This policy explains how Washkrew ("WashKrew", "we", "us") collects, uses, shares and protects personal data when you use washkrew.com, the WashKrew app for customers and the WashKrew Captain app for captains. It is written to meet India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, and the privacy rules of the Apple App Store and Google Play.
The short version
- We collect only what we need to arrange washes, verify captains and handle payments.
- We do not sell your data, show ads, or track you across other apps and websites.
- Wash photos are deleted 90 days after the wash. Captain ID documents and selfies are deleted within 90 days of our decision on the application.
- Payment and invoice records are kept for 8 years because Indian tax law requires it.
- You can delete your account at any time in the app, or request it at washkrew.com/delete-account.
Who we are
Washkrew, Works/Office No. 08 (FF), Block: MART, Mahagun Moderne, Plot No. GH-02, Sector 78, Noida, Uttar Pradesh 201301, India.
Email info@washkrew.com or call +91 80885 16875 (24 hours a day, every day). Our Grievance Officer's details are at the end of this policy.
What we collect from customers
- Account: your name and mobile number. We use your mobile number to sign you in with a one-time code.
- Vehicles: vehicle type, model and registration number.
- Location: your saved address, parking details and the spot you pin on the map. The app asks before using your device location, and only while you are using it.
- Bookings: wash type, time window, price, status, your ratings and feedback.
- Photos, videos and voice notes you choose to add, for example to show where your vehicle is parked.
- Payments: payment status and reference numbers from Razorpay, your WashKrew wallet balance and history. We never see or store your card number, CVV, UPI PIN or net banking password.
- Support: messages and details you send us when you ask for help.
What we collect from captains
- Account: your name, mobile number and preferred language.
- Identity verification: a photo of your Aadhaar card or other ID and a selfie, so our team can confirm who you are. You can upload a full or a masked Aadhaar (with only the last 4 digits showing). We recommend the masked version.
- Payout details: your bank account or UPI ID, so we can pay your earnings.
- Work details: your service area, working hours, online status, job history, ratings and earnings.
- Location during jobs: when you use a job step such as "arrived", the app sends your current location to confirm you are at the vehicle. The app does not track you in the background.
- Photos: the before and after photos you take of each wash.
What we collect automatically
- Device model, operating system, app version and a notification token, so we can send you job and booking updates.
- Error reports and server logs, which can include your IP address, so we can keep the service secure and working.
We do not use advertising identifiers, advertising networks or third-party analytics tools.
Our website
washkrew.com does not use tracking or advertising cookies. To show whether WashKrew is live in your city, the site sends your IP address to ipapi.co, which returns an approximate city. We do not store your IP address; the city is remembered in your own browser for one day. If you use the account deletion form, we receive the details you enter.
How we use your data
- To provide the service: match your booking with a captain, show each side the details needed for the job, share wash photos and handle your confirmation and rating.
- To verify captains: our team reviews ID documents, selfies and payout details. Automated checks help them spot unclear photos and compare the selfie with the ID photo, but a person always makes the approval decision.
- For payments: to take payments, manage wallet credit, pay captains, issue invoices and meet tax and accounting laws.
- For support and safety: to answer questions, resolve complaints and disputes, and prevent fraud and misuse.
- For notifications: to send booking and job updates. We will not send promotional messages unless you agree to receive them, and you can stop them at any time.
- To keep the service working: to find and fix errors and protect our systems.
- To meet the law: where a law, court or government authority requires it.
We process your data on the basis of the consent you give when you create an account and when you turn on optional features, and for the legitimate uses the law allows, such as meeting legal obligations.
Optional AI wash-photo check
This check is off by default. For each booking, you can turn on "AI wash photo check" after you pay. If you do, the captain can send that booking's four after-wash photos to Google Vertex AI (Gemini) for a quality suggestion. The photos may show your number plate and the surroundings. ID documents, selfies and bank details are never sent.
The suggestion only helps. A person still decides any complaint or refund. You can turn the check off at any time before the photos are sent. Captains can always send photos without the AI check.
Face checks on captain selfies
When a captain submits a selfie, our photo-checking service, which runs on Google Cloud, detects the face and compares it with the approved onboarding selfie while that reference is retained. After that reference is deleted, the fresh job selfie requires human verification before the job can continue. It also checks for blurry or dark images. These results only help our reviewers. They are not used for any other purpose, and they are deleted with the ID documents.
