Privacy policy

1. Who we are

Glint ("we") operates vehicle washing services at residential estates and office parks in South Africa, managed through the Glint app at app.glintapp.co.za. This policy explains how we handle personal information under the Protection of Personal Information Act, 2013 (POPIA).

2. What we collect

Account: name, email address, phone number, and your role (resident, fleet manager, once-off customer).

Vehicles: make, model, colour, registration plate, notes you add, and photos.

Washes: bookings, schedules, wash status and timeline, quality checklist results, completion photos, and your ratings.

Payments: plan, amounts, and payment status. Card details are captured and processed by PayFast — they never touch our servers. We store PayFast's payment reference and notification data for reconciliation and dispute handling.

Support: messages you send us in the app.

Technical: authentication cookies required to keep you signed in. We do not run third-party advertising or tracking cookies.

3. Why we use it

To deliver washes: scheduling, technician queues, notifications, and proof of completion.

To bill you: subscription billing and payment reconciliation through PayFast.

To communicate: transactional email (booking confirmations, wash completion, payment receipts, support replies) sent via our email provider, Resend.

To keep quality up: ratings, escalations, re-washes, and internal audits.

We do not sell personal information, and we do not use it for third-party advertising.

4. Keys and site security

Key tags carry coded identifiers only — never names, unit numbers, or plates. Lockbox access uses one-time codes, and every key check-in and check-out is written to an audit log.

5. Who sees your information

Technicians see only what a wash needs: vehicle, bay, wash type, and site — not your contact details.

Property partners see aggregated site statistics (wash counts, utilisation, revenue share). They never see individual customers' names, contact details, or plates.

Service providers that process data for us: PayFast (payments), Resend (email), Vercel and Neon (hosting and database, which may store data outside South Africa with appropriate safeguards).

We disclose information where the law requires it.

6. Retention

Account and wash records are kept while your account is active. Payment and audit records are kept for 5 years to meet financial and legal obligations. When you delete your account, personal information is removed or anonymised except where the law requires retention.

7. Security

Passwords are stored hashed, access is role-restricted and enforced server-side, payment notifications are cryptographically verified, and sensitive actions are audit-logged. No system is perfectly secure; if a breach affects you, we notify you and the Information Regulator as POPIA requires.

8. Your rights

Under POPIA you may request access to, correction of, or deletion of your personal information, and object to processing. Most of this you can do directly in the app; for the rest, email support@glintapp.co.za and we respond within a reasonable time.

You may also complain to the Information Regulator (South Africa): inforeg.org.za.

9. Changes

We update this policy as the service evolves and announce material changes in the app and by email before they take effect.

Exercise your rights

To access, correct, or delete your personal information, or to object to processing, reach the information officer via the contact page. We respond within a reasonable time as POPIA requires. You may escalate to the Information Regulator (South Africa) at any point.