Privacy Policy

• Business owners who use Realivo to run a cleaning business.
• Cleaners who join a business’s team with their own Realivo login.
• Clients of those businesses and other people whose details a business adds to Realivo.
• Anyone who opens a shared proof of clean report or verification page, or visits our website.

Each business decides what it records in Realivo about its clients, properties, jobs and staff, and why. For that information the business is the controller and we are its processor: we store and process it only to provide Realivo to the business, on its instructions, under the data processing terms in our Terms of Service. We do not use it for our own purposes. If your data was added by a business (for example you are its client, or you work as one of its cleaners), that business is responsible for it and you can contact it directly. We will help it respond.

We are the controller for Realivo accounts themselves (owner and cleaner logins), notifications and push tokens, the security and usage logs we keep, and the data of people who visit our website or open shared links.

• Accounts (owners and cleaners): your email address and password (stored only in hashed form, so we never see it), whether you run a business or work in a team, and when you signed up and last signed in.
• Business profile (owners): business name, tagline, address, email, phone, website and logo, and whether to show the cleaner’s name on proof of clean reports.
• Clients and properties (entered by the owner): property names and addresses, client names, email addresses and phone numbers, access information (for example key safe codes) and notes, and the client or agent name on a job.
• Jobs and the work done: job address, date and start time, services and checklists, room names and notes, arrival notes, before and after photos, photos of the property’s condition on arrival, checklist photos and notes, issues reported (type, description and photo), and the times these were taken. For each photo we store a fingerprint (a SHA-256 hash) so the report can be checked later. We remove camera metadata (EXIF) from every photo before it is stored.
• Shifts (cleaners, and owners who run a job themselves): the times a shift starts and ends, a photo of the person taken with the front camera at the start and end of the shift, and whether the owner ended the shift.
• Location: when you start or end a shift, take an evidence photo or report an issue, the app records an approximate location (low accuracy) if your phone allows it. It is optional: if you decline or location is unavailable, everything still saves without it.
• Teams: the email address and name the owner enters when inviting a cleaner, the invite’s status and expiry, and each cleaner’s name and membership history in the team.
• “Cleaned by”: when a cleaner starts a shift, we store their first name and last initial (for example “Sarah O”) on that job.
• Notifications: the in app notifications we create for you (they can include a cleaner’s name, the first line of a job address and times), whether you have read them, your notification settings, and your device’s push token if you allow notifications.
• Postcode lookups: when you look up an address by postcode, we record your account, the postcode and the time, to apply fair use limits.
• Technical data: our hosting providers record basic request information such as IP address, browser or device type, the address requested and the time, to run the service and keep it secure. We do not use analytics, advertising or crash reporting tools.

A business can share a proof of clean report by link. Anyone with the link can see the business’s name, logo and contact details, the property address, the client or agent name, the date, the arrival note, rooms and notes, photos, the checklist, issues with their descriptions and photos, the shift start and end times, and, if the business’s setting is on, “Cleaned by” with the cleaner’s first name and last initial. The verification page shows the certificate and the certified photos.

Clients never see shift photos of the cleaner, any location, property access information, or the client’s own contact details. Within a business, the owner can see its cleaners’ shift photos, shift locations and work. A cleaner sees only the jobs assigned to them, including the property access information and notes from the day of the job, but never the client’s name or contact details.

Where we are the controller:

• To create and run your account and provide Realivo, including the notifications you have set up: performance of our contract with you.
• To send service emails (confirming your email address, resetting your password): performance of our contract.
• To keep Realivo secure, prevent misuse (including postcode lookup limits) and fix problems: our legitimate interests in running a safe, reliable service.
• To keep records and respond to legal requests: legal obligation.
• For people who open a shared link or visit our website: our legitimate interests in delivering the page securely.

Where a business is the controller, the business decides the lawful basis for the data it records about its clients and staff (usually its contract with the client or the cleaner, or its legitimate interests in showing the work was done), and we process it on its instructions.

We do not sell personal data and we do not use anyone’s photos or job data for advertising.

