Privacy policy
Last updated: 21 October 2026
Part 1 - Privacy Policy
1. Who we are (Data Controller)
Parkberry is operated by:
Davidovski GmbH Wehntalerstrasse 283A, 8046 Zurich, Switzerland Commercial register no.: CHE-483.604.189 Email: support@parkberry.app
Davidovski GmbH is the data controller for personal data processed through the Parkberry app and website, except where we act as a processor on behalf of hosts (see §10) or where a payment provider acts as its own controller (see §7).
Data protection contact: support@parkberry.app
We are established in Switzerland and process personal data primarily here. We are not currently established in the EU/EEA and have not appointed a representative under Art. 27 GDPR; if and when our activities require one, we will appoint a representative and update this policy. EU/EEA residents can reach us at support@parkberry.app.
2. Scope and applicable law
Parkberry is offered in Switzerland and plans to expand internationally. We process personal data in accordance with:
- the Swiss Federal Act on Data Protection (revFADP / nDSG), and
- the EU General Data Protection Regulation (GDPR) where it applies (e.g. when we offer services to people in the EU/EEA).
Where the two frameworks differ, we apply the standard that gives you stronger protection.
3. The data we process and why
We collect only what we need to run a parking and EV-charging marketplace. The table below summarises the main categories.
| # | Data category | Examples | Why we process it (purpose) | Legal basis (GDPR / FADP) |
|---|---|---|---|---|
| 1 | Account & identity | Name, email, phone, sign-in identifiers (we never store a password - sign-in is a one-time code, or Apple/Google), language, role (driver/host), your confirmation that you are 18 or over, with the date, IP address and terms version | Create and secure your account; communicate with you | Contract (Art. 6(1)(b) GDPR); legitimate interest in account security |
| 2 | Vehicle profile | Vehicle height/length, EV connector type, licence plate | Vehicle-fit gate; identifying your car to the host and on your permit | Contract |
| 3 | Precise location | GPS position while the app is in use; live location during SOS or arrival handshake | Map-first search of nearby spaces; navigate you to the spot; share your live position during an arrival meet-up or SOS | Contract; consent for live-location sharing; vital interests for SOS (Art. 6(1)(d)) |
| 4 | Booking & access | Spaces booked, times, price, access method (QR access pass / printed permit / host meet), live pass + QR, Honored-Spot events | Fulfil bookings; grant access; operate the guarantee | Contract |
| 5 | Payments | Amount, currency, card / Apple Pay / Google Pay token reference, promo credit balance, payout details (hosts) | Take payment, issue refunds, pay hosts, prevent fraud | Contract; legal obligation (accounting); legitimate interest (fraud prevention) |
| 6 | Invoices & tax | PDF receipts, Swiss VAT invoices, host turnover | Issue receipts/invoices; meet bookkeeping and VAT duties | Legal obligation (Art. 6(1)(c)) |
| 7 | Identity / KYC | Host verification documents and, where required, ID checks; the date of birth shown on the document | Verify hosts, meet anti-fraud and (where applicable) financial-compliance duties; confirm the account holder is of legal age. The date of birth is read from the document for that check only and is deleted together with the document images - we keep just the outcome | Legal obligation; legitimate interest in a trustworthy marketplace |
| 8 | Photos | Host photos of the space; driver-contributed photos | Display listings; document the condition of a space | Contract; legitimate interest |
| 9 | Messages & content | In-app chat between drivers and hosts; reviews, star ratings, tips notes | Enable coordination; two-sided reviews; tipping | Contract; legitimate interest |
| 10 | Translations | Listing and chat text submitted for automatic translation (DE/FR/IT/EN, and additional languages as we expand) | Translate listings and chat across languages | Contract; legitimate interest |
| 11 | Loyalty | Volt Rewards points, tier (Sprout/Volt/Surge/Nova), redemptions | Run the loyalty programme | Contract |
| 12 | Device & technical | Device model, OS, app version, IP address, crash logs, push token | Deliver and secure the app; diagnostics; send notifications | Legitimate interest; consent for notifications where required |
| 13 | Support | Messages to support@parkberry.app, SOS events | Help you and keep the community safe | Legitimate interest; vital interests for safety events |
We do not sell your personal data, and we do not use it for third-party advertising.
