Privacy policy
WaterWorkz Wash-n-Water picks up and delivers laundry, and delivers water and ice, in Tuguegarao City, Cagayan, Philippines. WaterWorkz Wash-n-Water runs this service, and this is its privacy policy. Our Android app is published on Google Play by henyo.games.
This page explains what we collect when you use the WaterWorkz app (on Android, iPhone, or the web at waterworkzph.com/app) and this website. It covers why we collect it, who else sees it, how long we keep it, and what you can do about it. It applies on waterworkzph.com and on purecleanph.com, an older address for the same service.
Questions or requests: email support@waterworkzph.com.
In short
- We collect what we need to take, deliver and charge for orders, and to keep accounts safe.
- We don't sell your information. The app has no ads and no third-party analytics or advertising trackers. We use our own server logs to find and fix problems.
- Customers and riders see some of each other's details so an order can be done.
- You can delete your account in the app or on our delete account page.
What we collect
Everyone with an account
- Your name and mobile number. Your number is how you sign in.
- Your password, stored only in scrambled form (a hash), so nobody can read it.
- A profile photo, if you add one. Riders need one before they can take jobs.
- Each time you sign in: when, and the type of app or browser you used (for the website, your browser's identification string).
- If notifications are on: a notification token for your phone or browser. On Android 13 and newer, on iPhone and on the website, you're asked first. On older Android, notifications are on unless you turn them off in your phone's Settings.
Customers
- Addresses you save: a name for it (like “Home”), street, barangay, city, province, postal code, landmark, and the pin you place on the map.
- Your orders: what you ordered and when, notes for the rider, promo codes and discounts, prices, how you paid and whether it's paid.
- Messages with your rider, and ratings you give and receive.
- For the student discount, only if you ask for it: a photo of your school ID, and whether we approved it.
- If you sign up as a business, or we mark your account as one: the business's name, and any prices we agree with it.
- If we give your account a discount of its own: what it is, who on our staff set it and when.
- Your location, only if you allow it, when you place a pin on the map.
Riders
- Your vehicle type and plate number.
- Whether our team has approved you to take jobs. The app doesn't ask you to upload ID or licence documents. It records only whether you're approved.
- Your location while you work, as described under Location.
- The orders you take, messages with customers, and ratings you give and receive.
What we don't collect
- The app doesn't ask for your email address.
- PayMongo collects your card, GCash, Maya or QR Ph details for us on its own secure payment page. Your card number never reaches our servers, and we don't store any of these details, only a payment reference (see Who sees your information).
- The app doesn't read your contacts, text messages, files or other apps. It sees only the photos you choose to send.
- The app doesn't ask your age.
Why we use it
- To run orders: show riders where to go, show customers where their rider is and when they'll arrive, price orders, apply discounts and make receipts.
- To run your account: sign you in, confirm your number with a texted code, and reset your password.
- To send you notifications about your orders and messages.
- To check riders before they take jobs, and students before the student discount applies.
- To keep the service secure and stop abuse, for example by limiting how many codes can be asked for.
- To settle delivery disputes and keep riders and customers safe, we keep a history of where riders were while they had an order open. It's kept until the rider's account is deleted, unless the rider asks us to delete it sooner (see Your rights).
- To find and fix problems, using our own server logs. We don't use any third-party analytics.
- To keep the business records the law requires, such as for tax.
We use your information because it's needed to give you the service you signed up for, to meet our legal duties, and to keep the service safe. Location and photos are your choice: the app asks first, and you can say no. Riders need a profile photo to take jobs. Notifications are your choice too: on Android 13 and newer and on iPhone the app asks first, and on older Android they're on unless you turn them off in your phone's Settings.
We don't use your information for advertising, and we don't sell it.
Location
The app never asks for permission to use your location in the background. It gets your location only if you allow it, and normally only while you're using the app. One exception: while a rider has an order open, the app may keep sending the rider's location if it is left running in the background on Android 9 or older, because on those versions allowing location also allows it in the background.
Customers
- When you add an address, the app asks to use your location so the map starts where you are. You can say no and move the pin yourself.
- If you keep the pin where it starts, the saved address uses your phone's location at that moment.
- When you confirm the pin, the app sends its position to our server to suggest a street name and to check that we serve the area. The street-name lookup runs on our own server, not an outside map service. Our server logs record these lookups, including the pin's position (see How long we keep it).
Riders
- When you go online, you set where to look for jobs from: your current location, a spot you pick on the map, or one of up to 5 saved places. We keep that spot after you go offline, so you don't have to set it again.
- While you have an order open in the app, it sends your location to our server about every 10 seconds, whether or not you're online, and the customer on that order sees it as it's sent. We keep the latest position sent until you next go offline. Until then, our staff and the customer of every order you've accepted and not yet delivered (including laundry that's being washed) can see it, refreshed about every 30 seconds, even while you're working on a different order. We also use it to show those customers when you'll arrive. Arrival times are worked out on our own server.
