App Permissions & Third Parties

This document explains the app permissions and third-party services used by Where's My Car.

1. Location permission

Android permissions:

• ACCESS_COARSE_LOCATION
• ACCESS_FINE_LOCATION

iOS permission string:

• NSLocationWhenInUseUsageDescription

Purpose:

• Save where you parked.
• Show your current location while returning to your vehicle.
• Calculate distance, direction, route, and arrival status.
• Display parking history on a map.
• Support optional weather or route helper features.

The app is not designed for continuous background location tracking. The current Android manifest does not request ACCESS_BACKGROUND_LOCATION.

2. Camera permission

Android permission:

• CAMERA

iOS permission string:

• NSCameraUsageDescription

Purpose:

• Take a profile photo.
• Add a photo to a parking record.
• Capture a vehicle or parking-spot photo to help you remember the location.

3. Photo library permission

iOS permission string:

• NSPhotoLibraryUsageDescription

Purpose:

• Choose a profile, vehicle, or parking photo.

The app processes only photos you choose or capture.

4. Notification permission

Android permission:

• POST_NOTIFICATIONS

Purpose:

• Send parking reminders.
• Support notification preferences you enable.
• Support future app notifications related to parking, premium, or family

features.

You can disable notifications in the app or device settings.

5. Internet and network state

Android permissions:

• INTERNET
• ACCESS_NETWORK_STATE

Purpose:

• Connect to the Where's My Car backend.
• Load maps, routes, weather, subscription, and email-verification services.
• Sync account, parking history, vehicle, family, and premium data.

6. Local device storage

The app may store:

• Access token.
• Refresh token.
• Cached account/session state.
• Onboarding-completed flag.
• Notification preference.
• Device notification token.

These are used to keep you signed in and remember app preferences.

7. Where's My Car backend

The backend processes:

• Account and email verification data.
• Vehicles.
• Parking records and precise locations.
• Photo/avatar URLs.
• Family sharing records.
• Premium subscription records.
• Notification device registrations.
• Authentication and security records.

8. OpenStreetMap and map data

The app may use OpenStreetMap-related map data and mapping libraries. Map accuracy, coverage, and freshness vary by region.

9. OSRM routing

The app may send origin and destination coordinates to OSRM public routing services to calculate walking routes.

10. Open-Meteo weather

The app may send a nearby coordinate to Open-Meteo to fetch current weather information related to your parking/walking experience.

11. RevenueCat, App Store, and Google Play

Premium subscriptions may use RevenueCat and store services. These providers may process subscription status, product ID, store type, provider subscription ID, and related entitlement data. Where's My Car does not collect full payment card details.

12. Email provider

Email providers may be used to send verification codes and support emails. Verification codes are short-lived and used only for account verification.

13. User control

You can:

• Manage location, camera, photo, and notification permissions in device

settings.

• Delete parking records and vehicles in the app.
• Delete your account in the app or by request.
• Cancel premium subscriptions through the relevant app store.