Privacy Policy

1Overview#

Parking Reminder ("we", "our", "us") helps you save and navigate back to your parking spot. This Privacy Policy explains what information we collect, how we use it, and your rights.

2Who is responsible#

The controller responsible for your personal data under the EU General Data Protection Regulation (GDPR) is:

Leotrim Thaqi
Germany

Email: support@devleo.de.

3Information we collect#

Location: With your permission we access your device GPS to save your parking coordinates and navigate you back. Location is stored on your device. If you create an account and sign in, your saved spots are also synced to our own server (hosted by us in Germany) so you can restore them on another device.
Photos: You may optionally photograph your parking spot. Photos are stored locally on your device and never uploaded.
Account: If you create an account, we store your email address, an account ID and — if you choose one — a display name on our own server. Signed in, your saved spots are synced: position, address, time parked and cleared, and the optional cost, note and tags you add. Photos and vehicles stay on your device.
Subscription: If you subscribe to Premium, the purchase is handled by Apple In-App Purchase. We receive your subscription status from Apple, not your payment card details.
Notifications: If you enable Premium fuel-price alerts, we store a device push token and the location you choose to watch so we can deliver those alerts.
Problem reports and messages: When you report a problem or contact us in the app, we receive your message, the screen it came from, the app version, device model, iOS version and app language, and your email address if you enter one. Automatic crash reports contain the error and the same device details — never your spots or location.
Usage statistics: The app records a few events so we can see whether it works for people: finishing the first-run setup, the first saved spot and first timer, and when a Premium feature or the purchase screen is shown. The events are not linked to your account. No location, no advertising identifier, no third-party analytics or tracking SDK.
Device registration: So that notifications can reach your phone — also when you are not signed in — the app registers a push token together with the app language, app version, platform and your News & offers choice.
Emails: We email you sign-in and password-reset codes, a purchase confirmation, a confirmation when you delete your account, and service emails about your subscription (for example a failed payment or an upcoming renewal). Promotional emails only if you switch on News & offers.

4How we use your information#

Display your saved parking spot on a map
Send a local notification before your parking timer expires
Sync your saved spots and history across your devices when you sign in
Send Premium fuel-price alerts when you enable them
Manage your Premium subscription through the App Store
Send service emails about your account and subscription
Send news and offers by email or notification — only if you switched on News & offers (Settings). Every such email has an Unsubscribe button, and switching the setting off stops both
Find and fix errors you report, and understand which features are used

5Legal bases#

We process personal data only where the GDPR allows it:

Providing the app — Art. 6(1)(b): Saving and syncing your spots, your account, fuel-price alerts and your subscription status are what you ask the app to do, so they are processed to perform our agreement with you.
Your permissions — Art. 6(1)(a): Location, camera and notifications are used only after you allow them in the system prompt. You can withdraw that at any time in your device settings; this does not affect processing that happened before.
Security — Art. 6(1)(f): Our legitimate interest in keeping the service safe and available covers the server logs described below and blocking addresses that attack the server.
Improving the app — Art. 6(1)(f): Our legitimate interest in a working, understandable app covers problem reports and the usage statistics described above. You can object at any time (support@devleo.de).
News & offers — Art. 6(1)(a): Promotional emails and notifications are sent only with your consent, given by switching on News & offers. You can withdraw it at any time in Settings or with the Unsubscribe button in any such email.
Backups — Art. 6(1)(f): Encrypted backups protect your data against loss; see retention below.
Legal obligations — Art. 6(1)(c): Records of purchases are kept for as long as German tax and commercial law requires (up to ten years).

We do not sell your personal data. We share limited data only with:

Apple: To process In-App Purchase payments and manage your subscription. See apple.com/legal/privacy for their policy.
Our own infrastructure: Your synced spots, account, alert rules, and push token are stored on a server we host ourselves in Germany; no third-party database or authentication provider is involved. Sign-in and password-reset code emails are written by our own mail server and handed to Apple’s iCloud Mail for delivery, so Apple processes the recipient address and the message to deliver it (see apple.com/legal/privacy). If iCloud is unavailable, our own server delivers them directly.
Backups: Our nightly backups are encrypted on our own server before they are uploaded to Backblaze B2 (Backblaze, Inc.). Backblaze stores only the encrypted files and cannot read them.
Expo: For delivering push notifications (they receive the device push token, never your data).
Map and route services: To draw the map and give directions, the app uses OpenStreetMap data. Car parks, fuel stations and places in the map area you are viewing are requested from our own server first, which answers from its own copy of OpenStreetMap or a cache, or asks the public Overpass servers itself — they then see only our server, not you. Only if our server cannot be reached does your device ask Overpass directly (the map area). Nominatim (coordinates, to turn them into a street address — including a spot you save), OSRM and GeoApify (a start and destination when you ask for a route), and CARTO (map tiles) are queried directly by your device. These services receive an IP address and a location. They never receive your account, your history, or anything that identifies you. Search suggestions while you type come from Photon (photon.komoot.io), which receives the text you type and an IP address. The route overview map loads its map library from unpkg, which receives an IP address.
Fuel, charging and occupancy data: Prices and availability come from public open-data sources. Germany (Tankerkönig), Denmark, New South Wales and EV chargers (Open Charge Map) are fetched through our own server, so those providers never see your device or IP address. Fuel prices in Austria, France, Spain, Italy, Croatia, Slovenia, Iceland and Romania are fetched directly by your device, so those sources see an IP address and the area being searched. Live car-park occupancy and tariffs come from ParkAPI by MobiData BW (api.mobidata-bw.de), which your device asks directly with the map area or your position; it sees an IP address and that location.
Currency rates: open.er-api.com supplies exchange rates so prices can be shown in your currency. It receives no information about you.
Website: The website (app.devleo.de, legal.devleo.de) is hosted by Vercel Inc. Vercel receives the IP address and browser details of visitors to deliver the pages. The website sets no cookies and uses no analytics.
Fuel prices in Iceland: Icelandic prices come from the Gasvaktin open-data file hosted on GitHub (raw.githubusercontent.com), which your device downloads; GitHub sees an IP address.

7Transfers outside the EU#

Our server is in Germany. Some of the services named above are based outside the European Union, in particular Apple, Expo, Vercel, GitHub and Backblaze in the United States. Where personal data reaches them, the transfer relies on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses (Art. 45 and 46 GDPR).

8Data storage & retention#

Parking data (location, photos, timer settings, history) is stored on your device. If you sign in, a copy of your spots and history is also stored in our cloud database to enable sync.

How long we keep each kind of data:

Account, synced spots and history, fuel alerts: until you delete them or your account.
Device registrations: until you sign out or the app stops reaching the phone; phones not seen for 9 months are removed automatically.
Problem reports and support messages: 12 months, or until you delete your account.
Usage statistics: 6 months.
Sign-in codes: valid for 10 minutes and deleted within a day.
Log of automatic emails sent (address, subject, time): 180 days.
Unsubscribe choices: as long as needed to respect them.
Purchase records: up to ten years for tax law; your name and email are removed when you delete your account.
Encrypted backups: up to 6 months; data you delete disappears from them as the backups age out.
Fuel prices: 14 days (these are not personal data).

You can remove your cloud data at any time with Delete Cloud Data (Settings → Account), or by contacting us. Uninstalling the app removes all locally stored data.

You can delete your entire account from inside the app: Settings → Account → Delete account. That erases your account and everything attached to it — saved spots and history, fuel price alerts, and push notification registrations — from our servers. It is a deletion, not a deactivation, and it cannot be undone.

Two things survive it, deliberately. Records that a purchase happened are kept for accounting purposes, with your name and email address removed from them. And deleting your account does not cancel an App Store subscription — only Apple can do that, under Settings › your name › Subscriptions on your device.

9Server logs and security#

When the app or a browser contacts our server, the server records technical data for each request: the IP address, the time, the requested address, the response status and the app or browser identifier. We use this only to run the service and to detect and stop attacks. It is never combined with your account.

These logs are rotated automatically: once a small size limit is reached the oldest entries are overwritten, so they are kept only for a short time. Addresses that probe the server for vulnerabilities or try to reach non-public areas are blocked automatically; such a block is kept for up to seven days, or permanently for clear attack attempts.

10Permissions#

Location: Used to save a spot, show the map and navigate. In the background only for features you turn on: automatic parking detection, arrival alerts, turn-by-turn navigation with the screen off, and the fuel widget showing the station nearest to you. The position stays on your device; to find nearby stations only an approximate area is sent to our server.
Camera: Used only when you choose to add a photo. Never accessed automatically.
Notifications: Used to alert you before your parking timer expires and, if enabled, to send Premium fuel-price alerts.

11Your rights#

Under the GDPR you have the right to:

access the personal data we hold about you (Art. 15)
have it corrected (Art. 16) or deleted (Art. 17)
restrict its processing (Art. 18)
receive it in a portable format (Art. 20)
object to processing based on our legitimate interests (Art. 21)
withdraw a consent at any time with effect for the future (Art. 7(3))

The quickest way to erase everything is Settings → Account → Delete account. For a copy of your data (access or portability) or any other request, email support@devleo.de — we answer within one month.

To use any of these rights, email support@devleo.de. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work (Art. 77).

12Children's privacy#

Parking Reminder is not directed at children. You must be at least 16 to create an account. We do not knowingly collect personal data from children; if you believe a child has given us data, contact us and we will delete it.

13Changes to this policy#

We update this policy when the app or the law changes, and the date at the top always shows the current version. Significant changes are announced in the app.

14Contact#

If you have questions about this Privacy Policy, contact us at support@devleo.de.