- We also keep a history of the positions sent, to settle delivery disputes and keep riders and customers safe. That history is kept until you delete your account, unless you ask us to delete it sooner (see Your rights).
Photos
- Profile photo. You take or choose it, and you can remove it in the app at any time (riders need one to take jobs). It's stored on our server at a long, random web address that the app loads it from. It isn't published or linked anywhere, but anyone who has that exact address can open it.
- Student ID photo. Only for the student discount, and only if you send one. It's kept in our database, not at a web address, and only our staff can view it. Sending a new one replaces the old one. It's deleted when you delete your account.
- Rider documents. The app doesn't ask riders to upload ID, licence or vehicle documents.
Phone cameras can store extra details inside a photo, such as when and where it was taken. We don't remove them. If your camera saves location in photos, you can turn that off before taking the photo, or choose a photo without it.
Notifications
The app uses Google's Firebase Cloud Messaging to deliver notifications. Its software connects to Google when the app starts, to set up notifications. If notifications are on, we store your phone's or browser's notification token with your sign-in and send each notification through Google.
A notification can include a person's name (your rider's, for example), an order total, or the first 120 characters of a chat message. A new-job notification for riders can also show how far away the job is, and a new-order notification for our staff shows the customer's name, the order type and how it's being paid. Each one also carries your account ID and the order's ID, so the app can open the right screen. On Android, chat notifications hide their text on a locked screen if your lock screen is set to hide sensitive content. Chat on an order stays open after the order ends, and you can still get message notifications about it for 24 hours.
We delete a notification token when you sign out on that device, when that sign-in hasn't been used for 30 days, or when you delete your account.
Who sees your information
Riders and customers
- When you place an order, riders who are online and looking for jobs near your pickup address (up to 50 km away) see your name, the pickup address and map pin, what you ordered, the total and your notes, so one of them can accept it. Every approved rider who is online is also notified of a new job's total and, usually, how far away it is, and can open its items and notes.
- The rider who takes your order can also open the order's receipt, which shows your name and mobile number.
- You and your rider can message each other, and rate each other after the order. The person you rate sees your stars and comment.
- Riders see the amount of any discount, and the promo code if one was used, but not whether you got a student or bulk discount, so they don't learn that you're a student.
- Customers see their rider's name and, from when the rider accepts the order until it's delivered, the rider's latest position. Until the order is completed, they also see the rider's live position whenever the rider has that order open in the app.
Our staff
Our staff can see account, order, payment and rider details, profile photos and student ID photos. They can also follow an order live, including its messages and the rider's location. They use this to run the service, help with problems, and approve riders and student discounts.
Companies that help us run the service
We give each one only what it needs for its job.
- Hetzner rents us the servers that hold our database, photos, logs and backups. The servers are in Germany.
- Semaphore sends our text messages. It gets your mobile number and the code.
- Google Firebase Cloud Messaging delivers notifications, as described under Notifications.
- Apple delivers notifications to iPhones, so it handles the same notification text Google does.
- PayMongo handles online payments for us, if you choose to pay online. PayMongo collects your card, GCash, Maya or QR Ph details for us on its own secure page, and PayMongo's own privacy policy also applies to what you enter there. Your card number never reaches our servers, and we don't store any of these details, only a payment reference. We send PayMongo only the amount and our order and payment reference numbers. PayMongo tells us whether the payment went through.
Map images and fonts
- Maps in the app use images from OpenStreetMap's public servers. Your phone or browser downloads them directly, so OpenStreetMap sees your internet address, that the request comes from the WaterWorkz app, and the part of the map on screen, which is often around where you are. We don't have a contract with OpenStreetMap, and its own privacy policy applies.
- Our web pages, including this one, and the web version of the app load fonts from Google Fonts, so Google sees your internet address when you open them.
Because Hetzner's servers are in Germany and Google and Apple work worldwide, some of your information is stored or handled outside the Philippines.
We don't sell your information or share it for advertising. We would give information to the authorities only if a law or a court order requires it.
How long we keep it
While you have an account
- Your account details, saved addresses and order history, so you can use them and see past orders and receipts.
- Removing a saved address takes it off your list. We keep the record until you delete your account, because past orders may point to it.
- For riders: your location history, until you delete your account, unless you ask us to delete it sooner (see Your rights).
- Notification tokens: until you sign out, that sign-in goes unused for 30 days, or you delete your account.
- For each code we text you, or reset code we give you: a scrambled fingerprint of the number, not the number itself, and of the internet address the code was asked for from. It is kept only to prevent text-message abuse, and it is deleted within 7 days of the code.
