Privacy Policy

Information you give us

• Account: your mobile number; if you sign in with Google, your name and email address from Google; whether you are a Driver, a Host or both.
• Profile: name, date of birth or age, address (house number, street, city, pincode) and a map pin for your home or frequent location.
• Identity images: photos of the front and back of your Aadhaar card and a live selfie taken in the app. See Aadhaar and identity documents.
• Listing (Hosts): the space’s address and exact location, 3 photos, description, hourly price, vehicle type, amenities, whether you own or rent it, and a photo of your proof (such as a property tax receipt or rental agreement).
• Bookings: times, duration, price, status, cancellations, whether the Host marked the Driver’s payment as received, and Platform Fee dues.
• Ratings and comments you give or receive after a booking.
• Messages and reports you send us, such as support requests, complaints and reports about a Listing or user. When you use “Contact Support” or a “Report” option, the app fills in the email with your account ID, registered phone number, app version and phone type, and the Listing or Booking ID you are reporting, so we can help. You can see and edit the email before sending it.
• Terms acceptance: the date and time you accepted our Terms and the version you accepted, recorded each time you log in or create an account.
• Account deletion: the date you deleted your account, so it can be reopened within 7 days and permanently deleted after that.

Information collected automatically

• Location: your phone’s GPS location while you use features such as nearby search or dropping a pin, only with your permission. We check whether a location is faked by a mock-location app and reject it.
• Device and app data: a push notification token, device platform (Android or iOS), app version, and whether the device appears rooted or jailbroken.
• Language choice: English or Hindi, stored only on your phone.
• Crash and diagnostic data: crash reports and technical logs (device model, OS version, time and cause of the crash) sent through Firebase Crashlytics.

What we do not collect

We do not collect your UPI PIN, bank account passwords, card details or payment credentials, because payments happen directly between users outside the app. We do not read your contacts, messages or other apps. We do not store your Aadhaar number as a separate field or use your Aadhaar for authentication.

• Why: only so a person at ParkSaathi can manually check that you are a real person and that a Host has a right to list their space, to reduce fraud and make the Platform safer.
• Voluntary and masked: you share these images voluntarily. Please use a masked Aadhaar (first 8 digits hidden). If you prefer not to share Aadhaar, write to us and we will tell you which other government ID we can accept.
• No UIDAI authentication: we do not send your Aadhaar to UIDAI or any government database, do not do e-KYC, and do not use automated face recognition. Your selfie is compared with your ID photo by eye.
• Who can see them: only you and our authorised reviewer. They are stored in a private, access-controlled storage area and are never shown to other users, published or sold.
• How long: while your account exists. When your account is deleted, the images are deleted permanently, normally within 7 days. If your verification is rejected, your account and images are deleted automatically 7 days after the rejection.

• to create and secure your account and sign you in (OTP or Google);
• to review your identity images and approve or reject your account;
• to review, approve and show Listings;
• to show nearby spaces, maps, directions and distances;
• to send and manage booking requests, acceptances, cancellations and completions, and to let the Host and Driver contact each other;
• to send push notifications, OTPs and service messages;
• to record Platform Fee dues and payments from Hosts;
• to show ratings and help users trust each other;
• to detect, prevent and investigate fraud, fake locations, misuse, safety issues and breaches of our Terms;
• to fix crashes and improve the app;
• to answer your requests, complaints and reports, and to act on reported Listings or users;
• to keep a record that you accepted our Terms;
• to comply with law, court orders and requests from authorities, and to protect our legal rights.

We process your personal data on the basis of your consent, which you give when you accept this policy in the app and when you grant phone permissions, and for the “legitimate uses” allowed by Section 7 of the DPDP Act, such as complying with law, court orders and requests from authorities, and responding to emergencies.

You can withdraw your consent at any time by writing to us or by deleting your account. Withdrawal does not affect processing already done. Because the Platform cannot work without identity checks, location and booking data, withdrawing consent for these means you will no longer be able to use the Platform.

Other users

• Everyone using the app can see an approved Listing’s photos, description, price, vehicle type, amenities, approximate and map location, and the Host’s average rating.
• When a Driver sends a request, the Host sees the Driver’s name, verification status, saved address and map location, number of completed trips and average rating.
• After a Host accepts, the Host and Driver can see each other’s phone number so they can call. Past bookings show the other person’s name.
• We never show your Aadhaar, selfie, property document or date of birth to other users.

