Privacy policy

What we store

• Your name, email address and, if you provide one, your phone number.
• Your vehicles: plate number, make, model, colour, type and size.
• Your memberships, the price you paid, and your invoices.
• Every wash: when, at which branch, and which attendant approved it.
• Sign-in records, including the address you connected from, so that you can review and end sessions you do not recognise.

What we never store

• Your card number, expiry date or security code. Card details are entered on the payment provider's own page and never reach this application. We keep only the card brand and last four digits, so you can recognise a payment.
• Your password. Only an Argon2id hash is stored, which cannot be reversed into the original.
• Your membership QR code. Only a one-way digest is kept, so a copy of our database would not yield a usable code.

Marketing

Marketing consent is asked for separately from the consents required to hold an account, is off by default, and can be withdrawn at any time in your profile. Turning it off never affects service messages about your membership.

Deleting your account

You can delete your account from your profile. Your name, email address, phone number and plate numbers are removed. Invoices, payments and wash records are kept without your personal details, because they are financial and operational records the business is required to retain. Deletion is not reversible.

Who can see your data

An attendant scanning your code sees your name, vehicle, plan and remaining balance — nothing else. A branch manager sees activity at their own branches only. Administrators can see account records, and every such action is written to an audit log.

Contact

To ask what we hold about you, or to request deletion: [email protected]. You can also delete your account yourself from your profile.