Legal

Privacy Policy

Last updated: May 22, 2026 · Legal index

This Privacy Policy explains how Where's My Car collects, uses, stores, shares, and protects personal information when you use the Where's My Car mobile app, website, backend services, and related features.

Before publication, replace all placeholder company, address, representative, DPO, domain, and contact details. This document should be reviewed by legal counsel before production release.

1. Controller / service provider

Where's My Car helps users save the location of a parked vehicle, navigate back to it, manage vehicles, keep parking history, use optional family sharing, and use optional premium subscriptions.

Controller / service provider: [Company or developer legal name] [Registered address] [Privacy contact: privacy@wheresmycar.io] [Support: support@wheresmycar.io]

2. Information we collect

Account information:

Email address.
Password hash; we do not store your password in plain text.
Display name.
Profile photo or avatar URL.
Account status, email verification status, account creation and update times.
Email verification codes, expiry times, attempt counts, and verification logs.
Authentication and refresh-token records.

Vehicle information:

Vehicle name, brand, model, model year, license plate, color, vehicle type.
Vehicle photo URL.
Favorite/default vehicle preference.

Parking and location information:

Precise latitude and longitude of the saved parking point.
Location accuracy.
Parking floor, block, spot, notes, and parking photo.
Parking start and end times.
Walking distance back to the vehicle.
Walking start and end coordinates.
Walking duration.
Parking status and parking history.

Device, permission, and notification information:

Notification preference.
Device notification token and platform (iOS or Android).
Local app preferences and secure session data stored on your device.
Permission states are controlled by your device operating system. We only use

location, camera, photo library, and notification features when the relevant permission is granted.

Subscription and purchase information:

Premium plan, subscription status, store type, product ID, provider

subscription ID, environment, start date, expiry date, cancellation date, and auto-renewal status.

We do not collect or store full payment card, bank account, or billing-card

details. Payments are processed by Apple App Store, Google Play, or the applicable store/payment provider.

Support and communications:

Messages you send to support, including your email address and the content of

your request.

Technical and security information:

API request metadata, error logs, security logs, and other operational data

needed to keep the service reliable and secure.

Device model, operating system version, app version, IP address, and similar

technical information may be processed for security, debugging, fraud prevention, and service operation.

3. How we collect information

We collect information when you:

Create an account, sign in, or verify your email.
Add or edit a vehicle, parking record, note, photo, or profile.
Grant location permission and use parking or navigation features.
Enable notifications or parking reminders.
Purchase, restore, or sync a premium subscription.
Use family sharing.
Contact support or submit a deletion/privacy request.

4. How we use information

We use information to:

Create and secure your account.
Verify your email and maintain sessions.
Save your parking location and show it later.
Provide maps, distance, compass, route, voice guidance, and arrival features.
Manage vehicles, parking history, notes, photos, and filters.
Enable family sharing for active parking sessions.
Send parking reminders and app notifications you enable.
Verify, restore, and sync premium subscriptions.
Provide support and respond to requests.
Detect abuse, protect the service, debug errors, and improve reliability.
Comply with legal obligations and enforce our rights.

5. Location information

Location is central to Where's My Car. We use location only to provide parking, navigation, route, distance, weather-related helper features, and parking history features.

We may process:

The saved parking point.
Your current location while you navigate back to your vehicle.
Location accuracy.
Walking start and end coordinates.
Walking distance and duration.

The app is not designed for continuous background location tracking. The app does not request Android background location permission in the current project.

6. Camera, photos, and media

Camera and photo-library access are used only when you choose to add a profile, vehicle, or parking photo. We process the photos you choose or capture. We do not scan your full media library.

Uploaded photos may be stored on the server or a file-storage provider, and a URL may be associated with your account, vehicle, or parking record.

7. Notifications

If you enable notifications, we may store a device notification token and your platform so we can send parking reminders or app notifications. You can disable notifications in the app or your device settings.

If you use family sharing, family name, membership, roles, invite codes, and invite status may be processed. Family members can see active parking sessions shared within the family. Parking history is not designed to be broadly shared with family members unless a future feature explicitly says so.

9. Third-party services

We may use:

Hosting and backend infrastructure providers.
Email providers for verification and support emails.
OpenStreetMap-related map data and mapping libraries.
OSRM public routing service to calculate walking routes.
Open-Meteo to fetch weather information for a nearby location.
RevenueCat to manage subscription entitlements.
Apple App Store and Google Play for app distribution and in-app purchases.

These providers may process information under their own privacy policies. We do not intend to sell personal information or share it with advertising data brokers.

We may share information:

With vendors and service providers needed to run the app.
With family members if you enable family sharing.
With Apple, Google, RevenueCat, or similar providers for subscriptions.
When required by law, court order, or a valid government request.
To protect rights, safety, security, and prevent abuse.
In connection with a merger, acquisition, financing, or business transfer,

subject to appropriate protections.

11. Retention

We retain account information while your account is active. Parking history is kept until you delete specific records or delete your account. Authentication records and email verification records are retained only as needed for security and operation.

Subscription and transaction-related records may be retained longer when needed for accounting, fraud prevention, dispute handling, legal compliance, or store requirements.

Backups, security logs, and legally required records may remain for a limited period after account deletion.

12. Account and data deletion

You can delete your account in the app through the profile/account deletion flow. You can also request deletion by email at delete@wheresmycar.io.

When account deletion is completed, we delete or anonymize account-related vehicles, parking records, family records, invites, session tokens, notification records, verification records, and subscription records unless we must retain limited information for legal, security, fraud prevention, or dispute-resolution reasons.

Deleting your Where's My Car account may not cancel an active Apple App Store or Google Play subscription. You must cancel auto-renewal through the relevant store account.

13. Security

We use reasonable technical and organizational safeguards. Passwords are stored as hashes. Mobile session data is stored in secure device storage where available. API access is protected with token-based authentication.

No internet transmission or electronic storage method is completely secure. If you believe you found a security issue, contact security@wheresmycar.io.

14. International transfers

We may process and store information in countries other than your own. Where required, we use appropriate safeguards for international transfers, such as contractual protections or other lawful transfer mechanisms.

15. Children

Where's My Car is not intended for children. We do not knowingly collect personal information from children under 13, or a higher age where required by local law. If you believe a child provided information, contact us.

16. Your rights

Depending on your location, you may have rights to:

Access your personal information.
Correct inaccurate information.
Delete your information.
Restrict or object to processing.
Receive a portable copy of your information.
Withdraw consent where processing is based on consent.
Lodge a complaint with a data protection authority.

To exercise rights, contact privacy@wheresmycar.io. We may need to verify your identity before completing a request.

17. Changes

We may update this Privacy Policy from time to time. If changes are material, we may notify you in the app, on the website, or by email. The "Last updated" date shows when this version was last revised.