Service providers

We use trusted providers who process data for us under contract and only on our instructions:

• Supabase: database, sign-in, file storage and server functions;
• Google: Google Maps Platform (maps, place search, geocoding), Google Sign-In, Firebase Cloud Messaging (notifications) and Firebase Crashlytics (crash reports);
• SMS providers: to deliver OTPs to your phone.

Authorities and legal reasons

We share data with courts, police, government or regulatory authorities when required by law or a lawful order, or when we believe in good faith that it is needed to prevent fraud, protect someone’s safety, investigate an offence or defend our legal rights.

Business changes

If ParkSaathi is merged, acquired or reorganised, your data may pass to the new owner, who must continue to protect it under this policy.

We do not sell, rent or trade your personal data, and we do not share it with advertisers.

Your data is stored on servers run by our service providers, which may be in India or in other countries. Where data is processed outside India, we do so only as allowed by Section 16 of the DPDP Act and any restrictions notified by the Government of India, and our providers are bound to protect it.

• All data is encrypted in transit (HTTPS/TLS).
• Your sign-in session is stored on your phone in AES-256 encrypted storage, with the key kept in the phone’s secure keystore.
• Identity images and property documents are kept in private storage. Database access rules ensure each user can reach only their own records.
• Only authorised people at ParkSaathi can access review data, and only when needed.
• App data backups to your cloud account are disabled on Android.

No system is completely secure. If a personal data breach happens, we will inform the Data Protection Board of India, CERT-In and affected users as the law requires. Keep your phone locked and never share your OTP.

Account and profile

While your account is active. When you delete it, we keep it hidden for 7 days so you can reopen it, then delete it permanently.

Aadhaar images, selfie and property documents

Until your account (or, for a property document, your Listing) is deleted, then permanently deleted. Rejected accounts are deleted 7 days after rejection.

Listings, bookings, ratings, payment-status and Platform Fee records

Deleted permanently together with your account, 7 days after you delete it. This also removes those bookings from the other user’s history.

Terms acceptance record

Kept with your account and deleted together with it.

Emails you send us (support requests and reports)

Kept in our support inbox for as long as needed to handle them and any follow-up or legal matter. Ask us if you want them deleted.

Push notification token

Deleted when you sign out or when it stops working.

Crash reports

Kept by Firebase Crashlytics for up to 90 days.

Information about blocked accounts or unlawful activity

At least 180 days after deletion, as required by the IT Rules, 2021, or longer if an authority or court asks us to.

Under the DPDP Act, you have the right to:

• get a summary of the personal data we hold about you and how we use it;
• correct, complete or update inaccurate or incomplete data;
• have your data erased, unless we must keep it by law;
• withdraw your consent;
• have your complaint about our handling of your data resolved;
• nominate another person to exercise your rights if you die or become unable to.

You can update most profile details in the app. For anything else, write to info@parksaathi.app from your registered email, or include your registered phone number. We may need to confirm your identity first. We aim to respond within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

In the app

1. Open Profile and tap Delete account at the bottom.
2. Read the warning and confirm. Any upcoming Bookings must be finished or cancelled first.
3. You are signed out on all devices, your Listing is hidden, and you can no longer log in to the account.

By email

If you can’t use the app, email info@parksaathi.app with the subject “Delete my ParkSaathi account”, from your registered email or including your registered mobile number. We may contact you on that number to confirm it is you.

What happens next

• For 7 days you can reopen the account by choosing Create Account in the app with the same mobile number or Google account. Everything is restored.
• After 7 days we permanently delete your account, profile, Aadhaar images, selfie, property documents, Listings and photos, Bookings, ratings and Platform Fee records. This can’t be undone. You can then sign up again as a new user.

Unpaid Platform Fee dues remain payable under our Terms even after the account is deleted.

Camera

To take your Aadhaar photos, live selfie, listing photos and proof document.

Photos

To pick listing photos or a proof document from your gallery, if you choose to.

Location

To find spaces near you and to pin your address or parking spot.

Notifications

To tell you about booking requests and when a slot ends.

The Platform is only for people aged 18 or over. We do not knowingly collect personal data from children. If we learn that a child has created an account, we will delete it.

Our website is information-only. It does not use advertising or tracking cookies and has no sign-in. Our hosting provider may keep standard server logs (such as IP address, browser and pages visited) for security and to keep the site running.

We may update this policy. We will change the “Last updated” date and, for important changes, tell you in the app or by email, and ask for fresh consent where the law requires it.

For privacy questions, requests or complaints, contact our Grievance Officer:

We will acknowledge your complaint within 24 hours and try to resolve it within 15 days. Also see our Terms and Conditions and Refund Policy.