Our server logs
To keep the service working and secure, our servers keep technical logs. Our app's request logs show only the network a request came from, not your full internet address, and hold about the last 30 days. When we text you a code, they note the number with all but its first four and last two digits hidden, never the code. They can also hold the position of a map pin you confirmed while setting an address, and words our staff typed to search for an order, which can be a customer's or rider's name or number. They are overwritten automatically, whether or not you delete your account.
Two smaller error logs, our web server's and our database's, can keep an internet address or, rarely, a mobile number (for example from a sign-up that failed) for several months.
Backups
We back up our database every night and normally delete each nightly backup after 30 days. Copies we take just before updating the service can be kept longer. Information you change or delete can stay in a backup until that backup is deleted.
When you delete your account
What gets deleted:
- Your name, business name, phone number and profile photo
- Saved addresses that no order used
- The student ID photo, if you sent one for the student discount
- Prices agreed with your business
- A discount we gave your account
- Push notification registrations (the device tokens that let us send notifications to your phone or browser)
- For riders: vehicle and plate details, your search location and saved places, and location history
- Your sign-in: the account can't be used again, and your number is free to sign up anew
What we keep, for 5 years:
- Records of your past orders and payments: the items, amounts, pickup and delivery addresses, and notes. The business must keep these for tax purposes.
- Messages and ratings on those orders
These no longer carry the name or number on your account, though anything you typed into notes, messages or ratings stays as written. They are deleted after 5 years. We also keep the empty account record they point to, and a list of your past sign-ins showing when each happened and the type of app or browser used. Neither shows your name or number. Text-code fingerprints go within 7 days. Our app's request logs and nightly backups go within about 30 days, but our two smaller error logs and the copies we take just before updating the service can keep some information longer, as described above.
Deleting your account
- In the app: open Profile and tap Delete account.
- On the web: go to waterworkzph.com/delete-account, sign in and confirm.
- Can't sign in? Email support@waterworkzph.com with the mobile number on the account. We'll confirm it's you, then delete it.
Orders that are still in progress have to be finished or cancelled first.
Deleting some of your data
You can also remove some things without deleting your account. Removing your profile photo, or a rider's saved place, deletes it. Removing a saved address hides it from your list, but it stays on any past orders that used it (see How long we keep it). To ask us to delete or stop using anything else, email us (see Your rights).
Security
- The app connects to our servers only over encrypted HTTPS connections, and our servers use HTTPS to talk to PayMongo, Semaphore and Google.
- Passwords are stored only as hashes, and texted codes only as fingerprints, so they can't be read back.
- On your phone, the app keeps your sign-in in the phone's secure storage, and on Android it leaves it out of phone backups. The web version keeps your sign-in in your browser's storage. Our servers don't set cookies.
- Signing out ends that sign-in. Changing your password signs out your other devices. Deleting your account signs out all of them.
- We limit how often anyone can try to sign in or ask for codes.
- Only staff accounts can view student ID photos or approve riders.
No system is perfectly secure. If a breach puts your information at risk, we'll tell you and the National Privacy Commission as the law requires.
Children
WaterWorkz is meant for people 16 and older: people ordering laundry, water and ice for their homes, and the riders who deliver them. It isn't directed at children, and we don't knowingly collect information from anyone under 16. The app doesn't ask anyone's age, including students who send a school ID. If you think a child under 16 has given us information, email support@waterworkzph.com and we'll delete it.
Your rights
Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), you have the right to:
- Be informed about how we use your information. That's what this page is for.
- Access it. Your profile, addresses, orders, receipts and messages are in the app. To get a copy of anything else we hold about you, email us.
- Correct it. Change your name and mobile number in the app under Edit profile. Riders can change their vehicle and plate. To correct an address, remove it and add it again. For anything else, email us.
- Delete or block it. Delete your account as described above, or ask us to delete or stop using specific information. If the law requires us to keep something, such as order records for tax, we'll tell you.
- Object to how we use it. You can turn off location, camera, photo and notification access in your phone's or browser's settings at any time, and you can email us to object to any other use.
- Get a copy in a form you can take elsewhere. Email us.
- Be compensated if you're harmed by misuse of your information, as the law provides.
To use any of these rights, email support@waterworkzph.com with the mobile number on your account. We may need to confirm it's you before we act.
If you think we've mishandled your information, you can complain to the National Privacy Commission at privacy.gov.ph. We'd appreciate the chance to fix it first.
Changes to this policy
If we change this policy, we'll post the new version on this page and update the date at the top. Where the law requires your consent to a change, we'll ask for it.
Contact us
WaterWorkz Wash-n-Water, Tuguegarao City, Cagayan, Philippines
Our Android app is published on Google Play by henyo.games.
Email: support@waterworkzph.com