Privacy Policy
Last updated: 2026-08-17
This Privacy Policy explains how YuYu collects, uses and protects your personal data when you use the YuYu app and website.
Information we collect
Account details you provide when you register: full name, phone number and, optionally, an email address. Vehicle details you add: make, model, plate number, colour and body type. Your membership plan, remaining washes and wash history. Reservations you make, branches you bookmark, and reviews you write.
Location
If you allow it, we use your device location to show car washes near you and sort them by distance. Location is used while you are using the app and is not stored on our servers. You can refuse or withdraw this permission at any time in your device settings — the app still works and simply shows all branches instead.
Camera and photos
Camera and photo library access are used only when you choose to attach a photo to a review. We access only the images you explicitly select. Photos you attach to a review are stored with that review and shown to other customers and to the branch.
Your QR pass
Your membership is presented as a QR code that changes regularly and can be used only once. When staff scan it, the branch sees your name, phone number, vehicle and remaining washes so they can serve you. Partners may not use this information for their own marketing.
Payments
Payments are processed by our payment provider. We do not receive or store your card number. We keep only the amount, the provider used, the status and a transaction reference, so that we can link a payment to your membership and support you if something goes wrong.
How we use your data
To create and operate your membership, to verify your washes at partner branches, to process payments, to show you nearby branches and your booking history, to answer support requests, and to keep the service secure and diagnose faults. We do not sell your personal data and do not use it for third-party advertising.
Sharing
Data is shared with the partner car wash you visit, limited to what they need to serve you; with the payment provider that processes your payment; and with infrastructure providers that host the service under contract. We also disclose data where the law requires it.
Data stored on your device
Sign-in tokens are held in the device's secure storage (Keychain on iOS, Keystore on Android) and are removed when you sign out. The app also stores a local flag recording that you have seen the intro screens.
Data retention
We keep your account data while your account is active. After you close your account, we retain limited records where the law requires it, such as payment and accounting records, and delete or anonymise the rest.
Security
Traffic is encrypted in transit, passwords are stored hashed, and access to production data is restricted to authorised personnel. QR passes are single-use and short-lived, so a scanned code cannot be reused.
Your rights
You may request access to your personal data, correction of inaccurate details, deletion of your account, or a copy of your data. Some records must be kept where the law requires it, such as payment records.
Cookies
Our website uses essential cookies to keep you signed in and remember your language preference. The mobile app does not use advertising or tracking cookies.
Contact
For any privacy question or to exercise your rights, contact us at hello@getyuyu.app.