Privacy Policy

ParkAlly ("we", "our", or "us") operates the ParkAlly mobile application and this website at parkally.app. This policy explains what information we collect, how we use it, and your choices.

Information we collect

Location data

When you grant permission, ParkAlly collects your device's location to find nearby parking, calculate walking time to destinations, and monitor your route during guided queue navigation. Location is used only while you are actively using location-dependent features. We do not sell your location data.

Account information

If you create an account, we collect your name and email address. Passwords are sent to Supabase Auth for secure hashing and are never stored in plain text on your device or in our application code.

App data

Registered users may have favorites, parking history, queue state, and notification preferences stored in our database (Supabase Postgres). This data is protected by row-level security so each user can only access their own records.

Guest usage

Guest mode does not require an account. Queue and session data for guests is stored locally on your device and is cleared when the app is fully closed (cold start).

How we use your information

• Display and sort parking options near your destination
• Run spot queue navigation and arrival notifications (when enabled)
• Track parking session timers and send overstay warnings
• Sync favorites, queue, and preferences across devices (registered users)
• Authenticate your account and provide customer support

Third-party services

ParkAlly uses the following third-party services:

• Supabase — authentication and database hosting
• Google Maps Platform — maps, places, and directions
• City of Ottawa Open Data — municipal parking information
• Apple App Store / Google Play — app distribution (when available)

Each provider has its own privacy policy. We share only the minimum data required for each service to function.

Data retention

Account data is retained while your account is active. You may request deletion of your account and associated data by contacting us. Local guest data is removed when you clear app storage or reinstall the app.

Security

We use industry-standard practices including HTTPS, Supabase row-level security, and server-side password hashing. No method of transmission over the internet is 100% secure, but we work to protect your information.

Children's privacy

ParkAlly is not directed at children under 13. We do not knowingly collect personal information from children.

Your choices

• You can use ParkAlly without creating an account
• You can deny or revoke location permission in your device settings (some features will not work)
• You can disable push notifications in app settings or device settings
• You can request account deletion by emailing us

Changes to this policy

We may update this policy from time to time. We will post the revised version on this page with an updated date.

Contact us

Questions about this privacy policy? Email us at support@parkally.app.