Privacy policy
Effective from October 5, 2026
In plain words: what data Speri collects, why, where it is stored, for how long, and what your rights are.
1. Who we are
Speri is an app for car washes (speri.app). The controller of personal data for user accounts is Danis Čaušević, Ulica Božidara Magovca 109.
For any privacy questions, email danis.causevic@gmail.com or call +385 91 533 9544.
2. Two roles: Speri and the car wash
- For the data of car wash owners and staff (user accounts), Speri is the controller.
- For the data of a car wash's customers (name, phone, vehicles, bookings, car photos), the car wash is the controller. Speri processes that data only on the car wash's instructions, as a processor, and doesn't use it for anything else.
If you're a customer of a car wash and want access to or deletion of your data, contact the car wash. You can also contact us and we'll forward your request.
3. What data we collect
Car wash owners and staff:
- email, full name, phone (if entered), app language
- car wash details: name, address, tax number, logo, opening hours, price list, website content
- subscription and payment details (plan, amounts, dates). We never see or store card details: cards are processed by Stripe.
- technical data needed for operation and security: last activity time, sign-in records
Car wash customers (entered by the car wash or by the customer when booking online):
- name, phone, email (if any), plate and vehicle type
- bookings, services, work orders, amounts and payment method, car photos at check-in
- consent to messages (yes or no, and when it was given)
Landing page visitors: the data they enter in the contact form (name, car wash, phone, email, message).
4. Why and on what basis
- To provide the service (contract): user account, bookings, work orders, payments, car wash website.
- Legal obligation: keeping accounting records of payments.
- Legitimate interest: system security, preventing abuse, answering enquiries.
- Consent: messages to car wash customers that aren't needed for a booking (e.g. a reminder that they haven't visited in a while). Consent can be withdrawn at any time.
We don't sell data and don't use it for advertising.
5. Where data is stored and who helps us
We store data with trusted service providers that have signed data processing agreements with us:
- Supabase: database, sign-in and files (servers in the EU)
- Vercel: app hosting
- Stripe: card payments
- Resend: sending emails (servers in the EU)
- Google: only if you sign in with a Google account
When a provider processes data outside the EU, the transfer is protected by the European Commission's standard contractual clauses.
WhatsApp messages to customers are sent by the car wash from its own number and device. Speri doesn't send them and doesn't see their content, apart from the template text.
6. How long
- User account and car wash data: while the account is active. After the subscription ends or is cancelled, data is kept (read-only) so the car wash can continue, and we delete it on request or no later than 12 months after expiry.
- Payment records: as long as the law requires (accounting records 11 years).
- Landing page enquiries: while we're in contact, and no longer than 2 years.
- Car wash customer data is kept until the car wash deletes it or asks for deletion.
7. Cookies
Speri uses only essential cookies, without which the app doesn't work:
- sign-in (session)
- chosen language (NEXT_LOCALE)
- light or dark app theme
We don't use analytics or advertising cookies, so we don't ask for cookie consent. On phones we also remember whether you closed the “Add to Home Screen” tip (locally, in your browser).
8. Security
Each car wash's data is strictly separated from other car washes. Staff can't see earnings or settings. The connection is always encrypted (HTTPS), car photos are not public, and access is also checked inside the database itself.
9. Your rights
You have the right to access, correct and delete your data, to restrict processing, to data portability and to object, and the right to withdraw consent. Email danis.causevic@gmail.com and we'll reply within 30 days at the latest.
If you believe we're not processing data lawfully, you can file a complaint with the Croatian Personal Data Protection Agency (AZOP, azop.hr).
10. Changes
If we change this policy, the new version will be published here with a new date. We notify car wash owners of important changes by email.