Privacy

What we collect

Your name, mobile number and email address, because a host needs to know who is arriving and we need to be able to reach you about money.

Your area and address if you give them, which are used to suggest parking near you and are never shown to another customer.

The number plates and vehicle types you save, because the person at the gate reads a plate.

Your bookings, your wallet movements, and any payout destination you add. A payment we take is recorded with the gateway's own reference so a disputed charge can be traced.

A profile photo if you choose to add one. It is taken through your camera rather than uploaded, and the reason is in the next section.

What we deliberately do not collect

We do not collect national identity documents. An NID image is the most sensitive thing this product could ever hold, and without a way to check one against the Election Commission it would be a custody burden in exchange for nothing. A file never collected cannot leak.

We do not track you across other websites, we do not sell anything about you, and there is no advertising network embedded in this site.

Your profile photo

It is stored privately. There is no public address for it. When it is shown, the page holds a signed link that stops working after a few minutes, so it cannot be hotlinked, indexed, or passed around by copying an address out of the page.

Replacing it deletes the previous file rather than leaving it in storage. You can remove it entirely at any time from your profile.

Who else sees anything

A host sees the name, the number plate and the arrival time of somebody who has booked their space. Not your address, not your email, not your wallet.

A guest sees a host's space and area, not their home address or their earnings.

Our payment gateway receives your name, email and mobile number because a card payment requires them. Our SMS provider receives your mobile number and the message. Neither receives anything else.

Codes and passwords

A verification code is never stored. What is kept is a one-way hash of it combined with a secret that does not live in the database, so a copy of the database cannot be used to replay anybody's codes.

Passwords are handled by our authentication provider and we never see them. Changing one requires the current password and a code on your mobile.

How long we keep things

Money records are kept indefinitely, because a wallet has to balance against every movement that ever happened and a ledger with holes in it is not a ledger.

Everything else is kept while your account exists. Ask us to delete your account and we will remove what we can and keep only what the money records require.

Asking us about your data

Write to support@parkingkoi.com and say what you want. You can ask for a copy of what we hold, ask us to correct it, or ask us to delete your account.