Privacy Policy

CleanProof is operated by Simeon Hagmüller, Austria. Contact: hello@cleanproof.io

When you use CleanProof we collect:

• Email address (via authentication)
• Phone number (for verification, stored as a hash — not the raw number)
• GPS coordinates of cleanup locations
• Before and after video footage of cleanups
• Device fingerprint (for fraud prevention)
• Reputation score and activity history
• Lightning address (if provided for withdrawals — stored in your profile)
• Interview video and photo content (if you participate in a coordinator-recorded interview with consent)

Funders additionally provide:

• Name and contact details submitted via inquiry form
• Lightning payment hash for your pool deposit

• Email and phone: to authenticate your identity and prevent Sybil attacks
• GPS and video: to verify cleanups are genuine and create permanent proof of impact
• Device fingerprint: to detect and prevent fraudulent submissions
• Activity history: to calculate reputation scores and rewards

We process your data on the basis of:

• Contract performance: to provide the CleanProof service you signed up for
• Legitimate interests: fraud prevention and platform integrity
• Consent: for promotional use of cleanup footage (you may withdraw consent at any time)

The cryptographic record of each cleanup -- its integrity hashes, GPS coordinates, star rating, and reward -- is retained permanently. This is fundamental to CleanProof's verification architecture: these records back the receipts issued to funders and cannot be deleted without invalidating proofs already relied upon.

The associated media -- before/after video and selfie -- is retained as public proof of the cleanup. A cleaner may request removal of their own media at any time (see section 7); when they do, the video and selfie are deleted while the cryptographic record is retained, and the cleanup's proof page notes that the media was removed at the cleaner's request.

Account data is retained while your account is active and for 2 years after account deletion.

We do not sell your data. We share minimum necessary data with service providers solely to operate the platform:

• Twilio (SMS verification — receives your phone number to send a verification code)
• Railway (infrastructure — hosts the self-custodial Lightning node that sends payouts)
• Alby relays (Nostr relays — carry encrypted payment commands between CleanProof and our Lightning node; message contents are encrypted in transit)
• Resend (email delivery — receives your email address to send transactional and notification emails)
• Base44 (platform infrastructure — hosts all application data)

All service providers are contractually required to process data only as instructed.

You have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Delete your account, and remove your own cleanup media -- video and selfie -- at any time; the media is deleted while the cryptographic proof record is retained (section 5)
• If you appear in cleanup footage and are not a CleanProof user, ask us to restrict or remove that footage (section 8)
• Object to processing
• Data portability

To exercise these rights contact hello@cleanproof.io

Cleanups are filmed in public spaces, so passers-by may incidentally appear. We film to verify that cleanups are genuine -- not to identify or track anyone -- and we do not run facial recognition on people in the footage. Our lawful basis for this incidental processing is our legitimate interest in producing fraud-resistant proof of real-world environmental cleanups, balanced against the privacy of people who appear, and supported by data minimisation (cleaners are asked to aim at the litter and the work, not at people) and the removal right below.

If you appear in cleanup footage, email hello@cleanproof.io with the approximate location and date. By default we make the footage non-public -- removing it from public pages and any promotional use -- while retaining it privately for verification. Where footage centres on an identifiable person and making it non-public is not enough, we remove it. We review each request individually.

CleanProof uses only essential cookies required for authentication. No advertising or tracking cookies are used.

All data is encrypted in transit and at rest. We use industry-standard security practices. In the event of a data breach affecting your personal data we will notify you within 72 hours as required by GDPR.

CleanProof is not intended for users under 13 years of age. We do not knowingly collect data from children under 13.

We may update this policy. We will notify users of significant changes via email. The current version is always available at cleanproof.io/privacy.

Data controller: Simeon Hagmüller, Austria

Email: hello@cleanproof.io