your data and privacy):

• Download my data. One file with everything we keep about you as a person: your account, your businesses, your sign-ins, your devices, your choices and your settings. Records a business keeps about your work belong to that business; its owner can download everything for the business.
• Delete my account. Type your email to confirm. Your sign-in, devices and settings are erased. If you are the only owner of a business, make someone else an owner or delete the business first.
• Your choices. Turn tips and offers by email, help improve cleancleaver and reminders on this phone or browser on or off. Each change is recorded with the time.
• Correct. Change your name in Profile. A mistaken record is marked not done after all; the original stays, because a food safety record must not be rewritten.

By asking us. Call or text (415) 640-1667. We check it is you first: the request comes from your own sign-in, or we send a code to your account's email. We answer on time and keep a record of the request.

If you are in Europe or the UK you have the right to access, correct, delete, restrict or take your data, to object to a use, and to withdraw consent at any time. We answer within one month (the law allows two more months for hard cases, and we tell you if we need them). You can complain to your data protection authority.

If you are in a US state with a privacy law: CCPA/CPRA (CA, 45 days); VCDPA (VA, 45 days); Colorado Privacy Act (CO, 45 days); UCPA (UT, 45 days); TDPSA (TX, 45 days); OCPA (OR, 45 days); Florida Digital Bill of Rights (FL, 45 days); NRS 603A (online privacy; opt-out of sale) (NV, 60 days). Those laws apply to companies above a size or data threshold; we answer every request as if they apply. You can ask to know, correct, delete or take a copy of your data, and to opt out of sale, sharing for targeted ads and profiling. We do not sell your personal information and do not share it for cross-context behavioral advertising. There is nothing to opt out of, and we honor the Global Privacy Control signal from your browser anyway: it turns analytics off. You can also use Cookie settings at the bottom of any page. You may use an authorized agent; we will ask for your signed permission. If we say no, you can appeal by replying, and then complain to your state attorney general. We never treat you differently for using these rights.

If you work at a business that uses CleanCleaver, ask that business about its records of your work. If you ask us, we pass it on to the business within 5 days and help it answer.

No child has a CleanCleaver account or an email with us. You must be 18 to open a business or a home; a business may invite workers 13 or older.

In home mode, an adult may add a child's first name to a household profile so chores and kid mode show the right name. That is the adult's data about their own household, kept inside their home and erased with it. We do not knowingly collect personal information from a child: US law (COPPA, 16 CFR 312.2) says "Child means an individual under the age of 13." If you think a child gave us information, call or text us and we delete it.

We keep an incident register with the legal clocks built in. If your personal data is exposed, we tell you without unreasonable delay and as the law of your state requires, and we tell the authorities where the law asks (in Europe and the UK, within 72 hours of becoming aware, where feasible). If you are a business customer, we tell you within the time our data processing addendum sets so you can tell your people.

We keep each version of this policy with its date. For a change that matters, we email account owners and show a notice in the app before it starts, and the app asks you to accept the new version. We record who accepted which version and when.