We use a small number of providers who handle data for us, each under a contract that requires them to protect it and use it only to provide their service to us:

• Our database, sign in and storage provider, which also runs our scheduled tasks. Your data is stored in London, UK.
• Our website and server hosting provider, for our website and the services the app uses (address lookup, account deletion and shared reports). Its servers are in London, UK.
• Our email delivery provider, which sends service emails such as confirming your email address and resetting your password, from noreply@seyihq.com.
• Push notification services, which deliver notifications to your phone. They receive your device’s push token and the text of each notification.
• A UK postcode lookup provider, which turns a postcode into addresses. It receives only the postcode, from our server, not who you are.

A full list of our providers is available on request from support@seyihq.com.

We may also disclose data if the law requires it, to protect our rights or users’ safety, or to a buyer if our business is sold (they would be bound by this policy).

We store your data in the UK. Push notification services are based in the United States, so your device’s push token and the text of each notification are transferred there to deliver it. Some of our other providers can also access data from outside the UK to give support and maintain their service.

Where personal data leaves the UK, we rely on the UK government’s adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework where the provider is certified) or on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. Contact us for details.

• Your account and everything in it: until you delete it. You can delete individual jobs and photos at any time, or your whole account (section 9).
• Team membership history (who was in a team and when): until the owner or the cleaner deletes their account.
• Notifications: 60 days.
• Push tokens: removed when you log out, and deleted after 90 days without use.
• Postcode lookup records: 30 days.
• Team invites, including the email address and name entered: 90 days after the invite is accepted, cancelled or expires.
• Server and security logs: up to 7 days.
• Backups: deleted data can remain in our encrypted database backups for up to 7 days, until they expire. We never restore a backup to bring back a deleted account. Photos and logos are not kept in backups.

You can delete your account yourself in the app. Owners: Account, then My Business, then Danger zone. Cleaners: Account, then Danger zone. Or email support@seyihq.com from your registered address. Instructions are also at realivo.seyihq.com/delete-account.

Owners must first remove their cleaners from the team (Account, then Team). Deleting an owner account deletes the business profile, every job, room, photo, shift photo, checklist, issue, report and certificate, including the work cleaners recorded in that business. Shared and verification links stop working at once.

Cleaners must end any shift in progress first. Deleting a cleaner account removes the cleaner’s login, notification settings, notifications, push tokens and place in the team, and jobs they had not started go back to the business. The work records a cleaner made for a business (photos, shift photos, checklists, issues, proof of clean and the “Cleaned by” name on finished jobs) belong to that business and stay with it.

Data is encrypted in transit and at rest. Every table is protected so each account can reach only its own data and, for cleaners, only the jobs assigned to them. Photos and logos are kept in private storage and opened only through links that expire: after an hour in the app and on verification pages, and after 7 days on shared reports. On your phone, your sign in is kept encrypted, with the key in the iOS Keychain, and you are signed out after 60 minutes without use and after 14 days at most. Share and verification links use long random codes.

You have the right to access your data, correct it, have it deleted, restrict or object to its use, receive it in a portable format, and withdraw consent where we rely on it. To use any of these rights, email support@seyihq.com. We may ask you to confirm your identity, and we will reply within one month. There is normally no charge. If your data is held for a business (section 2), we will pass your request to that business and help it respond.

Our website does not use advertising, analytics or tracking cookies. It uses a short lived sign in cookie and a marker cookie only when you open a password reset link, so you can set a new password. Both are removed when you save your password or open another page. These are strictly necessary, so they do not need consent. The app stores your encrypted sign in and a few settings on your phone.

Realivo is for businesses and their staff. It is not for anyone under 18 and we do not knowingly collect their data.

We will post any changes here and update the date at the top. If a change is significant, we will tell you in the app or by email.

If you are unhappy with how we handle your data, please contact us first at support@seyihq.com. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

seyiHQ Limited, Apartment 330, The Condor, 1 Springwell Square, Derby, DE1 1BZ. Email support@seyihq.com.