Who we share data with
- Between customers and captains: your assigned captain sees your name, vehicle, location and parking details, and the photos for that job. You see your captain's name, job updates and the wash photos. Neither side sees the other's ID documents, payment details or bank details.
- Service providers who work for us:
- Google: Firebase and Google Cloud for sign-in, databases, file storage, servers and notifications; Google Maps and Places for maps and address search; Vertex AI, only for the optional check above.
- Razorpay: payments.
- ipapi.co: city estimate on our website.
- When the law requires it: with courts, police or government authorities, or when needed to protect someone's safety or prevent fraud.
- If our business changes: if WashKrew is merged or acquired, your data would move only under protections at least as strong as this policy, and we would tell you first.
These providers may use your data only to provide their service to us, and must protect it at least as well as this policy does. We do not sell, rent or trade your personal data, and we do not share it for advertising.
Where your data is stored
Your data is stored mainly on Google Cloud servers in Mumbai, India. Some providers, such as Google and Razorpay, may process data in other countries where their systems run, in line with Indian law.
How long we keep your data
| Data | How long we keep it |
|---|---|
| Account profile, saved addresses and vehicles | While your account is open. Deleted when you delete your account. |
| Wash photos, videos and voice notes | 90 days after the wash. If a complaint is open, until it is resolved. |
| Captain ID documents and selfies | Up to 90 days after we approve or decline the application. Deleted straight away if you delete your account. We keep a record that verification was done. |
| Captain payout details | While the captain account is open. |
| Captain job locations | 90 days after the wash. |
| Payment, invoice, wallet, earnings and payout records | 8 years, as Indian tax and accounting laws require. |
| Support messages and complaints | 1 year after the issue is closed. |
| Account deletion requests | 3 years, as a record that we completed your request. |
| Application/server logs and error reports | Up to 90 days (currently 30 days for application logs). Google-required security/audit logs have a provider-locked 400-day retention period and cannot be deleted earlier. |
When the period ends, we delete the data or remove anything that identifies you, except the mandatory provider audit records described above. Deleted Storage objects may remain recoverable in the private provider recovery window for 7 days. We currently have no configured Firestore backup schedules.
Your rights and choices
You have the right to:
- see a summary of the personal data we hold about you and how we use it;
- correct or update your data;
- delete your account and personal data;
- withdraw your consent;
- nominate someone to exercise your rights if you die or are unable to;
- have your complaints heard.
Most of these you can do in the app. You can edit your profile, turn the AI wash-photo check on or off, change app permissions in your phone settings, or delete your account. For anything else, email info@washkrew.com. We may need to confirm it is really you before we act, and we respond within 30 days.
Withdrawing consent does not affect anything we did before, and we may still keep records the law requires. If you are not satisfied with our response, you can complain to the Data Protection Board of India.
App permissions
- Location: to find your address and pin your vehicle. For captains, to show nearby jobs and confirm arrival. Only while the app is in use.
- Camera and photos: to add vehicle photos, wash photos and captain documents.
- Microphone: to record a voice note or video for the captain or for help.
- Notifications: for booking and job updates.
You can turn any permission off in your phone settings. Features that need it will stop working until you turn it back on.
How we protect your data
Data is encrypted in transit and stored in private, access-controlled systems. Only authorised team members can see ID documents and payout details, and only for review and payouts. Razorpay handles card and UPI details on its own secure systems.
No system is completely secure. If a breach affects your personal data, we will tell you and the authorities as the law requires.
Children
WashKrew is only for people aged 18 and over. We do not knowingly collect data from anyone under 18. If we learn that we have, we will delete it.
Changes to this policy
When we update this policy, we change the date at the top. If a change is significant, we will tell you in the app before it takes effect.
Contact and Grievance Officer
For any privacy question, request or complaint, contact our Grievance Officer:
- Name: Aman
- Designation: Grievance Officer
- Email: info@washkrew.com
- Phone: +91 80885 16875
- Address: Works/Office No. 08 (FF), Block: MART, Mahagun Moderne, Plot No. GH-02, Sector 78, Noida, Uttar Pradesh 201301
We acknowledge every complaint within 48 hours and resolve it within one month.