Privacy Policy

1. Who We Are

RideFresh Solutions ("RideFresh," "we," "us," or "our") operates the RideFresh Driver Hub mobile application. We provide rideshare drivers with discounted car wash services at participating stations.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our mobile app, website, or related services (collectively, the "Service").

By using the Service, you agree to the practices described in this Privacy Policy.

2. Information We Collect

Information You Provide Directly

• Account registration: name, phone number, email address, and password
• Rideshare platform: which platform you drive for (e.g., Uber, Lyft) — used only to display relevant perks
• Home station preference: the car wash station(s) you prefer — stored as a station ID, not a GPS location
• Profile photo: if you choose to upload one
• Feedback and messages: any feedback or support messages you submit through the app
• Referral codes: if you share or use a referral code

Information Collected Automatically

• Check-in records: date, time, station, wash type, and amount for each car wash visit
• Login session data: device platform (iOS/Android), whether you saved your credentials, and the approximate time you logged in
• Promo code usage: which promo codes you redeem and when
• App version and device type: to diagnose bugs and improve the experience

Information We Do NOT Collect

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Provide car wash check-in services at participating stations
• Track your wash count to unlock tier benefits (Regular, Silver, Gold, Platinum)
• Process referral credits and promotional discounts
• Send transaction confirmations (if enabled)
• Respond to your feedback and support requests
• Detect and prevent fraud or abuse of free-wash entitlements
• Improve the app and diagnose technical issues
• Comply with legal obligations

We do not use your personal information for advertising, profiling, or sale to third-party marketers.

4. How We Share Your Information

Car Wash Stations

When you check in at a station, we share your name, wash type, and transaction amount with that station's operator so they can provide your service. Stations do not receive your phone number, email address, or payment card details.

Service Providers

We share data with carefully selected vendors who help us operate the Service:

• Stripe, Inc. — payment processing (see Section 5)
• Cloud infrastructure providers — secure hosting and database storage
• Transactional email providers — for receipts and password-reset emails (if applicable)

Legal Requirements

We may disclose your information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect our rights or the safety of our users.

Business Transfers

If RideFresh is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via in-app notification or email before your data is subject to a different privacy policy.

We never sell your personal information to third parties.

5. Payments & Stripe

All in-app payments are processed by Stripe, Inc., a PCI-DSS Level 1 certified payment processor. When you make a payment:

• Your payment card details are entered directly into Stripe's secure interface and are never transmitted to or stored by RideFresh servers
• RideFresh receives only a payment confirmation, amount, and a non-sensitive Stripe payment intent ID
• Stripe's use of your payment data is governed by Stripe's Privacy Policy

6. Data Security

We protect your data using industry-standard practices:

• All data in transit is encrypted using HTTPS/TLS
• Passwords are hashed using bcrypt — we cannot retrieve your plaintext password
• Session tokens are HMAC-signed with a server-side secret and expire after 90 days
• Sensitive operations are protected by rate limiting to prevent brute-force attacks
• Database access is restricted to our application servers — no direct public database access

Despite these measures, no method of electronic storage or transmission is completely secure. We encourage you to use a strong, unique password and to contact us immediately if you suspect unauthorized access to your account.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account data: retained until you delete your account
• Check-in history: retained for up to 3 years for business records and dispute resolution, then deleted or anonymized
• Login session logs: retained for 12 months, then purged
• Feedback submissions: retained for up to 2 years
• Payment records: retained for 7 years as required by financial regulations

When you delete your account, we permanently erase your name, phone number, email address, and all personally identifiable information within 30 days, except where retention is required by law.

8. Your Rights

You have the right to:

• Access: request a copy of the personal data we hold about you
• Correction: update your name, phone, or email through the app's profile settings
• Deletion: permanently delete your account and all associated personal data (see Section 9)
• Portability: request your data in a machine-readable format
• Opt-out: we do not sell your data, but you may contact us to restrict certain processing

To exercise any of these rights, contact us at the address in Section 13. We will respond within 30 days.

9. How to Delete Your Account

If you are unable to access the app, you may also request account deletion by contacting us at the address in Section 13. We will complete the deletion within 30 days of receiving your verifiable request.

Note: payment records required by financial law (7 years) and anonymized aggregate statistics (which contain no personal identifiers) may be retained after deletion.

10. Children's Privacy

The RideFresh Driver Hub is intended for professional rideshare drivers and is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it promptly.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: you may request details about the categories and specific pieces of personal information we collect, the sources, our business purpose, and the categories of third parties we share with
• Right to Delete: you may request deletion of your personal information, subject to legal exceptions
• Right to Non-Discrimination: we will not discriminate against you for exercising your CCPA rights
• Right to Opt-Out of Sale: we do not sell your personal information — no opt-out is required, but you may contact us for confirmation

To submit a verifiable CCPA request, contact us at the address in Section 13. We will respond within 45 days. You may designate an authorized agent to submit requests on your behalf.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the new policy in the app and updating the Effective Date above. Your continued use of the Service after any change constitutes acceptance of the updated policy.

We encourage you to review this policy periodically.

13. Contact Us

If you have questions, concerns, or requests regarding your privacy or this policy, please contact us:

• Company: RideFresh Solutions
• Email: privacy@ridefreshpro.com
• Website: ridefreshpro.com

We aim to respond to all privacy-related inquiries within 30 days.