Legal

Privacy Policy

Effective date: 28 September 2026

AwayClean is a small, independent project. This policy explains — in plain language — what data AwayClean collects when you use the website or the app, why, and what rights you have over it.

1. Who is responsible for your data

AwayClean is operated by Petrica Martinescu, a private individual based in Romania, acting as the data controller for the purposes of the EU General Data Protection Regulation (GDPR). You can reach the controller at hello@awayclean.com for any privacy question or request.

2. What AwayClean collects

AwayClean only collects what it needs to run the service: connecting to your Roborock robot, tracking who is home, and cleaning while you're away. Specifically:

• Account email — used to sign you in. AwayClean uses Supabase Auth with a one-time code sent to your email; there is no password to store.
• Household name and members — the name you give your household and the email addresses of the people you invite to it.
• People added without an account — a household owner can add a person who never signs in themselves (for example a partner, a child, a cleaner, or a spare phone). For them, AwayClean only holds the name or nickname the owner gives them and their "home" / "away" status — no email address, and no way for them to sign in. Their record is deleted the moment the owner removes them, or when the owner deletes their data.
• Presence status — whether each member is marked "home" or "away". This comes from a toggle in the app, or from a presence webhook you set up yourself (for example an iOS Shortcuts automation or a Home Assistant integration) — AwayClean never reads your device location directly.
• Roborock connection details — the email address of your Roborock account, and an encrypted session token ("context") issued by Roborock's own cloud after you sign in. Your Roborock password is never stored — it is used once, in memory, to complete the sign-in with Roborock, and discarded. The session token is encrypted at rest with AES-256-GCM before it is saved.
• Robot list — the vacuums linked to your household (model, nickname, status).
• Maps, room layouts and map snapshots — the floor maps and room data your robot reports, used to show you what was cleaned.
• Cleaning sessions, history and house event log — records of when cleaning started, paused or finished, and a log of household events (like someone connecting a robot or a member joining).
• Routines — the automation rules you set up (for example, what happens when everyone leaves).
• Feedback you send — the message itself, the type of feedback (idea, problem, question or praise), whether you agreed to be contacted about it and, if so, your email address. To help us understand and fix what you're telling us about, we also include some technical context: the app version, the page you were on, your household and its robot models, your browser, and your device's viewport and time zone.
• Account creation notice — when you create an account, the operator receives an email with your email address and the time you signed up, so we know the service is being used.

AwayClean does not access your precise location. Local geofencing happens on your own device or through your own automation tool, and only a simple "home" / "away" signal is sent to AwayClean.

3. Who else processes your data

AwayClean uses a small number of service providers ("processors") to run the service. None of them are permitted to use your data for their own purposes.

• Supabase — database, authentication and the backend functions that power the app. Hosted in the EU (Paris, France).
• Cloudflare — hosting and content delivery for this website and the app.
• Amazon Web Services (AWS) — a small Lambda function running in eu-central-1 (Frankfurt, Germany) that talks to Roborock's own cloud on your behalf to sign in and issue cleaning commands, and Amazon SES (also eu-central-1) which sends the notification email when you submit feedback or create an account.
• Roborock's cloud — your own Roborock account, which AwayClean connects to using an unofficial integration, under Roborock's own terms and privacy policy.
• Our email delivery provider — used by Supabase Auth to send you sign-in codes.
• Google (Gmail) — feedback and new-account notification emails are delivered to the operator's own mailbox, which is hosted on Gmail. This can involve a transfer of that content outside the European Economic Area, which Google covers with its own Standard Contractual Clauses.
• Meta — only if you consent to marketing cookies on this website (see our Cookie Policy). Meta does not receive any data from the app itself.

4. Why AwayClean processes your data (legal bases)

• Performance of a contract — processing needed to provide the service you signed up for (account, presence detection, cleaning automation).
• Consent — for marketing cookies (Meta Pixel) on this website, and for us to reply to feedback you send, if you tick that option; you can withdraw either at any time.
• Legitimate interest — for basic security logging, fraud prevention, keeping the service running reliably, and understanding and acting on the feedback you choose to send us.

5. How long data is kept

AwayClean keeps your data for as long as your account exists. You can delete your data at any time from the app, under Settings → Delete my data. After deletion, routine backups may retain a copy for up to 30 days before they are cycled out, after which no further copies remain.

Feedback you send is kept for as long as your account exists, and for at most 24 months in any case, whichever comes first. Deleting your data also deletes any feedback you've sent. The notification email itself, once delivered to our mailbox, isn't automatically deleted with it — email us at hello@awayclean.com and we'll remove it on request.

6. Your rights

Under GDPR you have the right to:

• Access the data AwayClean holds about you
• Correct inaccurate data (rectification)
• Delete your data (erasure) — available directly in the app, or by emailing us
• Restrict or object to certain processing
• Receive a copy of your data in a portable format
• Withdraw consent at any time, without affecting past processing
• Lodge a complaint with a supervisory authority

To exercise any of these rights, email hello@awayclean.com. If you are in Romania (or believe Romanian law applies), you can also complain to the National Supervisory Authority for Personal Data Processing (ANSPDCP) at dataprotection.ro.

7. International transfers

Most processing happens within the EU (Supabase in Paris, France and AWS in Frankfurt, Germany). Where a provider processes data outside the European Economic Area, AwayClean relies on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs).

8. Children

AwayClean is not directed at, and should not be used by, anyone under 16 years old. A household owner may add a child as a person without an account (see "People added without an account" above) — in that case AwayClean only ever processes the name or nickname the owner gives them and their home/away status, and the owner is responsible for that decision and for that data.

9. Cookies

This website uses a small number of cookies and similar technologies. See our Cookie Policy for full details and how to change your choice at any time.

10. Changes to this policy

If this policy changes materially, we'll update the effective date above and, where appropriate, let existing users know in the app or by email.

11. Contact

Questions about this policy or your data: hello@awayclean.com.