Privacy Policy for SpotSight

Last Updated: January 22, 2026

1. Introduction

SpotSight ("the Application," "we," "our," or "us") provides a crowdsourced parking information platform. We are committed to protecting the privacy and personal data of our users. This Privacy Policy describes our practices regarding the collection, use, and disclosure of information through our iOS mobile application. By utilizing the Application, you consent to the data practices described in this policy.

2. Information Collection and Usage

The Application is designed to operate primarily on an anonymous basis. We do not require the creation of user accounts or the provision of personal identifying information such as names, email addresses, or phone numbers.

2.1 Location Information (Optional)

The Application may request access to your precise location (GPS coordinates). This access is granted solely via the "When In Use" permission. If granted, this data is used only in real-time to identify parking availability in your immediate vicinity or at a searched destination. Location data is processed locally and is not stored on our permanent servers. Users may choose to manually search for destinations to avoid sharing real-time location data.

2.2 Search History

The Application maintains a record of destination names and coordinates searched by the user. This data is stored exclusively on the user's local device to facilitate quick access to recent searches. This information is not transmitted to our servers and may be cleared by the user at any time within the Application settings.

2.3 User-Generated Content

We collect and store anonymous contributions submitted by users, including:

  • Helpfulness ratings (votes) for parking zones;
  • Textual feedback regarding parking experiences;
  • New parking zone information (name, address, coordinates, and notes).

All such contributions are associated with an anonymous, non-identifiable device identifier. We do not collect personal information in conjunction with these submissions.

2.4 Technical Device Identifiers

A unique, random identifier is generated for each device utilizing the Application. This identifier is used for administrative purposes, including rate limiting to prevent service abuse and preventing duplicate submissions. This identifier is not linked to any personal identity.

2.5 Data Exclusions

The Application does not collect the following:

  • Personal contact information (names, emails, phone numbers);
  • Financial or payment information;
  • Browsing history unrelated to the Application;
  • Device-level contacts or photo libraries;
  • Advertising identifiers (IDFA);
  • Cross-app tracking data.

3. Data Processing and Intelligence

3.1 Core Functionality

Data is processed to display parking locations, calculate distances to destinations, and facilitate navigation through third-party mapping services.

3.2 Crowdsourced Aggregation

Anonymous user contributions are aggregated to provide community-wide parking insights. This includes ranking parking zones by helpfulness and reviewing user-submitted zones for database inclusion.

3.3 Artificial Intelligence Processing

The Application utilizes Google Gemini AI to process public business reviews and anonymous user feedback. This processing is performed to generate synthesized parking insights. Only the text of reviews and anonymous feedback is provided to the AI service. No location data, device identifiers, or personal information is shared with AI processing layers.

3.4 Security and Abuse Prevention

We implement automated filters and rate limiting (including limits on votes and submissions per hour) to maintain service integrity and prevent the submission of inappropriate content.

4. Third-Party Service Providers

The Application integrates certain third-party services. Each provider maintains its own independent privacy policy:

  • Firebase (Google LLC): Used for cloud database management. Data includes anonymous identifiers and submission text.
  • Google Places API: Used for destination and address lookup. Data includes search queries and coordinates.
  • Google Gemini AI: Used for content synthesis. Data includes review and feedback text.
  • OpenStreetMap: Used for map data augmentation.
  • Apple Maps: Used for map rendering and user navigation.

5. Data Retention and Security

5.1 Retention Schedule

Data is retained only as long as necessary for its intended purpose:

  • Pending submissions: 90 days for review.
  • Verified parking data: Retained indefinitely while relevant to the database.
  • Anonymous votes and feedback: 1 year.
  • Administrative counters: 24 hours.

5.2 Security Measures

We employ industry-standard security measures, including HTTPS encryption for all data in transit, Firebase security rules for access control, and automated content moderation. As we do not maintain traditional user accounts, there are no passwords stored or susceptible to compromise.

6. User Rights and Data Control

6.1 Regulatory Compliance

The Application complies with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

6.2 Exercise of Rights

Users may exercise their rights to access, rectify, or erase data through the following methods:

  • Deletion: Users may permanently delete all data associated with their device (including all submissions and identifiers) via the "Delete My Data" feature in Application settings.
  • Access: Users may request a machine-readable export of data associated with their device by contacting privacy@spotsight.app.

7. Children's Privacy

The Application is not intended for use by individuals under the age of 13. We do not knowingly collect information from children under 13. In accordance with the Children's Online Privacy Protection Act (COPPA), as we collect no personal identifying information, we maintain strict compliance.

8. International Data Transfers

The Application utilizes servers located in the United States. Users outside the United States acknowledge that data will be transferred to and processed in the U.S. Google LLC, our primary infrastructure provider, complies with recognized international data transfer frameworks.

9. Contact Information

For inquiries regarding this Privacy Policy or to exercise data rights, please contact our Privacy Office:

  • Email: privacy@spotsight.app
  • General Support: support@spotsight.app

Requests will be processed within thirty (30) days of receipt.

← Back to Home