Table of Contents
1. Who We Are
RideFresh Solutions LLC ("RideFresh," "we," "us," or "our") operates the RideFresh Driver Hub mobile application. We provide rideshare drivers with discounted car wash services at participating stations.
This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our mobile app, website, or related services (collectively, the "Service").
By using the Service, you agree to the practices described in this Privacy Policy.
2. Information We Collect
Information You Provide Directly
- Account registration: name, phone number, email address, and password
- Rideshare platform: which platform you drive for (e.g., Uber, Lyft) — used only to display relevant perks
- Home station preference: the car wash station(s) you prefer — stored as a station ID, not a GPS location
- Profile photo: if you choose to upload one
- Feedback and messages: any feedback or support messages you submit through the app
- Referral codes: if you share or use a referral code
Information Collected Automatically
- Check-in records: date, time, station, wash type, and amount for each car wash visit
- Login session data: device platform (iOS/Android), whether you saved your credentials, and the approximate time you logged in
- Promo code usage: which promo codes you redeem and when
- App version and device type: to diagnose bugs and improve the experience
Location Information
We do not collect continuous, background, or real-time GPS, and we do not build a location history. The raw coordinates used for a check-in are processed transiently and are not written to the check-in or fraud records. We do retain the derived proximity result and, when available, the distance measurement as fraud and security evidence. These records are not shared with station operators, other drivers, advertisers, or data brokers. Our cloud hosting providers process and store service data on our behalf as described below.
We do not access your contacts, camera, microphone, or any other device sensor unless you explicitly grant permission for a specific feature (such as scanning a station QR code or uploading a profile photo). We do not store full payment card numbers — all payment data is handled entirely by Stripe (see Section 5).
3. How We Use Your Information
We use the information we collect to:
- Create and manage your account
- Provide car wash check-in services at participating stations
- Track your wash count to unlock tier benefits (Regular, Silver, Gold, Platinum)
- Process referral credits and promotional discounts
- Send transaction confirmations (if enabled)
- Respond to your feedback and support requests
- Detect and prevent fraud or abuse of free-wash entitlements
- Improve the app and diagnose technical issues
- Comply with legal obligations
The one-time check-in location is used only for station proximity validation and fraud/security review; it is not used for advertising, profiling, or continuous tracking.
We do not use your personal information for advertising, profiling, or sale to third-party marketers.
5. Payments & Stripe
All in-app payments are processed by Stripe, Inc., a PCI-DSS Level 1 certified payment processor. When you make a payment:
- Your payment card details are entered directly into Stripe's secure interface and are never transmitted to or stored by RideFresh servers
- RideFresh receives only a payment confirmation, amount, and a non-sensitive Stripe payment intent ID
- Stripe's use of your payment data is governed by Stripe's Privacy Policy
6. Data Security
We protect your data using industry-standard practices:
- All data in transit is encrypted using HTTPS/TLS
- Passwords are hashed using bcrypt — we cannot retrieve your plaintext password
- Session tokens are HMAC-signed with a server-side secret and expire after 90 days
- Sensitive operations are protected by rate limiting to prevent brute-force attacks
- Database access is restricted to our application servers — no direct public database access
Despite these measures, no method of electronic storage or transmission is completely secure. We encourage you to use a strong, unique password and to contact us immediately if you suspect unauthorized access to your account.
7. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:
- Account data: retained until you delete your account
- Check-in history and derived proximity evidence: retained for up to 3 years for business records, fraud/security review, and dispute resolution, then deleted or anonymized
- Fraud/security evidence: location-derived results may be retained longer when needed to investigate abuse, resolve a dispute, or meet a legal obligation; raw precise coordinates are not retained
- Login session logs: retained for 12 months, then purged
- Feedback submissions: retained for up to 2 years
- Payment records: retained for 7 years as required by financial regulations
When you request account deletion, we remove eligible account data within 90 days after the request is processed, except where retention is required by law or needed to resolve a dispute.
8. Your Rights
You have the right to:
- Access: request a copy of the personal data we hold about you
- Correction: update your name, phone, or email through the app's profile settings
- Deletion: permanently delete your account and all associated personal data (see Section 9)
- Portability: request your data in a machine-readable format
- Opt-out: we do not sell your data, but you may contact us to restrict certain processing
To exercise any of these rights, contact us at the address in Section 13. We will respond within 30 days.
9. How to Delete Your Account
If you are unable to access the app, you may also request account deletion by contacting us at the address in Section 13. We will complete the deletion within 90 days after processing your verifiable request.
Note: payment records required by financial law (7 years) and anonymized aggregate statistics (which contain no personal identifiers) may be retained after deletion.
10. Children's Privacy
The RideFresh Driver Hub is intended for professional rideshare drivers and is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it promptly.
11. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to Know: you may request details about the categories and specific pieces of personal information we collect, the sources, our business purpose, and the categories of third parties we share with
- Right to Delete: you may request deletion of your personal information, subject to legal exceptions
- Right to Non-Discrimination: we will not discriminate against you for exercising your CCPA rights
- Right to Opt-Out of Sale: we do not sell your personal information — no opt-out is required, but you may contact us for confirmation
To submit a verifiable CCPA request, contact us at the address in Section 13. We will respond within 45 days. You may designate an authorized agent to submit requests on your behalf.
12. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the new policy in the app and updating the Effective Date above. Your continued use of the Service after any change constitutes acceptance of the updated policy.
We encourage you to review this policy periodically.
13. Contact Us
If you have questions, concerns, or requests regarding your privacy or this policy, please contact us:
- Company: RideFresh Solutions LLC
- Email: Connect@RideFresh.co
- Website: ridefreshpro.com
We aim to respond to all privacy-related inquiries within 30 days.