Privacy Policy

Nítida is a product of AIKODERS LLC, a limited liability company in the United States. Our website is aikoders.tech, and you can reach us about anything in this policy at privacy@aikoders.tech.

The mobile app is published as Nítida by AIKODERS LLC (bundle identifier com.aikoders.nitida) on the App Store and Google Play.

Almost everything Nítida holds belongs to a cleaning company that subscribes to it. That company decides which employees it enrols, what it records about them, which customers and properties it stores, and how long it keeps any of it. In privacy law terms the cleaning company is the controller and AIKODERS LLC is a processor acting on its instructions.

What this means in practice:

• If you are a cleaning crew member or office user, your employer controls your data in Nítida. Ask them first about access, correction or deletion — and see Your rights. We will help them, and we will point you to them if you ask us directly.
• If you are a customer of a cleaning company — you booked a clean or use the client portal — that cleaning company is who your information is for.
• For our own account and billing records — the person who signs a company up, and our correspondence with them — AIKODERS LLC is the controller.

By who is using Nítida, and what they are doing with it:

This is the most sensitive thing the crew app does, so here is exactly what happens.

What it is used for:

• Confirming arrival. A job can require the crew to be within a set distance of the property before it can be started.
• Pausing and resuming the clock. Time is paid, and time away from the property is not — so the record shows who paused and who was paused by the system.
• The route for that job, drawn on the job’s map for the office, and mileage between jobs where the company uses it.

A crew member can decline or revoke location permission in their device settings at any time. The app keeps working, but features that depend on it will not: their employer may not allow a job to be started without a confirmed arrival, and the timer will not pause on its own.

Retention. The minute-by-minute breadcrumb trail is deleted after 90 days — it draws the map and nothing else depends on it. The timeline of what happened to the job clock (started, paused, resumed, finished, with the position at that moment) is kept for as long as the job record is kept, because it is the evidence behind hours that were paid.

The crew app can record how many steps were taken while a job was running, so walking during work is recorded alongside hours. It counts only within job windows — never a whole day, and never while no job is open.

On iPhone, this uses Apple’s motion coprocessor (CoreMotion), which keeps roughly seven days of step history on the device whether or not our app is running. The app asks for step totals for the periods a job was open. This requires the Motion & Fitness permission, which you can decline or revoke at any time.

On Android, the app does not count steps. The platform APIs available to us cannot report step history or count reliably in the background, so rather than publish an undercount that looks like a measurement, the app records those periods as unmeasured and the dashboard says so. The app does not request the Android ACTIVITY_RECOGNITION permission, and it is explicitly removed from the released build.

Step counts are a work record, not a health record. We do not read Apple Health or Health Connect, and we do not collect heart rate, sleep, workouts or any other health or fitness data.

Crews take photos and video as proof that a clean was completed and to document problems they find. The microphone is used only so recorded video has sound. When attaching an existing file, the app uses the operating system’s own photo picker — it receives the items you choose and has no access to the rest of your library.

This media is uploaded to our storage provider and attached to the job. It is available to the cleaning company, and — where the company shares it — to the customer for that property. Photos taken with the camera in the app are not saved to your device’s camera roll unless you save them yourself.

With your permission, we send push notifications about assignments, schedule changes, job timers and reminders. To do that we store a push token for each device, along with the device name, platform and OS version, so a message can be delivered and so tokens that stop working can be retired. Notifications can be turned off in your device settings.

Some of what a cleaning company keeps in Nítida would cause real harm if it leaked, so it gets specific handling. Social security or tax identification numbers, government ID numbers, bank account and routing numbers, and the access codes for a customer’s property are encrypted before they are stored (AES-256-GCM) and are never included in ordinary responses — screens show only whether a value exists.

Revealing one of those values is a separate, deliberate action that always writes an audit record of who revealed what and when. Door codes submitted through a public booking page are encrypted immediately and are not readable by the booking page afterwards.

