iOtomates Wash by Geerho Tech LLC Privacy Policy
Effective date: October 27, 2026. Version 2.14.
Geerho Tech LLC, which owns and operates iOtomates Wash by Geerho Tech LLC, formerly Klean ("iOtomates Wash", "we"), is the personal information controller for the iOtomates Wash apps and web app. Laundromat businesses on iOtomates Wash ("Operators") also receive limited customer information, as described below, and act as controllers for their own use of it.
Data Protection Officer: Tracy Jon Miranda, for Geerho Tech LLC · support@geerho.com · (619) 796-1115 · 2108 N St, Ste N, Sacramento, CA 95816, USA
1. What we collect
| Category | What | Source |
|---|---|---|
| Account | Display name, email (as verified by Geerho or your earlier sign-in provider), profile photo, member code, your Geerho account identifier and any earlier sign-in provider identifiers (Apple, Google, GitHub); your mobile number and address if you choose to save them | You; Geerho (Continue with Geerho); earlier sign-ins: Apple/Google/GitHub |
| Identity verification | Collected by Didit, not by us: ID document images, a live selfie and the biometric face template derived from it. What we keep: verification status; your verified legal name and the issuing country of your ID; and keyed one-way hashes of your document details and of your name + date of birth, used only to detect duplicate accounts. We do not store your ID number, ID images or selfie. | You, via Didit |
| Payments | Payment amount, currency, method type (e.g. "GCash", "card"), payment status, provider references; refunds (amount, loads, the reason the laundromat gave, status). For cash paid at a counter: the amount, the cash handed over (if entered), and which staff member recorded it and when. We never receive full card numbers or e-wallet credentials. | PayMongo, Stripe; laundromat staff |
| In-app purchases | For the verification fee bought in the app: the store transaction ID, product, price, currency and date. Apple or Google handle the payment itself; we don't receive your payment details. | Apple (App Store), Google (Play) |
| Carwash activity | For self-service bays: the bay, the minutes you paid for and any time added. For full-service washes: the service, your vehicle size and, if staff enter it, your plate number (to find your vehicle), the bay it's washed in, and its progress (waiting, washing, done, picked up). Seen by you and the business's staff. | Your use of the Service; staff |
| Laundry activity | Machines scanned, orders, loads, weight at intake (typed, or read from the laundromat's iOtomates Wash Scale: each weighing is kept with its time and, once you use it, your order), cycle start/finish times, points earned and redeemed, branches visited | Your use of the Service |
| Staff and business | Your role, which branches you're assigned to, who hired you; for Operators, business details and the status of its payment account and subscription. Each branch's name, address, map location, phone and email are public (shown to customers). Payout account details and company registration documents that businesses gave us before October 27, 2026 (when iOtomates Wash stopped paying businesses out) are kept only as historical records, as long as the law requires; we no longer collect them. | You; Operators; Stripe/PayMongo |
| Business payment account (Super Admins) | The payment service the business chose and the details needed to use its own account, stored encrypted: PayMongo secret key and webhook secret; Xendit secret key and webhook verification token; Maya public and secret keys; HitPay API key and salt; PayPal Client ID and Secret; Square access and refresh tokens, merchant and location IDs (from "Connect with Square"); for Stripe, the Stripe account ID. Also a short label (e.g. the last 4 characters, the only part ever shown) and who connected it and when. We use them only to create checkouts, read payments back and make refunds on the business's own account. | Super Admins; PayMongo; Xendit; Maya; HitPay; PayPal; Stripe; Square |
| Subscription (Super Admins) | The business's subscription status, free-time end date, number of locations and services, and Geerho's subscription references. Your card details stay with Stripe (through Geerho); we don't receive them. | Geerho |
| Messages | Messages you exchange with a laundromat (text, time), announcements Operators post, and automatic laundry updates ("your wash is done") iOtomates Wash posts in your chat with that laundromat. | You; Operators; iOtomates Wash |
| Business expenses (Operators) | Expenses a Super Admin logs: category, amount, date, branch, note, an optional photo or PDF of the receipt (kept in private storage), and who logged it. Seen only by the business's Super Admins (and iOtomates Wash, to help). | Operators |
