Privacy policy
Effective 8 October 2026
WASHIT is a doorstep car wash service in Mumbai. This policy explains what we collect through the WASHIT app, the WASHIT Partner app and this website, why, who we share it with, and the choices you have. It is written to meet India's Digital Personal Data Protection Act, 2023 (the "DPDP Act").
Who we are
WASHIT ("we", "us") operates the service and decides how your personal data is used. You can reach us, including our Grievance Officer, at dailycarwashcomp@gmail.com, WASHIT, Mumbai, Maharashtra, India.
What we collect
| Data | Why |
|---|---|
| Mobile number | To sign you in with a one-time code, and to identify your account. |
| Name and, if you give it, email | To address you and to send receipts. |
| Your cars (make, model, registration number, type) | To price the wash and so your washer finds the right car. |
| Addresses and the map pin you place | To send a washer to where your car is parked and check we serve that area. |
| Your location while you place that pin | Only if you allow it, only while you are choosing the spot, never in the background. |
| Bookings, payments, invoices and refunds | To provide and bill the service and to meet tax and accounting law. |
| Before-and-after photos of your car | Taken by the washer at every job, as the record of the work if anything is disputed. |
| Support messages and ratings | To help you and to keep the quality of the service up. |
| Push notification token and app language | To tell you about your bookings, in your language. |
| Technical logs (such as IP address and request times) | To keep the service secure and working. |
If you work with us through WASHIT Partner
We also collect the details you give when you apply (such as the vehicle you travel on and the areas you work in), the results of identity verification (we do not store Aadhaar numbers), your location while you are on a job, the jobs you do and what you earn, and the details needed to pay you. Your location is shared with the customer only while you are on the way to and at their job; we keep that location trail for seven days, for resolving disputes about arrival times.
What we do not do
- We do not sell your personal data, and we do not show advertising.
- We do not track you across other companies' apps or websites.
- Washers never see your phone number. They see your name, your car and, once a job is theirs, the address to go to.
- We do not store card or bank details. If you pay online, our payment provider handles them.
Who we share it with
- Your washer, as described above, and you see your washer's name and their location while they are on the way.
- Service providers who run parts of the service for us, under contract and only for that purpose: Google Cloud and Firebase (hosting, database, sign-in, notifications and file storage), Mapbox (maps) and, when online payment is offered, Razorpay (payments).
- Authorities, when the law requires it.
Our database and servers run in Google Cloud's Mumbai region. Some providers, such as Firebase Authentication and push notification services, may process data outside India, as the DPDP Act permits.
How long we keep it
We keep your account data until you delete your account. When you do, we remove your name, email, saved cars and addresses and your devices. We keep bookings, payments and invoices for as long as Indian tax and accounting law requires, which is currently up to eight years, together with the phone number that links them. Washer location trails are kept for seven days.
Your rights
Under the DPDP Act you can ask us for a summary of your personal data and how we use it, ask us to correct or complete it, ask us to erase it, withdraw consent, nominate someone to act for you, and raise a grievance. Email dailycarwashcomp@gmail.com and we will respond within the time the law sets. If you are not satisfied, you may complain to the Data Protection Board of India.
Deleting your account
In the app, open Account and tap Delete account. It cancels any upcoming bookings and deletes your account straight away. You can also email us. Details are on the account deletion page.
Children
WASHIT is for people aged 18 and over. We do not knowingly collect data from children.
Security
Data travels encrypted, every request is checked against your signed-in identity, and each account can only see its own data. No system is perfectly secure; if a breach affects you, we will tell you and the Data Protection Board as the law requires.
Changes
We will post any change here with a new effective date, and tell you in the app if it matters to you.