Privacy Policy

This policy explains what personal data the LazerWash app collects, why, and the choices you have. It applies to the LazerWash mobile app and the services behind it.

Who we are

The data controller is LazerWash AB, Malmö, Sweden. For any privacy question or to exercise your rights, contact privacy@lazerwash.se.

What we collect

• Account & identity: your mobile phone number (used to sign you in with a one-time code), your name, and — if you choose to add it — your email address.
• Vehicles: the registration plates you add, so a wash can be started for the right vehicle.
• Payments & wallet: your wallet balance, top-ups, and transaction history. Card details are entered directly into our payment provider (Stripe) and are never stored on our servers — we keep only a token and a display label such as “Visa ····4242”.
• Wash activity: the washes and sessions you start, their cost, and receipts.
• Location: only when you open “Find us”, and only to show the nearest wash bays and directions. We do not track your location in the background.
• Technical data: basic device and app information needed to run the service securely and diagnose problems.

How we use your data, and our legal basis

• To provide the wash service, run your wallet, and start sessions — performance of our contract with you.
• To authenticate you by SMS one-time code and to send wash receipts by text — performance of our contract.
• To keep the service secure, prevent fraud, and improve it — our legitimate interests.
• To show nearby bays using your location — your consent, which you can withdraw at any time in your device settings.
• To meet accounting and tax obligations — legal obligation.

Who we share it with

We do not sell your data. We share it only with the service providers that make the app work, acting as our processors under contract:

• Stripe— payment processing (cards, Apple Pay, Google Pay).
• 46elks — sending the SMS sign-in codes and receipts.
• Google Cloud — secure hosting of the service in the EU.

How long we keep it

We keep your account data for as long as your account is active. Payment and transaction records are retained for as long as Swedish accounting law requires (currently seven years). When you delete your account, we remove or anonymise your data except for what we must keep by law.

Your rights

Under the GDPR you have the right to access, correct, delete, restrict, or object to our use of your data, and to receive a copy in a portable format. You can also withdraw consent at any time. To make a request, email privacy@lazerwash.se. You may delete your account and data at any time — see the Support page for how.

If you believe we have handled your data improperly, you may lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), imy.se.

Security

Data is transmitted over encrypted connections and stored in the EU. Access is limited to what is needed to operate the service.

Children

LazerWash is intended for adults who own or operate a vehicle and is not directed at children.

Changes

We may update this policy; material changes will be reflected by the “Last updated” date above.