| Shift counts, supplies, maintenance (staff) | End-of-shift cash counts (the amount counted, what iOtomates Wash expected, the difference, who counted and when); supply restocks and counts; machine maintenance and repair notes. Each records the staff member who entered it. Seen by the business's Super Admins (staff see their own counts and their branch's supplies and maintenance). | Staff; Operators |
| Receipts | Your receipts are made from your order (laundromat, branch, date, what you bought, how you paid, points, refunds, and your display name and member code). You and the laundromat's staff can open them. | Your use of the Service |
| Location (optional) | If you allow it, your device's approximate location is sent to show laundromats nearest you. We don't store it. A laundromat's own location (set by its Super Admin) is public, and wash.iotomates.com publishes a page for each live branch (name, address, map pin, prices, machines, contact phone and email) that search engines can list; these are business details, not personal information. | Your device |
| Bluetooth (only when a laundromat's internet is down) | If you choose Send by Bluetooth, your phone connects to that machine's controller to pass on your paid credit and your Start. iOtomates Wash records that a Bluetooth code was issued for your credit. Bluetooth isn't used to find your location, and nothing else is read from your phone. | Your device; iOtomates Wash |
| Beta testing (invited testers only) | Your roles, each task you check off (Done, Problem or Blocked), your notes, platform and app build, the time, and iOtomates Wash's confirmation or request to try again. | You; iOtomates Wash |
| Technical | Device type, app version, IP address, sign-in times, error logs. For Super Admins using iOtomates Wash HQ: each browser you open it in (a random device id and a name like "Windows PC"), which one is your main device, which one is in use, and the state of your simulated test machines. | Your device |
| Wallet card (optional) | If you add your iOtomates Wash card to Apple Wallet or Google Wallet, it holds your name, member code (as a QR), points and laundromat. Apple keeps it on your device (and in iCloud if you use it); for Google Wallet, iOtomates Wash sends those details to Google, which stores the card in your Google account. Remove it in Wallet any time. To keep the points on it current, iOtomates Wash stores a random code for your card and, for Apple Wallet, an identifier for each device that has the card and its push token (deleted when you remove the card). | You; Google |
| Lock Screen countdown | So the countdown can start and end when your machine does, even with iOtomates Wash closed, your phone gives iOtomates Wash a push token for countdowns (iPhone) or uses its normal notification token (Android). When the machine starts, iOtomates Wash sends Apple or Google the machine's label, the laundromat's name and the end time; nothing else. A countdown's token is deleted with that wash; a phone's token is replaced when it changes, deleted when Apple says it's no longer valid, and deleted with your account. | Your device; Apple; Google |
| On your device only | The Home Screen widget's summary (points, paid loads, your laundromat) is kept on your phone; reading an NFC sticker happens on your phone. On wash.iotomates.com, the machine you scanned is remembered in your browser for up to 2 hours (so you can sign in and verify first), and forgotten once you pay. | Your device |
2. Why we use it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Create and run your account; process payments; activate machines; keep your wallet and points | Performance of our contract with you |
| Verify identity and enforce one person, one account; prevent fraud and points abuse | Your consent for biometric processing (sensitive personal information), and our legitimate interest in fraud prevention |
| Show Operators the information they need to run their laundromat (see section 3) | Contract; legitimate interest |
| Keep transaction and tax records | Legal obligation |
| Security, troubleshooting, improving the Service | Legitimate interest |
| Service messages (receipts, verification results, staff invitations) | Contract |
| Marketing messages, if offered | Your consent, which you can withdraw at any time |
3. Who sees your information
- Messages you send to a laundromat are seen by that business's staff (Super Admins and attendants), and their replies by you. iOtomates Wash staff read a message only when someone reports it, to decide whether to remove it. Messages are kept while your account exists and are deleted with it. Deleting a message or a conversation in iOtomates Wash removes it from your view only: the other side keeps theirs, and iOtomates Wash keeps the record (for example, to review a report of abuse). Deleted notifications are removed for good.
