← Back to the road

Your information

Privacy Policy

This policy explains how Penguin Labs LLC handles information when you use Park with Spark, this website, or contact us. Our initial app launch is in the United States.

Last updated October 18, 2026 · United States launch

The short version

  • Core parking features work without an account. Optional cloud sharing sends a saved spot to our service and the people sharing your car.
  • Location permissions are your choice. Maps, address lookup and Siri can also involve Apple services.
  • We do not sell personal information or use it for targeted advertising. Website traffic measurement is separate from the app.
  • You can request help, withdraw an email preference, or delete your account.

Website and email

This website does not collect email signups. At launch, download links will take you to the App Store; downloading the app does not automatically create a Spark account or sign you up for marketing.

The public website is hosted by Vercel. Hosting and network providers process technical request data, which can include IP addresses, requested URLs, browser information and timestamps, to deliver and protect the site.

If you email us, we receive your address, message and anything you attach through our email provider, Google. Please do not send passwords, payment card details, invite codes or another person’s location.

If you previously requested launch updates, email noticket.city@gmail.com to withdraw that request or ask us to remove your address. You can also use the unsubscribe instructions in any marketing email. Email preferences and app account deletion are separate.

Website measurement

The hosted site uses Vercel Web Analytics and Speed Insights to measure visits and page performance. This can include the page path, referring site, approximate location, device/browser information, visit time and loading metrics. These tools do not use advertising cookies. Our code does not attach your email address or parking coordinates to analytics events.

We exclude the shared-car invitation page from these measurement tools and remove query strings and fragments from event URLs. This does not remove request URLs from ordinary hosting logs. Treat invitation links as private.

We do not place advertising cookies or use cross-site advertising trackers. The local preview does not enable these Vercel measurement tools. Browser privacy controls may limit measurement. See Vercel Web Analytics privacy details and Speed Insights privacy details.

Parking and location

Saving a spot records precise coordinates, GPS accuracy, an address, curb side, parking time, street-cleaning rules and reminder times. Without cloud sharing, the saved spot is held on your device and in storage shared with the app’s widgets. Device backups are governed by your Apple settings.

When a signed-in account has an active cloud car, the current spot and the identity of the member who saved it are sent to our backend. Other members of that car can see the spot, address, relevant schedule and display name. Cloud synchronization can process a spot even if you are the car’s only member.

Optional auto-detect uses location events and motion activity to suggest when a drive has ended. Motion activity is processed on the device. Background features depend on your permissions, including Always location access where needed. Siri may ask to open the app if it cannot obtain location in the background.

Street-sign matching uses a database bundled with the app. This does not mean every location-related operation is offline: Apple maps, address search, reverse geocoding, navigation and Siri may process location or requests under Apple’s policies. The suspension calendar requests date-based information from NYC public services. Those services also receive normal connection information.

Accounts, sharing and purchases

Optional sign-in uses Supabase authentication and, if selected, Sign in with Apple. Account information includes an identifier, email, optional display name, provider and preferences. Email authentication credentials are processed by the authentication provider. We do not ask you to send your password to support.

Car sharing uses car identifiers, membership and invitation records. We store Apple push notification tokens associated with signed-in devices to deliver shared-car updates and reminders. Notifications and widgets can reveal location or parking information to someone who can see your screen.

Apple processes App Store payments. RevenueCat processes purchase and entitlement information, including transaction identifiers and an app user identifier; when you sign in, that identifier can be linked to your account. We do not receive your payment card details from Apple.

Diagnostics

Release builds use Sentry for crash and serious-error reports. Reports can include device/OS information, app version, error details and diagnostic context. Our configuration disables default personally identifying fields and performance tracing; we do not intentionally attach your name, email or saved parking coordinates. Service providers still process network information needed to receive a report. We do not promise that every technical diagnostic is free of personal data.

Optional product analytics help us understand onboarding and feature use. If you turn on “Help improve Spark,” the app sends a fixed list of actions, such as reaching a setup page, saving a spot, using Siri, tapping a widget, sharing a car or interacting with the paywall. Each event includes a timestamp, random installation and session identifiers, app version/build, and whether it came from a test or production build. These identifiers are separate from your account and billing identifiers. Our analytics events do not include your name, email, parking coordinates, addresses, notes, invitation codes or spoken requests.