Special note on sensitive data
We do not seek to collect special-category data (Art. 9 GDPR / Art. 5(c) FADP). Please do not include health, religious, political, or similar information in chat, reviews, or photos. KYC documents may reveal data such as nationality; we process these only as strictly necessary for verification and compliance.
Children
Parkberry accounts are for people aged 18 or over (see Terms §2). We do not verify your age when you create an account and rely on your confirmation of it, which we record together with the date, the IP address, and the version of the Terms you accepted. If we learn that an account belongs to someone under 18, we close it and delete its personal data, keeping only what accounting law requires us to retain.
4. Device permissions - what we ask for and why
We request only the permissions our features actually use. You can change these at any time in your device settings; some features may then stop working.
- Location - to find nearby parking and charging spaces, guide you to a booked spot, and (with your consent) share your live location during the arrival handshake or an SOS event. We do not track your location in the background for advertising.
- Camera & Photo Library - so hosts can photograph their space and drivers can contribute photos of a space. We access only the images you choose to upload.
- Notifications - to tell you when a booking is confirmed, when arrival is due, when a payment succeeds, and when the Honored-Spot Guarantee is triggered.
5. Access to the space and your licence plate
You get into a space with your live QR access pass, a host manual-meet handshake, or an offline printed permit for spaces without a gate - whichever the space supports. Parkberry does not operate automatic number-plate recognition (ANPR) cameras. Your licence plate is shown to the host of your booking and printed on your permit so the host, or a parking warden checking the permit, can match your car to your booking. We process your plate only for the duration and purpose of valid bookings, and we delete or anonymise access logs on the retention schedule in §8.
6. Promo credit
Parkberry may give you promo credit (for example from referrals, promo codes, Volt Rewards or the Honored-Spot Guarantee), shown in the app's Wallet screen. Promo credit is a discount Parkberry funds on future bookings; it is not a payment method and holds none of your money. It cannot be topped up and cannot be withdrawn. Promo credit is not legal tender, not a bank deposit, not transferable to third parties, and not redeemable for cash except where mandatory law requires.
Each user's promo credit balance is capped at CHF 3,000. We process promo credit data to operate balances, credits and their use at checkout, and we retain transaction records as required by accounting law (§8).
7. Payments - Stripe
You pay by card, including Apple Pay and Google Pay where your device supports them. Card payments are processed by our payment provider, Stripe, and are paid directly to the host through the host's own Stripe account; Parkberry receives only its published fee from that payment. No raw card data ever touches your device or our servers - it is handled directly by Stripe in a PCI-DSS-compliant environment. If you save a card, Stripe stores it and we keep only a reference (brand, last four digits, expiry) so you can pick it at checkout. We receive only a token/reference, the result, and the minimum metadata needed to fulfil and account for your booking.
- Stripe: Stripe Payments Europe, Ltd. / Stripe, Inc. acts as an independent controller for the payment data it processes. See Stripe's privacy policy at https://stripe.com/privacy.
- Apple Pay / Google Pay: Apple and Google process wallet payments under their own privacy terms.
- Host details from Stripe: We receive the account holder's name and postal address from Stripe to issue our commission invoices to hosts.
