Privacy Policy
Effective 7 September 2026 · Last updated 7 September 2026
ParkNext is a marketplace where people rent out parking spaces they control and other people book them. This policy explains what the app collects, who can see it, and how to get it deleted. It is written to describe what the app actually does rather than to reserve rights we do not use.
The short version. We collect your account details, your device location while you are searching, and the details and photos of any parking space you list. We do not run advertising, analytics, or tracking of any kind, and we never see your payment details because payment is arranged directly between you and the other party. Anything you publish as a listing — including its address and photos — is visible to other users. You can delete your account and everything in it at any time.
1. Who we are
ParkNext ("we", "the app") is operated by the developer identified in the Contact section below. For the purposes of India's Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the personal data described here.
2. What we collect, and why
Account information
When you create an account we store your email address, your name, and — once you set one — your phone number, profile photo, and the short "about" description you write. If you sign in with Google, Google provides your email address, name, and profile picture to us; we do not receive your Google password or any other Google account data.
A phone number is required before you can book a space or publish one, because the two parties need to be able to reach each other to hand over access.
Location
If you grant location permission, the app reads your device's approximate or precise location and sends those coordinates to our server to find parking spaces near you. We use them for that search and to centre the map; we do not keep a history of where you have been, and we do not track your location in the background or while the app is closed.
You can refuse or revoke location permission in your device settings. The app still works — you search by typing an address instead.
Parking spaces you list
If you publish a space, we store its street address, its exact map coordinates, your photos of it, the description, price, vehicle types, amenities, and the days and hours it is available.
Publishing a space makes its address public. A listing's address, coordinates, and photos are visible to every ParkNext user. Only list a space whose location you are willing to make public, and do not include anything in a photo you would not want a stranger to see — a number plate, a house number, a person, or the inside of your home.
Bookings
For each booking we store which space, who booked it, the start and end times, the amount owed, and the times you checked in and out. We keep this so both sides have a record of what was agreed.
Ratings, reviews, and reports
We store the ratings and written reviews you leave after a booking, and any report you file about a listing. Reviews are attributable to the account that wrote them.
Notifications
If you allow notifications, we store a push token for your device so we can tell you when someone requests one of your spaces. The token identifies the installation, not you personally, and is stored where only our server can read it.
What we do not collect
- Payment or card details. Payment is arranged directly between the two parties, outside the app. There is no payment processor in ParkNext and no financial information passes through it.
- Advertising and analytics. The app contains no advertising SDK, no analytics SDK, and no crash-reporting or attribution SDK. We do not build advertising profiles, and we do not sell or rent personal data to anyone, for any purpose.
- Contacts, calendar, microphone, SMS, or call logs. None of these are requested or read.
3. Who can see your data
| Data | Who can see it |
|---|---|
| Listing address, coordinates, photos, price, availability | Every ParkNext user |
| Your name, phone number, and email | Only the other party to a booking that connects you — enforced by database rules, not just by the app's screens. Users with no booking between you cannot retrieve them. |
| Ratings and reviews you write | Users who can see the listing or profile being reviewed |
| Your booking history | You, and the owner of the space you booked |
| Your device push token | Our server only |
| Your device location | Our server, at the moment of a search. Never shown to other users. |
Photos are stored in public buckets. Listing photos and profile pictures are served from public storage, which means anyone holding the direct file URL can open it — including someone without a ParkNext account. The URLs are not listed or searchable anywhere, but treat every photo you upload as public rather than private.
4. Services we rely on
ParkNext is a small app built on third-party infrastructure. These are all of them, and what each one receives:
| Service | What it receives |
|---|---|
| Supabase — database, sign-in, file storage | Everything described in section 2. This is where the app's data lives. |
| Google Sign-In | Only if you choose it. Google tells us your email, name, and profile picture. |
| Firebase Cloud Messaging and Expo — notification delivery | Your device push token and the contents of the notification, which for a booking request includes the requester's first name, the price, and the times. |
| OpenStreetMap — map tiles | Your IP address and which part of the map you are looking at. |
| Nominatim (OpenStreetMap) — address search | The address text you type into a search box, and your IP address. |
| OSRM — driving route lines | The start and end coordinates of a route the app draws. |
| Google Maps | Only when you tap the navigate button. That hands the destination to Google Maps, and Google's own privacy policy applies from that point. |
These providers operate globally, so your data may be stored or processed on servers outside India.
5. How long we keep it
Account and listing data is kept while your account exists. Bookings, and the reviews attached to them, are kept while both accounts involved exist, because each side is entitled to their own record of what happened. Everything is removed when you delete your account, as described below.
6. Deleting your account and data
You can delete your ParkNext account at any time, by either route:
In the app
Open Profile, choose Delete account, and confirm. Deletion is immediate and cannot be undone.
By email
Write to the address in the Contact section from the email address on your ParkNext account, with
the subject Delete my account. We will delete it within 30 days and confirm by reply.
If you write from a different address we will ask you to verify ownership first, so that nobody
else can delete your account.
What deletion removes: your profile — name, email, phone number, profile photo, and about text — every parking space you published and its photos, every booking you made or received, every review and report you wrote, and your push notification tokens. It is a permanent deletion, not a deactivation, and there is no way for us to restore it afterwards.
What may remain: a booking you were party to continues to exist for the other person, since it is their record too, but it no longer carries your name or contact details. We may also keep records we are legally required to retain, for as long as the law requires.
7. Your rights
You can, at any time:
- See and correct your account details in the app, on the Profile screen.
- Ask us for a copy of the personal data we hold about you.
- Delete your account and its data, as described in section 6.
- Withdraw a permission — location, camera, photos, notifications — in your device settings. The app is built to keep working without each of them.
- Raise a grievance about how we have handled your data, by writing to the Contact address. We will respond within 30 days.
If you are in India, these rights sit alongside those given to you by the Digital Personal Data Protection Act, 2023.
8. Security
Traffic between the app and our servers is encrypted in transit. Access to your data is restricted at the database level by row-level security rules, so a user cannot read another user's contact details unless a booking connects them. Your push token is readable only by our own server.
No system is perfect, and we cannot promise absolute security. If a breach occurs that affects your personal data, we will notify you and the relevant authority as required by law.
9. Children
ParkNext is for adults. It is not directed at anyone under 18, and we do not knowingly collect data from anyone under 18. If you believe a child has created an account, write to us and we will delete it.
10. Safety between users
ParkNext connects two people so they can arrange access to a parking space. We do not verify that a host owns or is entitled to let the space they list, we are not party to the arrangement between you, and we do not handle the money. Use your own judgement, and use the reporting tool in the app if a listing is not what it claims to be.
11. Changes to this policy
If we change this policy we will update the date at the top of this page. If a change materially affects how your data is used, we will tell you in the app before it takes effect.
12. Contact
For any question about this policy, a request for your data, or a deletion request:
Email: sevice.parknext@gmail.com