Privacy Policy
Effective date: 9 November 2026
TruckPark collects the minimum data needed to show truck parking and let drivers share how full it is. We never sell personal data, we do not use advertising or analytics trackers, and we do not store your GPS coordinates on our servers.
1. Who we are
The controller of your personal data is Aliaksei Dziuba, ul. Wilanowska 16/20, 00-422 Warszawa, Poland ("we", "us"). You can reach us at support@truckparkeu.com.
This policy covers the TruckPark Android app and the website truckparkeu.com. It applies to guests (people who use the app without an account) and to registered users.
2. What data we collect
| Category | What exactly | When |
|---|---|---|
| Guest identifier | A random ID created when you first open the app | Always |
| Account data | Email address, password (stored only as a secure hash by our hosting provider), display name, language; if you sign in with Google: your Google account email and name | Only if you create an account |
| Approximate activity | The time you last had the app open (used to show how many drivers are online) | While the app is on screen |
| Location-based records | Which parking you stopped at and when you arrived and left (visit history, last 50 visits); your presence at a parking for up to 18 hours; your distance to the parking when you report | When you stop at a parking or report free spaces |
| Contributions | Free-space reports, answers about the number of spaces and amenities, reviews (star ratings, safety rating, up to 200 characters of text, its language), one photo per review, reports about content | When you choose to contribute |
| Favourites and settings | Parkings you marked as favourites; app settings (stored on your device) | When you use these features |
| Points and referrals | Points you earned and why, your referral code, who invited you | When you contribute or enter a code |
| Anti-abuse signals | A trust score, flags for implausible activity (e.g. reports from two countries minutes apart), and, when enabled, the result of Google Play Integrity checks | Automatically |
| Technical data | IP address and request logs kept by our hosting provider for security | Every request to our servers |
We do not collect your contacts, phone number, payment card details, or advertising identifiers.
Website. truckparkeu.com uses no cookies, no analytics and no third-party scripts or fonts. Our hosting provider (Cloudflare) processes your IP address only to deliver the pages and protect the site from attacks.
3. Location data
Location is central to TruckPark, so we explain it separately.
- While the app is open. We use your device location to sort parkings by distance and show them on the map. Your coordinates are used on your device and sent to our servers only to answer the request; we do not store them.
- Automatic parking detection (optional). If you allow location access "all the time", your phone (Google Play services) watches a set of geofences around nearby parkings. The app does not track your route and does not run GPS continuously. When you stay at a parking for about 10 minutes, the app records the visit and may ask you how many spaces are free. You can turn this off in Settings or in your phone's settings at any time.
- When you report or stop at a parking, we check that you are close to it. For this the app sends your current coordinates once; our server calculates the distance and stores only the distance and the parking, not the coordinates.
- Visit history (which parking, arrival and departure time) is visible only to you. It keeps your last 50 visits; you can delete single visits or the whole history in the app.
- Photos. Before a review photo is uploaded, the app removes all embedded metadata, including GPS position, time and phone model.
We never share your location or visit history with other users or third parties. Other drivers only see aggregated information, such as "few spaces left" or "12 drivers online".
4. Why we use data and our legal bases
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Providing the app: map, list, parking details, favourites, history, account | Guest ID, account data, location while the app is open, favourites, visits | Performance of a contract, Art. 6(1)(b) |
| Automatic parking detection and free-space surveys | Background geofence events, visits, distance to parking | Consent, Art. 6(1)(a), given through the in-app explanation and your phone's permission; you can withdraw it at any time |
| Showing other drivers how full parkings are, ratings and reviews | Your contributions, your display name next to reviews | Performance of a contract, Art. 6(1)(b) |
| Points, PRO and referrals | Points ledger, referral data | Performance of a contract, Art. 6(1)(b) |
| Preventing abuse and keeping data reliable (fake reports, spam, multiple accounts) | Trust score, implausibility flags, integrity checks, request logs | Our legitimate interest in a reliable and secure service, Art. 6(1)(f) |
| Emails you request: confirmation, password reset, email change | Email address | Performance of a contract, Art. 6(1)(b) |
| Moderating reviews and photos, handling reports | Content, reports, moderation log | Legitimate interest, Art. 6(1)(f), and legal obligations regarding illegal content |
| Legal claims and obligations | Data needed for the specific case | Legal obligation, Art. 6(1)(c); legitimate interest, Art. 6(1)(f) |
Anti-abuse checks are automated and only change how much weight your reports carry or whether content is hidden pending review. They do not produce legal effects or similarly significant effects on you. You can always ask us for a human review.
