Car wash portal

Privacy Policy

Last updated: 19 November 2025

Woshh (“we”, “us”, “our”) operates the Woshh mobile application, the Woshh website, and the Woshh business portal (together, “Services”). This Privacy Policy explains how we collect, use, disclose, and protect information across all parts of the platform.

We comply with the UK GDPR, the Data Protection Act 2018, and all relevant payment and data-security standards.

By using our Services, you agree to the practices described here.

1. Information We Collect

We only collect information necessary to operate the Woshh platform, process payments, manage business accounts, improve performance, and ensure security.

1.1 Information Customers Provide (Woshh App)

We keep the customer experience anonymous and minimal. Customers do not create accounts using names, emails, or phone numbers.

We may collect:

  • Anonymous Firebase Authentication ID

  • Optional vehicle registration number (if saved for faster checkout)

  • Payment preferences (card on file through Stripe)

  • Wash selections, purchase history, timestamps

  • App interactions (non-personalised analytics)

We never ask customers for names, addresses, or contact details unless provided voluntarily for receipts.

1.2 Information Car Wash Businesses Provide

Businesses use the Woshh dashboard to manage their wash, receive payments, and update settings. We collect:

  • Business name and trading details

  • Account holder contact information (email, phone number)

  • Login credentials (email + password)

  • Opening hours, pricing, available wash types

  • Stripe Connect details for payouts

  • KYC information submitted through Stripe (ID checks, business verification)

  • Tax or payout-related details required by law

1.3 Automatically Collected Information

Device + Technical Data

We automatically collect:

  • Device type and operating system

  • IP address

  • Browser type

  • App version

  • Crash logs and error reports

  • Security flags (fraud detection, unusual activity)

This helps us secure the platform and keep everything working smoothly.

Location Data (Customers)

With your permission, we collect approximate location to:

  • Show nearby Woshh-enabled car washes

  • Improve accuracy and convenience

  • Detect wash arrival and enhance the user flow

You can disable location at any time in your device settings. Functionality may be reduced without it.

Firebase Analytics

We use Firebase Analytics to understand how the app is used. This includes:

  • Pages/screens viewed

  • Buttons tapped

  • Feature usage patterns

  • Performance and stability

  • Device type (not identity)

Analytics are aggregated and do not identify individuals.

Payment Data (via Stripe)

Stripe collects and processes:

  • Card type

  • Last 4 digits

  • Card expiry

  • Country of issue

  • Payment tokens

  • Fraud checks

  • Billing details (if voluntarily provided)

We do not store or access full card numbers.
Stripe is PCI-DSS compliant.

2. How We Use Your Information

We use information only to operate and improve the Woshh platform. Specifically:

To Provide the Core Service

  • Locate nearby car washes

  • Process payments securely

  • Generate wash confirmations

  • Allow businesses to manage their wash settings

  • Deliver receipts via Stripe if requested

To Maintain Security

  • Prevent fraud

  • Detect unusual activity

  • Protect accounts and payments

  • Maintain platform integrity

To Improve Performance

  • Diagnose errors and crashes

  • Optimise user flows

  • Enhance speed and reliability

To Comply with Legal Requirements

  • Tax, accounting, and financial record-keeping

  • Regulatory compliance through Stripe

  • Responding to lawful requests

We do not use your information for advertising, profiling, or selling data.

3. Legal Basis for Processing (UK GDPR)

We process data under the following lawful bases:

  • Performance of a Contract (payments, app functionality, dashboard operation)

  • Legitimate Interests (security, fraud prevention, app improvement, analytics)

  • Consent (location services, stored vehicle registration, receipt emails)

  • Legal Obligation (financial reporting, tax compliance, KYC requirements)

4. How and Why We Share Information

We share information only with trusted partners essential to operating the platform.

4.1 Stripe

For secure card payments and business payouts.

4.2 Google Firebase / Google Cloud

For authentication, database storage, analytics, hosting, crash reports, and push notifications.

4.3 Service Partners

For server hosting, security, and infrastructure support.

4.4 Regulators / Legal Authorities

If required to comply with law or protect rights.

We never sell or share information with advertisers or third-party marketers.

5. Data Security

We use strong technical and organisational measures to safeguard your data:

  • Encrypted communications (HTTPS/TLS)

  • Stripe PCI-DSS Level 1 security

  • Google Cloud encryption at rest and in transit

  • Firebase Authentication for secure logins

  • Strict access controls

  • Regular monitoring and auditing

No system is completely risk-free, but we take all reasonable steps to protect your information.

6. Data Retention

We retain data only as long as necessary for:

  • Providing the Services

  • Required payment and financial records

  • Preventing fraud

  • Resolving disputes

  • Accounting and audit obligations

You may request deletion of your data (see Section 9) unless we are legally required to retain certain information.

7. International Transfers

Our infrastructure uses Google Cloud and Stripe, which may store and process data in the UK, EU, or other regions.

Transfers are protected through:

  • Standard Contractual Clauses (SCCs)

  • GDPR-compliant safeguards

  • Industry-standard encryption

8. Children’s Privacy

The Woshh app is not intended for children under 16.
We do not knowingly collect data from children.

9. Your Privacy Rights

Under the UK GDPR, you have the right to:

  • Access your data

  • Request correction

  • Request deletion

  • Object to processing

  • Withdraw consent (e.g., location access)

  • Request data portability

  • Restrict processing

  • Lodge a complaint with the ICO

To exercise these rights, contact:
contact@woshh.com

10. Third-Party Links

The Services may contain links to external websites.
We are not responsible for the privacy practices of those sites.

11. Changes to This Privacy Policy

We may update this Privacy Policy when necessary.
Changes will be posted with an updated “Last updated” date.

12. Contact Us

For questions or requests regarding this Privacy Policy:

Woshh
Email: contact@woshh.com