Privacy Policy
1. Introduction
ParkSaver ("we," "our," or "us") is a parking cost planning application operated as an independent developer. This Privacy Policy explains how we collect, use, store, and share information when you use the ParkSaver mobile application ("App") and its associated website at parksaver.app ("Site").
By downloading, installing, or using ParkSaver, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the App.
2. Information We Collect
2.1 Information You Provide
Account information (optional). You may use ParkSaver anonymously without creating an account. If you choose to create an account, we collect:
- Email address
- Password (stored as a cryptographic hash; we never see your plaintext password)
- Display name (optional)
App preferences and settings. When you configure the App, we store:
- Your default shopping mall and parking zone
- Your default daily schedule (arrival time, planned departure time, lunch break preference)
- Your preferred notification lead time
- Your language preference (English, Chinese, or Bahasa Malaysia)
2.2 Information Generated Through Use
Parking session data. When you use the parking planner, we collect:
- Mall selected
- Parking zone / tier selected
- Session start time and planned end time
- Smart Break reminders you set or receive
- Whether you marked a Smart Break as completed
Usage data. We collect limited analytics about how you interact with the App, including:
- Features accessed
- Screens viewed
- App version and device operating system
- Session duration
We do not build individual behavioural profiles for advertising purposes.
2.3 Information Collected Automatically
Device and technical information.
- Device type (iOS or Android)
- Operating system version
- App version
- Crash logs and error reports (used solely to fix bugs)
- Push notification token (to deliver your parking reminders)
Anonymous session identifier. On first launch, the App creates an anonymous session with a randomly generated identifier (UUID). This identifier is used to store your settings and parking history on-device and on our servers before you create an account, if you choose to do so. You may use the App indefinitely without converting this to a named account.
2.4 Information We Do Not Collect
We do not collect:
- Precise GPS location or background location
- Your vehicle registration plate or vehicle details
- Payment card numbers (all payments are processed by Apple or Google — we receive only a subscription receipt token)
- Your contacts, photos, or camera access
- Any data from other apps on your device
3. How We Use Your Information
We use the information we collect to:
- Deliver the core service — calculate parking costs, generate Smart Break reminders, and send push notifications at your chosen times.
- Sync your data across devices — if you are signed in, your settings and session history are available on all your devices.
- Restore your subscription — link your subscription to your account so you can access premium features after reinstalling or switching devices.
- Improve the App — analyse aggregated, anonymised usage patterns to understand which features are used, identify bugs, and prioritise improvements.
- Send service communications — transactional emails (account confirmation, password reset). We do not send marketing emails without your explicit consent.
- Comply with legal obligations — respond to lawful requests from authorities where required.
We do not sell your personal data. We do not use your data for targeted advertising.
4. Tariff Data and Community Contributions
ParkSaver's parking tariff database is community-maintained. If you submit or correct a tariff for a mall, that data (the tariff schedule, zone name, and timestamp) becomes part of the shared database used by all users. No personally identifiable information is attached to tariff contributions — submissions are anonymous.
5. Push Notifications
If you grant notification permission, we send push notifications to remind you of your scheduled Smart Breaks. These notifications are functional, not promotional.
You may withdraw notification permission at any time in your device Settings. Disabling notifications reduces the usefulness of the App but does not affect your account.
6. Data Sharing and Third Parties
We share limited data with the following third parties, only as necessary to operate the service:
| Service | Purpose | Data shared |
|---|---|---|
| Supabase (Supabase Inc.) | Backend database and authentication | Account data, session data, app settings |
| Apple App Store / Google Play | In-app subscription processing | Subscription purchase is handled entirely by Apple/Google. We receive only a receipt token to verify entitlement. |
| RevenueCat (RevenueCat Inc.) | Subscription entitlement management | Anonymous or account UUID, subscription status |
| Firebase Cloud Messaging (FCM) | Android push notifications | Device push token, notification content |
| Apple Push Notification service (APNs) | iOS push notifications | Device push token, notification content |
| Fly.io | Notification dispatch infrastructure | Push tokens and notification payloads in transit |
| Vercel Analytics (Vercel Inc.) | Aggregated, anonymous page-view metrics for the parksaver.app website | Page URL, HTTP referrer, country, device type, browser. No cookies. No individual user identifiers. |
We do not share your data with advertising networks, data brokers, or analytics platforms beyond the anonymised, aggregated usage data described in Section 3.
All third-party providers are contractually bound to process your data only as instructed by us and in accordance with applicable data protection laws.
7. Data Retention
| Data type | Retention period |
|---|---|
| Anonymous session data | Until the session is inactive for 12 months or the app is uninstalled |
| Account data | Until you delete your account, plus 30 days for recovery |
| Parking session records | Until you delete them, or until 24 months after your last app activity |
| Crash logs | 90 days |
| Subscription records | 7 years (required for tax and financial compliance) |
When you delete your account, we delete your personal data within 30 days, except where retention is required by law (e.g. financial transaction records).
8. Data Security
- All data in transit is encrypted using TLS 1.2 or higher.
- Passwords are hashed using industry-standard algorithms; we never store or transmit plaintext passwords.
- Database access is restricted to authenticated, authorised services only (row-level security enforced at the database layer).
- Subscription status is read-only to client applications; all writes go through server-side functions.
- We conduct periodic reviews of our security practices.
No method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we take reasonable steps to protect your data.
9. Children's Privacy
ParkSaver is not directed at children under the age of 13 (or under 16 in jurisdictions where a higher age applies). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
10. Your Rights
- Access — request a copy of the data we hold about you.
- Correction — request that inaccurate data be corrected.
- Deletion — request that your account and associated data be deleted ("right to be forgotten").
- Portability — request your data in a machine-readable format.
- Objection — object to processing of your data in certain circumstances.
- Withdrawal of consent — where processing is based on consent, withdraw it at any time.
To exercise any of these rights, contact us at privacy@parksaver.app. We will respond within 30 days.
You may also delete your account directly from within the App (Settings → Account → Delete Account), which initiates immediate deletion of your personal data subject to the retention periods in Section 7.
11. International Data Transfers
ParkSaver is operated by a developer based in Malaysia. Our infrastructure providers (Supabase, Fly.io, RevenueCat) may process data in the United States or other jurisdictions. Where required, we rely on standard contractual clauses or equivalent mechanisms to ensure adequate data protection for international transfers.
12. Cookies and Tracking
The ParkSaver mobile app does not use cookies. The parksaver.app website uses no advertising cookies, user-tracking cookies, or cross-site tracking pixels. We use Vercel Web Analytics for aggregated, anonymous page-view metrics; it operates without cookies and does not identify individual visitors. We may use a minimal session token stored in your browser to support the auth email confirmation flow — this token is not used for tracking and is not shared with third parties.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, for material changes, notify you via the App or by email (if you have an account). Continued use of the App after changes take effect constitutes acceptance of the updated policy.
14. Contact
If you have questions, concerns, or requests regarding this Privacy Policy:
Email: privacy@parksaver.app
Website: https://parksaver.app
We aim to respond to all privacy-related enquiries within 5 business days.
This Privacy Policy applies to the ParkSaver mobile application (iOS and Android) and the parksaver.app website.