- Operators where you do laundry see your display name, a masked email (e.g.
j*@gmail.com), your points with them, your visits and spend with them, and the times you used their machines. They don't** see your ID, legal name, date of birth, or activity at other businesses. - Your employer (if you're staff) sees your display name, verified legal name and verification status, so they know who works for them, and the cash payments you recorded at the counter (to match the cash drawer).
- Service providers acting on our instructions: Didit (identity verification), PayMongo and Stripe (payments; when you pay, we send them your verified name, your email and, if you saved one, your mobile number, so their payment page is filled in for you), Apple and Google (in-app purchases, push notifications, and signing in to your Geerho account), and our hosting, database and messaging providers (Supabase, Google Firebase).
- Geerho (Geerho Tech LLC, the same company as iOtomates Wash): you sign in with your Geerho account ("Continue with Geerho"). Geerho tells iOtomates Wash your Geerho account identifier, your email (and whether it's verified) and your name, so we can open your account. One Geerho account also works in iOtomates Resto and Xenpen; each keeps its own account and data, and iOtomates Wash doesn't share your verification, points or activity with them. Subscriptions: Geerho bills iOtomates Wash businesses' monthly subscriptions, through Stripe. For that, we share with Geerho the business's id and name, its Super Admins' Geerho account identifiers, and its number of locations and services. Card details are entered on Geerho's Stripe payment page and stay with Stripe.
- A business's own payment provider: when you pay a laundromat, your payment goes to the laundromat's own PayMongo or Stripe account, so that provider (and the laundromat) receives the payment details described above.
- iOtomates Wash Support (the Platform Owner, Geerho Tech LLC): to run the Service and help you, iOtomates Wash can see your account details: name (and the name on your verified ID), profile photo, member code, email, saved mobile number and address, sign-in methods, when you joined and were last active, and your points and visits at each laundromat. Each time a member's profile is opened it is recorded in an audit log. Your address is never shown to laundromats.
- Authorities, when required by law or to protect rights and safety.
- We don't sell personal information.
4. International transfers
Some providers (e.g. Stripe, Didit, cloud hosting) may process data outside your country. We use contractual and technical safeguards required by applicable law for these transfers. [List provider regions.]
5. How long we keep it
| Data | Retention |
|---|---|
| Account data | While your account exists; anonymized on deletion (a saved mobile number and address are deleted, and you can remove them any time in Account) |
| Transaction and tax records | As long as tax and accounting laws require, with personal identifiers removed after account deletion |
| Duplicate-detection hashes | While your account exists; deleted when you delete your account, except for accounts suspended for fraud or abuse, where they're kept for 5 years to stop re-registration |
| ID images and selfies | Held by Didit under its retention policy (see didit.me/privacy); never stored by iOtomates Wash |
| Beta testing check-offs | Kept after the beta as its record; deleted with your account |
| Technical logs | 90 days |
6. Your rights
Under the Data Privacy Act you have the right to be informed, to access, to object, to erasure or blocking, to rectification, to data portability, and to damages, and to file a complaint with the National Privacy Commission (privacy.gov.ph). If you're in the EU/UK or another jurisdiction with similar laws, you have the equivalent rights there. You can:
- see and correct most information in the app;
- delete your account in the app (Account → Delete account), which also revokes Sign in with Apple if you used it here before;
- withdraw consent for biometric verification. Since verification is required to use iOtomates Wash, this means closing your account;
- contact our DPO at support@geerho.com for anything else.
We'll respond within the period required by law.
7. Security
Data is encrypted in transit; sensitive tokens, including businesses' payment-service keys, tokens and webhook secrets, are encrypted at rest; identity attributes are stored only as keyed hashes; access by staff and Operators is limited by role and branch. No system is perfectly secure; we'll notify you and the NPC of personal data breaches as required by law.
8. Children
iOtomates Wash isn't intended for anyone under 18, and we don't knowingly collect their information.
9. Changes
We'll notify you in the app before material changes take effect.
10. Contact
iOtomates Wash, a business of Geerho Tech LLC · 2108 N St, Ste N, Sacramento, CA 95816, USA · (619) 796-1115 · DPO: support@geerho.com