Card payments are processed by Stripe. Card numbers are entered on Stripe’s own hosted pages and are never sent to, seen by, or stored on our servers. We keep the result — amount, status, and Stripe’s reference for the payment — so an invoice can be marked paid and refunded if needed.

• To provide Nítida: scheduling, dispatch, timekeeping, payroll, invoicing, and the customer-facing portal and booking pages.
• To authenticate people and keep accounts secure.
• To send transactional messages — assignment notifications, invoices, receipts, portal invitations, password and verification emails.
• To support customers who contact us, and to diagnose faults.
• To keep the service safe and reliable: rate limiting, fraud prevention, backups, and audit trails.
• To meet legal, tax and accounting obligations.

Where the GDPR or similar law applies, our legal bases are performance of a contract, our legitimate interests in operating and securing the service, consent for device permissions such as location, motion, camera and notifications, and compliance with legal obligations.

• We do not sell personal information, and we do not share it for cross-context behavioural advertising.
• We do not use your data for advertising, ours or anyone else’s.
• The apps contain no analytics, advertising or third-party tracking software. There is no advertising identifier, no ad network, no analytics SDK and no cross-app or cross-site tracking of any kind.
• We do not use personal information to train machine learning models.
• We do not track anyone’s location outside a running job.

With the cleaning company whose account the information belongs to, and with the service providers below who process it on our behalf under contract. We may also disclose information if the law requires it, to protect our rights or someone’s safety, or to a successor in a merger or acquisition — in which case this policy continues to apply until it is replaced and you are told.

• Breadcrumb location trail: 90 days, then deleted automatically.
• Job timeline, hours, jobs, invoices and payroll: for as long as the cleaning company keeps its account, and afterwards as required for tax, accounting and legal purposes.
• Photos and video: until the cleaning company deletes them or closes its account.
• Audit records of sensitive access: retained as a security record.
• Push tokens: until the device stops accepting notifications or the app is removed.

Records are generally deactivated rather than erased immediately, so that history stays consistent; see Deleting your account and data.

Traffic is encrypted in transit with TLS. Sensitive fields are encrypted at rest as described above. Access is scoped per company, and every request is checked against the account it belongs to. Sensitive reveals are audited. Access to production systems is limited to staff who need it.

No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your information we will notify you and the relevant authorities as the law requires.

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, to withdraw consent, and not to be discriminated against for exercising any of these rights. California residents have these rights under the CCPA as amended by the CPRA; residents of the EEA and the UK have them under the GDPR.

If your data is in a cleaning company’s account — you are their employee or their customer — contact that company first. They control the data and can act immediately. If you contact us instead, we will forward your request to them and help them answer it.

You can always control device permissions yourself: location, motion, camera, photos, microphone and notifications can each be granted or revoked in your device settings, at any time, without uninstalling the app.

To make a request to us directly, email privacy@aikoders.tech. We will respond within the time the applicable law allows. We may need to verify your identity before acting. EEA and UK residents may also complain to their local supervisory authority.

Crew and office users: your account belongs to your employer, so ask them to deactivate it — an administrator can do that from the dashboard, and access stops on the next request. To have your personal information erased rather than deactivated, email us at privacy@aikoders.tech from the address on your account, or ask your employer to make the request.

Customers of a cleaning company: ask the company you booked with, or email us and we will pass it on.

Cleaning companies: email us to close your account. We will delete or anonymise your data within 90 days, except where we are required to keep records for tax, accounting or legal reasons — for example invoices and payment records.

Deleting the app from your phone stops any further collection from that device, but does not by itself delete data already held in your employer’s account.

Nítida is workplace software and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, email us and we will delete it.

We are based in the United States and our service providers process data in the United States and other countries. If you are in the EEA or the UK, transfers of your information to the United States are made under appropriate safeguards, including the European Commission’s Standard Contractual Clauses where they apply.

We may update this policy as the product changes. The date at the top always reflects the current version. If a change materially affects how we handle your information we will give notice in the product or by email before it takes effect.

Questions, requests or complaints about privacy: privacy@aikoders.tech

AIKODERS LLC · aikoders.tech