Privacy policy

1. Who is responsible for personal data?

AeDev is the company operating AQUAWASH. Postal address: Payatas, Quezon City, Philippines. General support: adriel.dev.123@gmail.com. Privacy and data-rights requests: adriel.dev.123@gmail.com. The operator must also name a Data Protection Officer or privacy contact where required.

2. Information processed by the Android app

The current app stores business records in a local database on the Android device. Depending on how a shop uses it, records can include:

• Business and branch names, phone numbers, email addresses, addresses, and a logo reference;
• Customer names, phone numbers, email addresses, addresses, landmarks, notes, and optional birthdays;
• Order numbers, services, weights or quantities, status and timing, discounts, delivery fees, taxes, totals, payment amounts, payment methods, reference numbers, notes, and transaction history;
• Inventory, expenses, delivery jobs, loyalty records, and staff names, usernames, roles, contact details, and PIN hashes; and
• Printer settings and activation information.

For offline activation, the app derives a device fingerprint from the Android ID and app identity and checks a signed license code on the device. The app source reviewed for this draft does not send that fingerprint or code to an AQUAWASH server. If a user shares the displayed device fingerprint with the operator to request a code, that is a separate communication outside the app’s network connection.

The Android project reviewed does not include internet permission, cloud accounts, cloud synchronization, a server database, or Google Play Billing. It does request Bluetooth access for optional receipt printing. When a shop user prints a receipt, the app sends the selected receipt content, which can include a customer name, order number, services, and payment totals, to the paired Bluetooth printer. The app also supports user-initiated ZIP backup export and import through Android’s file picker.

3. Information the website processes

The support form accepts your name, email address, concern category, subject, message, and an optional PNG, JPEG, or WebP screenshot up to 5 MB. When you submit the form, these details are sent over HTTPS to an AeDev-operated Google Cloud Function, which forwards the request and any attachment to adriel.dev.123@gmail.com through Gmail. The function temporarily uses the connection IP address for basic rate limiting; it is not included in the support email. The website does not save support requests in a website database. Google Cloud and Gmail process the information to provide form delivery and email services; the resulting message is retained in the support inbox under the account’s settings and is handled by AeDev to respond to your request. Do not include a PIN, password, full license code, payment card number, or Google account credentials.

Visitors may also contact AeDev directly at adriel.dev.123@gmail.com. If you send an email, AeDev receives your email address and any name, shop/user details, and message content you include so it can respond to your support or privacy request. Gmail may process and store that message to deliver the email.

The website code supports optional Google Analytics only when a measurement ID is configured, and it loads the analytics script only after a visitor accepts the consent prompt. Confirm whether analytics is configured in the production deployment. The website hosting provider may process standard connection logs; the operator must confirm the actual host, categories collected, retention period, and applicable privacy notice.

4. Purchase-related information

The current Android project does not implement Google Play Billing and does not receive Google Play purchase tokens, order IDs, or billing profile details. AQUAWASH currently uses signed offline activation codes in the reviewed app source; no purchase or activation data is sent to an AQUAWASH server by the app. If Play Billing is implemented later, this section and the Play Console declarations must be updated to describe the exact purchase and verification data the app or its providers receive.

5. Purposes and legal basis

Shop data is entered by the business to run its laundry operations and is stored locally by the app. Email sent to AeDev is used to respond to support, privacy, or deletion requests. Optional website analytics is used only after consent. The operator must determine and document the applicable legal basis for each processing purpose and explain any processing of customer records under the Data Privacy Act of 2012 and its implementing rules. This draft does not make a legal compliance determination.

6. Sharing and service providers

The reviewed Android app does not configure a cloud data processor, remote analytics or crash-reporting SDK, or payment processor integration. User-initiated receipt printing sends receipt content to the paired Bluetooth printer. User-initiated backup export writes a ZIP file to a location chosen through Android’s system file picker; the selected storage provider may process the file under its own terms. Emails sent to the Gmail support address are transmitted and stored by Google as the email provider. Optional website analytics, if configured and accepted by the visitor, is provided by Google. The actual hosting and any configured third-party services must be confirmed before publication.

7. Storage, retention, and security

Business records, local staff profiles, and activation information remain in app-private device storage until the user clears AQUAWASH app storage or uninstalls the app. The current app disables Android automatic cloud backup. It can create ZIP backups, but no password protection or app-level encryption for those exported backups was identified in the reviewed code. A backup saved outside the app may remain in the user-selected location or a provider’s account after the app is removed. Users should protect the device and backup files accordingly.

Staff PINs are stored as PIN hashes. The app uses local PIN access controls and role permissions, but no database encryption layer was identified in the project. Staff profiles can be deactivated, which blocks access, but deactivation does not erase the stored profile or its historical activity. AeDev’s email retention period, mailbox access controls, website hosting log retention, incident handling, and deletion practices must be confirmed before publication.

8. Data subject rights and requests

Under the Data Privacy Act of 2012, data subjects may have rights to be informed, access and rectify personal information, object to processing, request erasure or blocking in qualifying circumstances, data portability where applicable, damages, and to file a complaint. These rights have statutory conditions and exceptions. Because AQUAWASH customer information is controlled by the laundry business and stored on its device, customers should first contact the laundry shop that collected their information. The operator must add a verified privacy-request contact and process for responding. Read the National Privacy Commission’s data subject rights guide.

9. Deletion

The current app has no AQUAWASH server account or remote data store. It creates local owner and staff sign-in profiles; the reviewed interface supports deactivating staff profiles but does not provide a full account or all-data deletion request flow. The web resource at aquawash-28b2b.web.app/data-deletion lets users email a request to AeDev. Because records stay on the device, AeDev cannot erase them remotely. Clearing AQUAWASH app storage or uninstalling removes the app’s local database, activation data, and internal backups from that device. This may permanently delete records that have not been separately backed up. It does not remove exported ZIP copies saved elsewhere. Confirm whether these local profiles count as app accounts for Google Play and implement any required in-app deletion path before submitting the deletion declaration.

10. Children

AQUAWASH is a business operations tool and is not designed for children. The operator should confirm any age-related policy and applicable requirements before publication.

11. Changes

The operator may update this notice as the product changes. Add a version date and describe how users will be notified of material updates after the app has an official support channel.

12. Contact

Company: AeDev. Support: adriel.dev.123@gmail.com. Privacy and data-rights requests: adriel.dev.123@gmail.com. Postal address: Payatas, Quezon City, Philippines. See the data deletion request page.