8. How long we keep data (retention)
We keep personal data only as long as needed for the purpose, then delete or anonymise it.
| Data | Typical retention |
|---|---|
| Account data | While your account is active; deleted or anonymised within 90 days of account closure, subject to legal holds |
| Booking & access records | Duration of booking + 24 months for disputes/guarantee/safety |
| Access logs (pass scans, arrivals, departures) | Deleted or anonymised within 30 days of the booking unless needed for a dispute |
| Invoices, receipts, accounting & tax records | 10 years (Swiss Code of Obligations art. 958f / VAT law) |
| KYC / verification records | 10 years after the end of the business relationship (anti-money-laundering / financial-compliance law) |
| Chat, reviews, photos | While relevant to the marketplace; reviews may remain visible after account closure in anonymised form |
| Promo credit transactions | 10 years (accounting), balance settled on closure |
| Crash logs & technical diagnostics | 90 days |
| Support / SOS records | 24 months (longer where a safety or legal matter is open) |
9. Who we share data with (processors & recipients)
We share personal data only with parties that need it to provide the service, under appropriate contracts. Categories:
- Payment providers - Stripe (see §7).
- Cloud hosting & infrastructure - [hosting provider, e.g. AWS / GCP / Exoscale, region], where our NestJS + PostGIS backend runs.
- Communications - [email/SMS/push provider] for transactional messages.
- Translation - [machine-translation provider] for automatic listing/chat translation. We send only the text to be translated.
- AI listing assistant - [AI provider] to generate draft listing descriptions for hosts from host-supplied details. We do not use your private chats to train third-party models.
- Maps - [map/geocoding provider] for the map-first experience.
- Error & analytics - [crash/analytics provider], configured to minimise personal data.
- Other users - hosts and drivers see the limited profile, booking, chat, review, and (for hosts) plate/booking data needed to complete a booking.
- Authorities - where we are legally required, or to protect rights, safety, or prevent fraud.
- Corporate transactions - a successor entity in the event of a merger or sale, under equivalent protection.
A current list of processors is available on request at support@parkberry.app.
10. Hosts as controllers
When a host uses Parkberry to manage their own listings, bookings, and guest communications, the host may act as an independent or joint controller for the personal data they handle (e.g. a driver's arrival details). Parkberry provides the platform and acts as the host's processor for those operations. Hosts must use guest data only to fulfil bookings and must comply with applicable data-protection law. If a driver needs it for a legal claim about a booking, we disclose your full name and postal address to that driver.
11. International transfers
We aim to host and process personal data in Switzerland or the EU/EEA. Some processors (e.g. Stripe) may process data outside Switzerland/the EEA. Where that happens, we rely on a recognised transfer mechanism, such as:
- an adequacy decision (Swiss FDPIC / European Commission), or
- the EU Standard Contractual Clauses with the Swiss addendum, plus supplementary safeguards where needed.
You can request details of the safeguards for a specific transfer at support@parkberry.app.
12. Your rights
Subject to applicable law, you have the right to:
- access the personal data we hold about you;
- rectify inaccurate data;
- erase data ("right to be forgotten"), subject to legal retention;
- restrict or object to certain processing;
- data portability - receive your data in a portable format;
- withdraw consent at any time (e.g. live-location sharing, notifications), without affecting prior processing;
- lodge a complaint with a supervisory authority.
You can exercise two of these yourself, immediately, without asking us: Settings > Privacy and data lets you download everything we hold about you, and delete your account. Deletion is irreversible and anonymises your data in place, keeping only what accounting and tax law require us to retain.
For anything else, contact support@parkberry.app. We respond within the legal timeframe (generally 30 days under GDPR; without undue delay under FADP). We may need to verify your identity first.
Supervisory authorities:
- Switzerland - Federal Data Protection and Information Commissioner (FDPIC), https://www.edoeb.admin.ch.
- EU/EEA - your local data protection authority.
13. Security
We use technical and organisational measures appropriate to the risk, including encryption in transit (TLS), encryption at rest for sensitive fields, access controls, tokenised payments (no card data on device/servers), and audit logging. No system is perfectly secure; if a breach affecting your data occurs, we will notify you and the relevant authority as required by law.
14. Changes to this Privacy Policy
We may update this policy. We will post the new version in the app and update the "Last updated" date; for material changes we will give prominent notice and, where required, ask for your consent.
15. Contact
Questions about privacy: support@parkberry.app · Davidovski GmbH, Wehntalerstrasse 283A, 8046 Zurich, Switzerland.