Privacy Policy

BidaWash Inc. ("BidaWash", "we", "us") operates the BidaWash mobile application and physical car-wash branches in the Philippines. This policy explains what personal information we collect, why we collect it, and the rights you have over your data under the Philippines Data Privacy Act of 2012 (Republic Act No. 10173).

1. Information we collect

Information you give us

• Account details: your name and email address (required), and phone number (optional) when you create an account or update your profile.
• Support communications: the contents of any email you send to support@bidawash.com.

Information collected automatically

• Device and diagnostic data: anonymous crash reports, performance data, and basic device information (model, OS version) collected by our error-monitoring provider, Sentry.
• Service logs: timestamps and endpoints, kept short-term for security and troubleshooting.

Location — only when you use it

If you tap "Sort by nearest" on the Locations tab, we ask iOS or Android for your device location so we can sort branches by distance. Your coordinates are used only on your device — they are never sent to our servers, never stored, and never shared. You can decline the permission prompt and continue using the app; you simply won't be able to sort by nearest.

We do not collect: contacts, photos, camera, microphone, health, or financial information.

2. How we use your information

• To create and manage your BidaWash account.
• To authenticate you and send account-related emails (verification, password reset).
• To operate and improve the app, diagnose bugs, and prevent abuse.
• To respond to your support requests.

We do not sell your personal information, and we do not use it for advertising.

3. Who we share your information with

We share the minimum data needed to run the service, with:

• Supabase Inc. — our authentication and database provider.
• Sentry — error and performance monitoring (anonymized).
• Resend — email delivery for verification and password resets.

We may disclose information if required by law, court order, or a lawful request from Philippine authorities.

4. How long we keep your information

We keep account data for as long as your account is active. When you delete your account (in-app or by emailing us), we permanently remove your record from our authentication and database systems immediately. Encrypted backups roll off within 30 days.

5. Your rights

Under RA 10173, you have the right to:

• Access — see what personal data we hold about you.
• Correct — fix inaccurate data (edit in-app, or email us).
• Delete — remove your account and data. Use Account → Delete account in the app, or email support@bidawash.com. See our account deletion page for the full flow.
• Object — object to specific uses of your data.
• Portability — request an export of your data.
• File a complaint — with the National Privacy Commission (privacy.gov.ph).

6. Security

We use industry-standard encryption in transit (HTTPS/TLS) and at rest. Passwords are hashed and never stored in plain text. Session tokens are held in the device's secure keychain (iOS Keychain, Android Keystore).

7. Children

BidaWash is not directed to children under 13, and we do not knowingly collect information from children.

8. Changes to this policy

We may update this policy from time to time. Material changes will be announced in-app or by email at least 14 days before they take effect.

9. Contact

Data Protection Officer BidaWash Inc. support@bidawash.com