Partner Privacy Policy
Last updated: 2026-08-20
This Privacy Policy explains how YuYu handles personal data in the YuYu Partner app, the staff application used by employees and managers of car washes in the YuYu network. It applies to people who sign in with a YuYu staff account. If you are a customer, the YuYu Privacy Policy applies to you instead.
Who this policy is for
YuYu Partner is an internal tool for car wash staff. Accounts are created by a branch manager or by YuYu — you cannot register yourself. Access requires a staff account; customer accounts are rejected at sign-in.
Information we collect
Account details provided when your employer creates your account: full name, phone number, optional email address, your role (employee, branch manager or administrator) and the branch or branches you work at. We also store the work you record in the app, including washes you register, reservations you accept, decline or complete, and changes you make to branch information.
Customer data you see
To serve a customer you see their name, phone number, vehicle details, membership plan and remaining washes. This information belongs to the customer and is shown to you only for the purpose of completing their wash. You may not copy, export or use it for any other purpose.
Camera and photos
The camera is used only to scan customer QR passes. Scanned codes are read on the device and never stored as images. Photo library access is used only when you choose to upload a branch photo or logo; we access only the images you explicitly select.
How we use your data
To authenticate you, to scope what you can see to your own branch and role, to record washes against the correct branch and staff member, to produce branch reports and your own performance figures, and to keep the service secure and diagnose faults.
Visibility within your organisation
Your branch manager and YuYu administrators can see the washes and reservations you handled. Employees see their own work; managers see the whole branch. This is how businesses verify service and pay staff, and it cannot be disabled.
Data stored on your device
Sign-in tokens are held in the device's secure storage (Keychain on iOS, Keystore on Android) and are removed when you sign out. No customer records are stored on the device beyond what is on screen.
Sharing
We do not sell personal data and do not use it for advertising. Data is shared only with the car wash business that employs you, with infrastructure providers that host the service under contract, and where the law requires it.
Data retention
Wash and reservation records are retained as business records of the branch. Your account data is retained while your account is active and for a limited period afterwards to meet legal and accounting obligations, after which it is deleted or anonymised.
Security
Traffic is encrypted in transit, passwords are stored hashed, and access is limited by role. QR passes are single-use and short-lived, so a scanned code cannot be reused.
Your rights
You may request access to your personal data, correction of inaccurate details, or deletion of your account. Some records must be kept as business records of your employer even after your account is closed. Requests about your employment data may need to go through your employer.
Contact
For questions about this policy or to exercise your rights, contact YuYu at hello@getyuyu.app.