Carwash POS

Privacy Policy

Carwash POS — point-of-sale & business management app

Effective date: September 17, 2026 All data stored locally on-device
Short version: Carwash POS stores business data — including transactions, customer and vehicle records, expenses, staff and local user accounts — exclusively on your device. We do not run servers, sell data, or display ads. The only external service used is RevenueCat, solely to manage in-app purchases.

1. Who We Are

Carwash POS is an independently developed mobile application designed to help car wash businesses manage sales, customer and vehicle records, expenses, staff commissions, local user access, and business analytics.

If you have any questions about this policy, you can reach us at the contact information listed at the bottom of this page.

2. Data We Collect & Store

All data listed below is created by you or your staff and stored locally on the device running the app. It is never transmitted to our servers (we have none).

Data type What it includes Storage
Business profile Business name, address, email, phone number Local only
Transaction records Date/time, sale date, total amount, payment method, vehicle identifier, services rendered, customer details captured with a sale, and archive/restore audit information Local only
Customer & vehicle records Vehicle identifier (such as a licence plate), customer name, contact details, address, tax identifier, vehicle details, and locally calculated visit history Local only
Staff / stewards Names, active status, commission earnings history Local only
Local user accounts Manager or cashier name, role, and a salted hash of the six-digit PIN used to unlock the app; the readable PIN is not stored Local only
Services & pricing Service names, price types, commission configuration Local only
Expense records Expense tags, amounts, dates, payment methods, vendor and note fields, and archive/restore activity Local only
Analytics aggregates Revenue, commissions, expenses, operating profit, customer visits, peak hours/days, and transaction counts — computed on-device Local only
App preferences Theme selection and other UI settings Local only
Purchase entitlement status Whether a one-time Pro purchase is active (verified via RevenueCat) RevenueCat

3. Third-Party Services

The only external SDK integrated into Carwash POS is RevenueCat, used exclusively to manage in-app purchases and validate purchase receipts.

RevenueCat may collect:

This information is handled by RevenueCat under their own privacy policy. We do not receive personally identifiable information from RevenueCat beyond whether your Pro purchase entitlement is active.

RevenueCat privacy policy: revenuecat.com/privacy

The app also uses Google Fonts to load typography. Fonts may be fetched from Google's servers on first use; thereafter they are cached on-device. Google's privacy policy applies to those requests: policies.google.com/privacy

4. What We Do NOT Do

5. Data Exports

The app lets you export sales, analytics, and expense reports as Excel (.xlsx) files, and share receipts or exports through the native share sheet. When you share an export or receipt, the selected file or contact information is transferred by whichever app you choose (email, messaging, cloud storage, etc.) — that transfer is outside the scope of this policy.

We recommend treating exported reports as confidential business documents and sharing them only with authorised recipients.

6. Data Retention & Deletion

All app data lives in a local database on your device. You are in full control:

Deleting the app does not remove copies you have already exported, shared, or saved in a backup; those copies are controlled by the destination or storage provider you selected. Because data is never uploaded to our servers, there is no server-side data to request deletion of.

7. Children's Privacy

Carwash POS is a business-management tool intended for use by adults operating or working at a car wash business. We do not knowingly collect personal information from children under 13 (or the applicable age in your jurisdiction).

8. Security

Because all data stays on your device, the primary security controls are those provided by your mobile operating system — device lock screen, file-system encryption (enabled by default on modern iOS and Android devices), and app sandboxing.

If local manager or cashier accounts are enabled, their six-digit PINs are stored only as salted hashes and the app can lock access between sessions. This app-level lock complements, but does not replace, your device's passcode or biometric lock.

We recommend keeping your device's operating system up to date and using a strong device passcode or biometric lock.

9. Changes to This Policy

If we make material changes to this privacy policy, we will update the effective date at the top and note the change in the app's update release notes. Continued use of the app after changes are posted constitutes acceptance of the updated policy.

10. Contact Us

If you have questions or concerns about this privacy policy, please contact us:

Please update the contact details above before publishing this policy.