Usage events are sent to our Supabase backend for internal product measurement. The installation identifier is hashed before storage. Our private dashboard receives aggregate counts. Network providers may still process IP addresses and connection logs; hashing an identifier does not make all processing anonymous. We do not use an advertising SDK, IDFA, advertising profiles or cross-app tracking.

Analytics is off by default. Change “Help improve Spark” during setup or in Settings → Privacy. Turning it off clears queued usage events and requests deletion of the previous installation’s analytics records. Offline deletion requests remain on this device until it can connect; uninstalling before that can prevent delivery. Re-enabling uses a new random identifier. Unsynchronized events are kept on the device for up to seven days; received events are normally removed after 90 days by our daily cleanup. First-seen installation metadata is retained while that installation remains active, and removed after 90 days of inactivity. A hashed deletion marker is kept for 90 days to prevent delayed uploads from restoring deleted records.

Why we use information

We use information to save and synchronize parking spots, display rules, schedule reminders, manage accounts and purchases, answer support requests, provide requested email, diagnose failures, prevent abuse and meet legal obligations. We do not use precise parking location or motion activity for advertising.

Who receives information

  • Your shared-car members: the current spot and associated sharing information. Share only with people you trust. Removing access cannot erase copies or screenshots someone already saved.
  • Service providers: Supabase for app backend/authentication, RevenueCat for entitlements, Sentry for diagnostics, Vercel for website hosting/measurement, and Google for our support inbox.
  • Apple and public data services: for the platform, maps, voice, purchases, notifications and calendar functions described above. Apple and public agencies also handle information under their own policies.
  • Legal and business needs: where reasonably necessary to comply with law, protect rights and security, or complete a merger, financing or transfer of the business, subject to applicable protections and notice requirements.

We use providers for the purposes described here and require appropriate protection under applicable agreements and law. We do not sell or rent personal information or share it for cross-context behavioral advertising.

Retention and deletion

The app’s active cloud parking record is designed to hold one current spot per car, replacing it when a new spot is saved and clearing its location payload when cleared. This is not a promise that no prior information can exist in device storage, pending synchronization, notifications, operational logs or backups.

Account deletion removes the account and its memberships, device tokens and associated identifying profile data. If other members remain, their car and shared spot may remain available to them; the deleted account’s attribution is removed. Billing, security, legal-compliance and backup records may remain for their applicable purposes and retention cycles.

We retain support messages and other email requests while needed to resolve the request and for related recordkeeping. We may keep a minimal opt-out record to honor a removal request. We do not set one universal retention period for every provider or record type.

Deleting an account does not clear every local app record or cancel an Apple subscription. See the deletion guide for the separate steps. We review retention against operational and legal needs and delete or de-identify information when it is no longer needed.

Your choices and privacy requests

  • Use core features without creating an account; change location, motion and notification permissions in iOS Settings.
  • Turn off auto-detect in the app, leave a shared car or manage its members using the account controls. Changing device permissions does not remove a spot already shared.
  • Use iOS controls for Lock Screen notification previews and remove widgets if you do not want parking information visible there.
  • Request access, correction, a copy or deletion of your information at noticket.city@gmail.com.

Depending on the law that applies to you and our business, you may have additional rights, including an authorized-agent request or an appeal of a decision. Email the same inbox with “Privacy appeal” if you disagree with our response. We may need proportionate information to verify your identity or authority. We respond within applicable legal deadlines and will not unlawfully discriminate against you for exercising your rights.

The app’s optional marketing preference is separate from downloading the app or contacting support. You can change that preference in the app or email us to withdraw it. A privacy policy describes our practices; it is not blanket consent to unrelated uses.

Security and processing locations

We use safeguards including encrypted network connections, account access controls and restricted backend permissions. No storage or transmission system is completely secure. Information may be processed in the United States and other countries where our providers operate, with protections required by applicable law.

Children

Spark is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us so we can investigate and remove it as required.

Changes and contact

We update the date on this page when the policy changes. For material changes, we provide additional notice or obtain consent where required before applying the change. Questions go to Penguin Labs LLC at noticket.city@gmail.com or through our contact page.