1Overview#
Parking Reminder ("we", "our", "us") helps you save and navigate back to your parking spot. This Privacy Policy explains what information we collect, how we use it, and your rights.
2Who is responsible#
The controller responsible for your personal data under the EU General Data Protection Regulation (GDPR) is:
- Leotrim Thaqi
- Germany
Email: support@devleo.de.
3Information we collect#
- Location
- With your permission we access your device GPS to save your parking coordinates and navigate you back. Location is stored on your device. If you create an account and sign in, your saved spots are also synced to our own server (hosted by us in Germany) so you can restore them on another device.
- Photos
- You may optionally photograph your parking spot. Photos are stored locally on your device and never uploaded.
- Account
- If you create an account, we store your email address and an account ID on our own server to enable cloud sync.
- Subscription
- If you subscribe to Premium, the purchase is handled by Apple In-App Purchase. We receive your subscription status from Apple, not your payment card details.
- Notifications
- If you enable Premium fuel-price alerts, we store a device push token and the location you choose to watch so we can deliver those alerts.
4How we use your information#
- Display your saved parking spot on a map
- Send a local notification before your parking timer expires
- Sync your saved spots and history across your devices when you sign in
- Send Premium fuel-price alerts when you enable them
- Manage your Premium subscription through the App Store
5Legal bases#
We process personal data only where the GDPR allows it:
- Providing the app — Art. 6(1)(b)
- Saving and syncing your spots, your account, fuel-price alerts and your subscription status are what you ask the app to do, so they are processed to perform our agreement with you.
- Your permissions — Art. 6(1)(a)
- Location, camera and notifications are used only after you allow them in the system prompt. You can withdraw that at any time in your device settings; this does not affect processing that happened before.
- Security — Art. 6(1)(f)
- Our legitimate interest in keeping the service safe and available covers the server logs described below and blocking addresses that attack the server.
- Legal obligations — Art. 6(1)(c)
- Records of purchases are kept for as long as German tax and commercial law requires (up to ten years).
6Data sharing#
We do not sell your personal data. We share limited data only with:
- Apple
- To process In-App Purchase payments and manage your subscription. See apple.com/legal/privacy for their policy.
- Our own infrastructure
- Your synced spots, account, alert rules, and push token are stored on a server we host ourselves in Germany; no third-party database or authentication provider is involved. Sign-in and password-reset code emails are written by our own mail server and handed to Apple’s iCloud Mail for delivery, so Apple processes the recipient address and the message to deliver it (see apple.com/legal/privacy). If iCloud is unavailable, our own server delivers them directly.
- Expo
- For delivering push notifications (they receive the device push token, never your data).
- Map and route services
- To draw the map and give directions, your device queries public OpenStreetMap infrastructure directly: Overpass (the area of the map you are viewing), Nominatim (coordinates, to turn them into a street address — including a spot you save), OSRM and GeoApify (a start and destination when you ask for a route), and CARTO (map tiles). These services receive an IP address and a location. They never receive your account, your history, or anything that identifies you. Search suggestions while you type come from Photon (photon.komoot.io), which receives the text you type and an IP address. The route overview map loads its map library from unpkg, which receives an IP address.
- Fuel, charging and occupancy data
- Prices and availability come from public open-data sources. Germany (Tankerkönig), Denmark, New South Wales and EV chargers (Open Charge Map) are fetched through our own server, so those providers never see your device or IP address. Austria, France, Spain, Italy and German car-park occupancy (ParkenDD) are fetched directly by your device, so they see an IP address and the area being searched.
- Currency rates
- open.er-api.com supplies exchange rates so prices can be shown in your currency. It receives no information about you.
7Transfers outside the EU#
Our server is in Germany. Some of the services named above are based outside the European Union, in particular Apple and Expo in the United States. Where personal data reaches them, the transfer relies on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses (Art. 45 and 46 GDPR).
8Data storage & retention#
Parking data (location, photos, timer settings, history) is stored on your device. If you sign in, a copy of your spots and history is also stored in our cloud database to enable sync.
You can remove your cloud data at any time with Delete Cloud Data (Settings → Account), or by contacting us. Uninstalling the app removes all locally stored data.
You can delete your entire account from inside the app: Settings → Account → Delete account. That erases your account and everything attached to it — saved spots and history, fuel price alerts, and push notification registrations — from our servers. It is a deletion, not a deactivation, and it cannot be undone.
Two things survive it, deliberately. Records that a purchase happened are kept for accounting purposes, with your name and email address removed from them. And deleting your account does not cancel an App Store subscription — only Apple can do that, under Settings › your name › Subscriptions on your device.
9Server logs and security#
When the app or a browser contacts our server, the server records technical data for each request: the IP address, the time, the requested address, the response status and the app or browser identifier. We use this only to run the service and to detect and stop attacks. It is never combined with your account.
These logs are rotated automatically: once a small size limit is reached the oldest entries are overwritten, so they are kept only for a short time. Addresses that probe the server for vulnerabilities or try to reach non-public areas are blocked automatically; such a block is kept for up to seven days, or permanently for clear attack attempts.
10Permissions#
- Location
- Used to save a spot, show the map and navigate. In the background only if you turn on automatic parking detection or arrival alerts; otherwise never.
- Camera
- Used only when you choose to add a photo. Never accessed automatically.
- Notifications
- Used to alert you before your parking timer expires and, if enabled, to send Premium fuel-price alerts.
11Your rights#
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15)
- have it corrected (Art. 16) or deleted (Art. 17)
- restrict its processing (Art. 18)
- receive it in a portable format (Art. 20)
- object to processing based on our legitimate interests (Art. 21)
- withdraw a consent at any time with effect for the future (Art. 7(3))
To use any of these rights, email support@devleo.de. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work (Art. 77).
12Children's privacy#
Parking Reminder is not directed at children. You must be at least 16 to create an account. We do not knowingly collect personal data from children; if you believe a child has given us data, contact us and we will delete it.
13Changes to this policy#
We update this policy when the app or the law changes, and the date at the top always shows the current version. Significant changes are announced in the app.
14Contact#
If you have questions about this Privacy Policy, contact us at support@devleo.de.