This Privacy Policy describes how Cleworks Oy, business ID 2512888-7 (“Service Provider”, “we”, “us”) collects, uses, shares, and protects personal data in connection with the Clebox service and related mobile and web applications (“Service”, also “Clebox”).
This document is the Privacy Policy for Clebox. By using the Service you acknowledge the practices described here. Our Terms of Service apply separately: Terms of Service.
Last updated: 15 September 2026
Data controller: Cleworks Oy, business ID 2512888-7.
Privacy and data protection inquiries, including access, correction, and deletion requests:
This policy covers personal and device data that we access, collect, use, store, or share when you use Clebox websites, APIs, and mobile apps that connect to our Service. It applies to account holders, invited users, and other people whose data is provided to us in connection with Clebox (for example installation or group contact details).
Depending on how you use the Service, we may collect and process the following categories of data:
We do not sell personal data. We do not use personal data for third-party advertising in Clebox.
We process personal data to:
Where the GDPR or corresponding laws apply, we rely on one or more of the following bases: performance of a contract with you; our legitimate interests in operating, securing, and improving the Service (balanced against your rights); your consent where required (for example certain cookies or optional processing); and compliance with legal obligations.
The Service may store cookies or similar technologies on your device that are necessary to provide the Service you requested (for example session cookies for signed-in use). We may also use cookies or similar tools to support security, usability, diagnostics, and fixing software defects. You can control cookies through your browser or device settings; disabling necessary cookies may prevent parts of the Service from working.
We may share personal data with:
Third-party services that you choose to use outside Clebox are governed by their own terms and privacy policies. We are not responsible for those third-party practices.
Our Service is operated primarily in connection with Cleworks Oy in Finland/EU. Some service providers may process data outside your country. Where required, we use appropriate safeguards for such transfers (for example EU Standard Contractual Clauses or equivalent mechanisms).
We retain personal data only as long as needed for the purposes described in this policy, including providing the Service, maintaining account and device history required for operations and support, complying with legal obligations, and resolving disputes. Retention periods depend on the type of data and the nature of your relationship with us. When data is no longer needed, we delete or anonymize it, unless longer retention is required by law.
We use appropriate technical and organizational measures to protect personal data, including encrypted transmission (HTTPS), hashed passwords, access controls, and session/token-based authentication. No method of transmission or storage is completely secure; we work to protect your data but cannot guarantee absolute security.
Subject to applicable law (including GDPR), you may have the right to access, rectify, erase, restrict, or object to certain processing of your personal data, and the right to data portability. Where processing is based on consent, you may withdraw consent at any time without affecting prior lawful processing. You may also lodge a complaint with a supervisory authority (in Finland: Office of the Data Protection Ombudsman).
To exercise these rights, contact us at info@clebox.fi.
If you have a Clebox account, you can request deletion of your account and associated personal data.
How to request deletion (web resource for Google Play and other users):
After verifying your request, we will delete your account and associated personal data, except where we must retain specific information for legitimate reasons such as legal compliance, security, fraud prevention, or resolving disputes. Any such retention will be limited to what is necessary. Account freezing alone is not treated as deletion.
If the Clebox mobile app provides an in-app account deletion option, you may also use that option; otherwise use the email process above. Deletion requests submitted by email are handled as an external web/email resource for account deletion.
The Service is intended for users who are at least 18 years of age, or younger users with guardian consent as described in our Terms of Service. We do not knowingly collect personal data from children for child-directed use. If you believe we have collected data from a child inappropriately, contact us and we will take appropriate steps.
We do not sell personal or sensitive user data. We limit access, collection, use, and sharing of personal and sensitive user data to purposes needed to provide and improve Clebox and to comply with law, as described in this policy.
We may update this Privacy Policy to reflect changes in the Service, law, or our practices. The updated policy takes effect when published at this URL or when otherwise notified. Continued use of the Service after an update means you acknowledge the revised policy. The “Last updated” date at the top will be revised when material changes are made.
Questions about this Privacy Policy or Clebox personal data processing: info@clebox.fi.
By using Clebox you acknowledge that you have read this Privacy Policy.