Privacy Policy
Last updated: June 3, 2026
At Mashi we respect your privacy. This policy explains what we collect, why, and how we protect your data.
Data we collect
1. Account: phone number or email, and a hashed password. 2. Vehicle profile: make, model, connector type, battery capacity. 3. Provider credentials (Infinity EV, Sha7en, IKARUS, ELSEWEDY Plug, Mega Plug, Taqa Volt, Electra): AES-256-GCM encrypted; unreadable without your per-user key. 4. Location: only during an active trip, to compute the route and find nearby stations. 5. Trip history: retained at most 90 days then auto-deleted.
How we use your data
We use your data exclusively to plan your trip, call charging networks on your behalf, and display your wallet balance. We do not sell your data and never share it with third parties for advertising.
Provider credentials
When you connect any supported network (Infinity EV, Sha7en, IKARUS, ELSEWEDY Plug, Mega Plug, Taqa Volt, Electra), we store access tokens encrypted on our server. Original passwords are never stored. You can disconnect any provider at any time from the settings screen.
Retention
- Account data: until you delete your account. - Wallet snapshots: 7 days. - Notifications: 30 days. - Completed trips: 90 days then auto-deleted.
Your rights
You can request a copy of your data, correct it, or delete your account entirely by emailing privacy@mashi.world. We respond within 15 business days.
Contact
For any privacy question: privacy@mashi.world