This Privacy Policy describes how Mark Albokrinov, doing business as WawCar ("WawCar", "we", "us", or "our"), based in Warsaw, Poland, collects, uses, and shares your personal information when you use the WawCar mobile application (the "App").
WawCar is a peer-to-peer marketplace that allows users to list used cars for sale and to browse, save, and communicate with sellers about car listings in Poland.
By using the App, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the App.
When you create an account, edit your profile, post a listing, communicate with other users, or complete a deal, we may collect: name and username, email address, phone number, password (stored in hashed form by our authentication provider), date of birth (used to verify you are at least 18), city/location, photos you upload, car listing details, messages you send through the in-app chat, star ratings and comments you give or receive about a completed deal, the users you block, and which version of the Terms of Use you accepted and when.
Log and usage data (IP address, access times, diagnostic info), device data (device model, OS version, app identifiers), a device push token used to deliver chat and saved-search notifications, and approximate location derived from your IP address (country/city level; we do not access GPS). To find and fix faults, the App also sends Google's Firebase Crashlytics a record of each app session (when it started, the app and OS version, the device model, the type of network connection and an installation identifier) and, if the App crashes, a crash report containing the technical trace of the fault and, if you are signed in, your internal account ID — never your name, email address or phone number; Google keeps this for 90 days and may process it outside the EU (see section 10).
We do not access your contacts, calendar, camera roll beyond photos you choose to upload, or other device features. We do not use cookies or web beacons. We do not use third-party analytics or advertising trackers. We do not purchase personal information about you from third-party data sources.
To operate the App, enable buyer-seller chat, verify age (18+), process payments for paid listings, deliver push notifications you have permitted, display the buyer/seller rating system, respond to inquiries, maintain safety and security, and comply with legal obligations. We do not send marketing communications and do not sell your personal information.
Performance of a contract, consent (withdrawable at any time), legitimate interests, legal obligation, and vital interests, as defined by the GDPR.
Your display name, photo, listings, chat messages, and any rating or comment you give or receive after a deal are visible to other users by design, since WawCar is a marketplace.
Google Firebase / Google Cloud Platform (authentication, database, file storage, crash diagnostics and server-side functions; the database and file storage are hosted in europe-west3, Frankfurt — see section 10 for where the rest is processed), Stream (in-app chat, EU region), Apple (In-App Purchase payment processing and push notification delivery), and Google/Apple Sign-In if you choose to use them.
We may disclose information if required by law or to protect the rights, property, or safety of WawCar, our users, or the public. We do not share information with business affiliates, advertisers, or data brokers.
Your first listing is free once per account; every listing after it requires a paid 30-day period, currently 19 zł (standard) or 29 zł (boosted), and a boost add-on for the free listing is currently 10 zł. All payments are processed exclusively through Apple's In-App Purchase system — WawCar never receives or stores your card or payment details. Prices shown in the App at the time of purchase govern; this document may not always reflect the latest pricing. Refunds are handled by Apple under its own policies; WawCar cannot issue refunds directly.
We retain your information for as long as you have an account. When your account is deleted, we delete or anonymize your personal information, except where legally required to retain it or where it is part of another user's own rating history.
We use encrypted connections (HTTPS/TLS), access control rules, secure authentication, and managed secret storage. No method of transmission is completely secure. If we become aware of a security incident, we will notify relevant authorities and affected users as required by law.
Depending on your country, you may have the right to access, correct, delete, restrict, or port your personal information, and to withdraw consent. Contact us to exercise these rights or request account deletion. EU/EEA users may lodge a complaint with the Polish Data Protection Office (UODO).
Browsing is open to everyone, but account creation, listings, and chat require users to be at least 18. We delete any account found to belong to someone under 18.
WawCar's own database and file storage — including your profile, listings, photos, ratings and saved searches — are hosted by Google Cloud in the European Union (region europe-west3, Frankfurt, Germany). Not all processing takes place in the EU, however: some of the services the App relies on process personal data in the United States and, in some cases, in other countries where the provider operates.
Google: Firebase Authentication, which holds your sign-in details such as your email address and phone number, runs only in the United States; some of our server-side functions run in a Google data centre in the United States; and Firebase Crashlytics (section 1.2) may process diagnostic data at any Google location. Stream, which delivers the in-app chat, may process chat data in the EU and the United States. Apple, which provides Sign in with Apple, In-App Purchase and push notification delivery, may process the related data in the United States.
Where personal data is transferred outside the European Economic Area, the transfer is protected by the safeguards these providers have put in place: the European Commission's Standard Contractual Clauses and, where the provider is certified, the EU–U.S. Data Privacy Framework. You can contact us (section 12) for more information about these safeguards.
We may update this policy from time to time. Material changes will be communicated through the App before they take effect.
Email: support@wawcar.app
Address: Poland, Warsaw, Mazovian Voivodeship Wileńska 14, 03-409