5. Who we share data with
We use these service providers. They process data only on our instructions (as processors) or, where marked, under their own terms.
| Provider | What they do for us | Where data is processed |
|---|---|---|
| Supabase Inc. | Database, user accounts, file storage for review photos, server functions | EU — Frankfurt, Germany (Amazon Web Services) |
| Resend Inc. | Sending account emails (confirmation, password reset) | EU — Ireland |
| Cloudflare Inc. | Domain name service, website hosting, forwarding of emails sent to our support address | Global network, EU where possible |
| Maps display (Google Maps SDK), sign-in with Google, device location and geofencing (Google Play services), app integrity checks (Play Integrity), app distribution and, in future, subscription payments (Google Play) | Global; Google acts as an independent controller for data it collects under its own terms |
- Google Maps and Google Play services receive technical data from your device (such as IP address and device information) when you use the map or location features. See Google's privacy policy: https://policies.google.com/privacy.
- Payments. If you buy a subscription, the payment is processed by Google Play. We receive only the purchase status (product, period, validity), never your card details.
- We may disclose data if required by law or to protect the rights and safety of users, for example in response to a valid court order.
- We do not sell personal data and do not share it for advertising.
6. What other users can see, and transfers outside the EEA
Visible to other users: your display name, star ratings, safety rating, review text and review photo, with the date. Nothing else: not your email, not your visit history, not your points, not your location.
Transfers outside the European Economic Area. Some providers (Supabase, Resend, Cloudflare and Google are US companies) may access data from outside the EEA. Such transfers rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses. You can ask us for a copy of the relevant safeguards.
7. How long we keep data
| Data | Kept for |
|---|---|
| Account data, favourites, points, referral data | Until you delete your account |
| Guest data (no account) | Deleted after 12 months without opening the app |
| Visit history | Your last 50 visits; older ones are deleted automatically. Deleted immediately with your account |
| Presence at a parking | Up to 18 hours, then deleted |
| Free-space reports, answers about spaces and amenities | Linked to you for 12 months, then the link to you is removed; the anonymous parking status and statistics remain |
| Reviews and review photos | Until you delete them or your account, or until removed by moderation |
| Reports about content and moderation records | Up to 24 months after the case is closed |
| Hosting provider security logs (including IP address) | A short period set by the provider, for security only |
| Emails we send | Delivery logs kept by our email provider for a limited period |
When you delete your account, we delete your personal data as described in Account deletion. Anonymous contributions that no longer identify you remain, because they keep parking information accurate for other drivers.
8. Your rights
Under the GDPR you have the right to:
- access your data and get a copy;
- rectify inaccurate data (most of it you can edit in the app);
- erase your data — delete your account in the app (Profile → Account → Delete account) or by email;
- restrict processing and object to processing based on our legitimate interest;
- data portability — receive the data you gave us in a machine-readable format;
- withdraw consent at any time, for example by turning off automatic parking detection; this does not affect processing that happened before.
To use these rights, email support@truckparkeu.com from the address linked to your account (or include your guest ID from the app, if you have no account). We answer within one month. We may ask you to confirm your identity.
You can also lodge a complaint with a supervisory authority, in particular in the country where you live or work. In Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, https://uodo.gov.pl.
9. Age, security, changes and contact
Age. TruckPark is intended for adults. You must be at least 18 years old to use it.
Security. Data is encrypted in transit (HTTPS). Access to the database is restricted by row-level rules so that each user can read only their own private data. Passwords are never stored in readable form. Photos are stripped of metadata before upload. No system is perfectly secure; if we learn of a breach that affects you, we will inform you and the supervisory authority as the law requires.
Changes. We may update this policy. We will show material changes in the app or by email at least 14 days before they take effect. The effective date at the top shows the current version.
Contact. support@truckparkeu.com · Aliaksei Dziuba, ul. Wilanowska 16/20, 00-422 Warszawa, Poland.