Privacy policy
Last updated 13 September 2026
QCeedo is a work tool used by cleaning companies. Most of what it holds is a company's own operational record — its properties, its standards, and its crew's work — and it is that company's data, not ours. This page sets out exactly what is collected, why, who can see it, and how to get it back or have it removed.
Who is responsible
QCeedo is a product of Arveedo LLC, a Wyoming limited liability company registered at 30 N Gould St, Sheridan, WY 82801, United States. For any question about this policy, or to make a request about your data, write to privacy@qceedo.com.
Where a cleaning company uses QCeedo to manage its crew and properties, that company is the controller of the records it creates and QCeedo is its processor. Where you deal with us directly — an account holder writing to support, for example — we are the controller.
What QCeedo collects
| What | Why |
|---|---|
| Name and role | So every job record says who did the work, and the app shows each person the right screens. |
| Email and password | For signing in and resetting a password. Everyone who uses QCeedo sets their own; the password itself is held by our sign-in provider, never by us in readable form. |
| Face ID sign-in | Optional. Your phone keeps your face or fingerprint to itself; QCeedo stores only the public half of a passkey, which cannot be turned back into a face or a fingerprint. |
| Employment details | Entered by your employer if they choose to: phone number, home address, first day, the last four digits of a Social Security number, and uploaded copies of signed hiring forms such as the I-9 and W-4. Only administrators can see these. |
| Location | One position when a job is started and another when the cleaner clocks out, stamped onto that record, with the distance from the property worked out for the office. Nothing is recorded between the two, and there is no background collection. |
| Working time | Clock-in and clock-out times, taken from the server, and how long each person spent on each job. |
| Photographs | Evidence of how a property was found and how it was left, reference photos of a correct set-up, and any damage reported. |
| Job records | Which property, which date, the arrival condition, rooms proved, notes, reported damage and supplies running low. |
| Client and property information | Entered by the company: client contacts, addresses, access instructions, supply and linen arrangements, house rules. |
| Reservation emails | When a company pastes or forwards a booking email from a property management system, QCeedo keeps that email with the reservation it created. It can include the guests' names and the dates of their stay. |
| Device and technical data | A notification token for each device that has allowed notifications, and basic request and error information, including the app build a device is on, to keep the service running and diagnose faults. |
QCeedo does not collect payment card details. If you subscribe, payment is handled by a payment processor and card numbers never reach us.
Location, specifically
The app asks for location permission and explains why before the system prompt appears. It takes one fix at clock-in and one at clock-out. There is no geofence, no radius check, no live map and no trail: the app records where a job was started and ended, and shows the office how far that was from the property. A job cannot be started without a position. If one cannot be taken at clock-out, the clock-out still happens and the record says the position was missing.
Photographs, specifically
Camera and photo access are used only when someone chooses to attach a picture to a job, a property or a damage report. Photos taken with no signal are held on the device until it reconnects, then uploaded. QCeedo does not read your camera roll.
What QCeedo does not do
- No advertising, and no data used for advertising.
- No sale of personal information, and no sharing of it for cross-context behavioural advertising, under the CCPA/CPRA or any comparable law.
- No third-party analytics or advertising trackers in the app.
- No continuous or background location tracking.
- No use of your company's data to train machine-learning models.
Legal bases
Where the UK GDPR or EU GDPR applies, we rely on: contract, to provide the service you or your employer signed up for; legitimate interests, to keep the service secure, diagnose faults and prevent abuse; and legal obligation, where we must keep records. Location and camera access additionally rest on the permission you grant on the device, which you can withdraw at any time in your phone's settings.
Who can see your data
Within QCeedo, records are separated by company and that separation is enforced on the server against your signed-in identity on every read and every write. One company cannot read another's records. Inside a company, administrators see everything that company holds. Crew members see the jobs assigned to them, and the company's property details and job records they need to do that work. Employment details and pay are visible to administrators only, and a subcontractor is never shown who the client is.
A small number of QCeedo staff can view any company's records to provide support and investigate faults. That access is read-only: it cannot change or delete anything.
We use these sub-processors, each only for what is listed:
- Google Firebase (Google Cloud Platform) — stores data, signs people in and hosts the service, in the United States.
- Apple Push Notification service and Firebase Cloud Messaging — deliver notifications to devices that have allowed them.
- Twilio — sends text messages, only for companies that switch texts on.
Where personal data is transferred out of the UK or EEA, that transfer relies on the European Commission's Standard Contractual Clauses.
We disclose data outside that only if the law compels it, and we will tell the affected company unless we are legally barred from doing so.
How long it is kept
Job records, photographs and property information are kept for as long as the company using QCeedo keeps its account, because that is the point of them — a damage claim can arrive months after a clean. A company can remove clients, properties and people from within the app, and can ask us to delete its entire account by writing to privacy@qceedo.com. We complete account deletions within 30 days and remove backups within a further 90.
Corrections to a job record are appended rather than overwritten, and the trail of corrections is part of that record. That is deliberate — it is what makes the evidence worth anything — and it means a correction does not erase what it corrected. Deleting the record deletes the trail with it.
Deleting your own account
Anyone can delete their own account in the app, from Profile → Delete my account. That removes their sign-in, their profile and their devices straight away. The jobs they worked stay with the company that employed them, because those are the company's records.
An ended trial or subscription does not lock you out
If a company's free period or subscription ends, QCeedo stops accepting new work but every record already in the account stays readable. We do not withhold your evidence over a payment.
Your rights
Depending on where you live, you may have the right to obtain a copy of your personal data, correct it, delete it, restrict or object to its processing, and receive it in a portable format. Under the CCPA/CPRA, California residents additionally have the right to know what is collected and to opt out of sale or sharing — there is nothing to opt out of here, because we do neither.
An administrator can download the company's clients, properties and settings at any time from Manage → Settings → Backup. For a full copy of your records, or anything else, write to privacy@qceedo.com and we will respond within 30 days. If you are an employee of a company using QCeedo, we may need to pass your request to your employer, who controls those records — we will tell you if we do.
You may also complain to your data protection authority. In the UK that is the Information Commissioner's Office; in the EU, the authority in your country of residence.
Security
Data is encrypted in transit and at rest. Access is controlled by server-side rules rather than by the app alone, so a modified client cannot reach another company's records. Sign-in uses Firebase Authentication, with optional Face ID through passkeys. Invite codes are eight characters drawn from a 32-letter alphabet with no lookalike characters, and the list of codes cannot be read by anyone — a code can be checked, never enumerated.
No system is perfect. If a breach affects your data we will notify the affected companies, and the relevant regulator where required, without undue delay.
Children
QCeedo is a workplace tool and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child's data has reached us, write to us and we will remove it.
Cookies and this website
This marketing site sets no cookies and runs no analytics or advertising scripts. It loads a web font from Google Fonts, which means Google receives the request for that font. The app at app.qceedo.com and the QCeedo apps store your session, an offline copy of your company's data and any unsent work in storage on your own device; that is what makes them work without a signal. Clearing the browser's data, or removing the app, removes it.
Changes
If this policy changes in a way that matters, we will tell account holders by email before it takes effect, and the date at the top of this page will change.
Contact
Privacy questions and requests: privacy@qceedo.com
Everything else: hello@qceedo.com