Privacy Policy

The data controller for the Site and the Apps is Parklynn, operated by Akeleon Technologies, Dubai, United Arab Emirates. For any privacy matter, contact us at parklynn@akeleon.com.

On the Site (you cannot create an account there):

• Server and security logs. Like virtually every website, our servers automatically record your IP address, browser type (user agent), the pages requested, and timestamps. We use this to operate and secure the Site and to prevent abuse.
• Analytics data (only with your consent). If you accept analytics cookies, Google Analytics 4 collects: the pages you view, buttons and sections you interact with, how you arrived at the Site (e.g. a Google search, a link, or an ad), your approximate location at city level (derived from your IP address, which Google does not store in full), your device and browser type, and a random identifier stored in a cookie so repeat visits can be counted. We do not receive your name or exact address from analytics.
• Visit and sign-up attribution (only with your consent). After you accept, we record which landing page you saw, the site or campaign that brought you there, a random visitor id, and the country derived from your IP address. If you later create an account, this record is linked to it so we can tell which pages lead to sign-ups. Without consent nothing is recorded or linked.
• Site-experience cookies. The Site may assign your browser a random identifier (a UUID that says nothing about who you are) so that we can show you a consistent version of the page when we test two designs against each other (A/B testing), together with cookies recording which version you were shown. See the Cookie Policy for the full list.
• Live map preview. The parking-map preview embedded on the Site loads real listing data through our own servers and map images from MapTiler. Viewing it does not create an account or profile about you.
• Anything you send us. If you email us, we receive your email address and whatever you include in the message.

In the Apps, when you create and use an account:

• Account details. Name, email address, password (stored as a one-way hash), phone number and, for vendors, business details and the result of SMS phone verification. When you sign in with Google we receive your name and email address from Google.
• Consent records. When you accepted the Terms of Use and this policy and which version, and whether you opted in to marketing emails.
• Marketplace activity and user content. We process bookings, parking listings, prices, messages and offers exchanged in chat, vehicle details and selected vehicle photos, reports, and blocking actions so we can provide transactions, communication, moderation, fraud prevention, and user-safety features. Reports you submit, including any screenshots, are visible only to Parklynn staff.
• Location. Approximate or precise location when you choose location features such as nearby parking or navigation. To calculate driving directions, the coordinates of your position and destination are sent to a routing service (see section 4); nothing else about you travels with them.
• Native app permissions. The mobile app asks for location access only when you use nearby parking or navigation. It asks for photo access only when you add vehicle images and uploads only the photos you select.
• Usage records. We record when you are signed in to the Apps and for how long each day (last seen, active time, number of sessions), derived from your requests to our servers and the app's connection to our chat service. We use this to understand how the service is used and to support you; it is not shared with other users.
• AI valet. When you use the Parklynn Valet assistant, the messages you type in that chat, the parking results it looks up for you and, if you shared it, your approximate location are sent to OpenAI to generate the answer. We do not store the text of these conversations; we keep only which features were used and how much the answer cost. OpenAI does not use API data to train its models.
• Email engagement. Emails we send about your account or, with your consent, for marketing contain a tiny image and tracked links that tell us whether the email was opened and which links were clicked. See section 7.

• Providing the marketplace (accounts, listings, bookings, chat, offers, navigation, vehicle records) — necessary to perform our contract with you.
• Operating and securing the Site and Apps (server logs, essential cookies, usage records, moderation of reports, blocking) — processing necessary for our legitimate interest in running a safe service.
• Understanding and improving the Site (Google Analytics, A/B testing measurement, sign-up attribution) — your consent, given through the cookie banner. You can refuse or withdraw it at any time without affecting your use of the Site or Apps.
• Marketing emails (tips, offers, alerts about new listings in areas you asked about) — your consent, given by ticking the optional box at registration. Every such email has a one-click unsubscribe link.
• Service emails (welcome email, verification, password reset, alerts about unread messages in your conversations) — necessary to provide the service; the unread-message alerts can be switched off with the link in the email.
• Responding to you (email) — necessary to handle your request.

We do not sell personal data, we do not use it for automated decisions that have legal effects on you, and we do not use advertising or profiling cookies.

• Hetzner Online GmbH (Germany) — hosts our servers and database. All account and marketplace data is stored in the European Union.
• Google LLC (USA) — Google Analytics (only with your consent) and Sign in with Google (only when you use it). Analytics data may be processed on Google servers outside the UAE, including in the EU and the United States.
• Twilio Inc. (USA) — sends the SMS code used to verify a vendor's phone number. Twilio receives the phone number and the code.
• MapTiler AG (Switzerland) — serves the map images in the Site and Apps and receives your IP address and the map areas you view.
• OpenStreetMap Foundation (UK) — the Nominatim address search used when you type an address in the driver app receives the text you typed and your IP address.
• Project OSRM routing service — receives start and destination coordinates to compute driving directions. No identifier is sent with them.
• OpenAI, L.L.C. (USA) — generates the Parklynn Valet assistant's answers from the chat messages and parking data described in section 2.
• Our email delivery provider — sends the emails described above and receives your email address and the email content.
• Other users. Vendors see the name, vehicle details and messages of drivers who book with them; drivers see a vendor's business name, listing details and messages. Your email address and phone number are not shown to other users.

Where personal data leaves the UAE, we rely on the transfer provisions of Articles 22–23 of the PDPL: transfers to jurisdictions with appropriate data protection laws (such as the EU, the UK and Switzerland) or subject to appropriate contractual safeguards with the recipient.

• Account and marketplace data: for as long as your account exists. When you delete your account, your name, contact details, vehicles, photos, favourites, notifications, consent records, usage records, email history and sign-up attribution are deleted or anonymised immediately. Bookings, offers and chat messages are kept in anonymised form because the other party to the transaction needs them for their own records and accounting.
• Server logs: kept for a short rotation period, at most 30 days, unless needed to investigate abuse.
• Google Analytics event data: retained for up to 14 months, then deleted automatically.
• Visit records that never led to a sign-up: kept for as long as the landing-page experiment they belong to is being evaluated, then deleted.
• Cookies and browser storage: see the lifetimes listed in the Cookie Policy (at most 12 months for our own cookies).
• Emails you send us: kept as long as needed to handle your request and our records obligations.

You have the right to:

• ask for a copy of the personal data we hold about you (access and portability);
• have inaccurate data corrected (rectification) — you can edit your profile in the Apps at any time;
• have your data deleted where there is no lawful reason to keep it (erasure) — drivers can delete their account from the profile screen in the Apps, vendors by emailing us;
• restrict or object to processing, including any direct marketing;
• withdraw consent at any time — for cookies, use the "Cookie settings" option on the Cookie Policy page; for marketing emails, use the unsubscribe link in any email;
• lodge a complaint with the UAE Data Office if you believe we have processed your data unlawfully.

To exercise any of these rights, email parklynn@akeleon.com. We respond within one month, as required by the PDPL.

To request deletion of a Parklynn app account and its associated data, see our account deletion instructions.

We only send marketing emails (parking tips, offers, and alerts about new listings in areas you asked about) if you ticked the optional box at registration. You can stop them with the unsubscribe link at the bottom of any such email; it works with one click and no sign-in.

Every email we send from our platform, including service emails, contains a tiny invisible image and links that pass through our server. They tell us whether the email was opened and which link was clicked, so we can see whether our emails are useful and stop sending ones that are not. You can prevent open tracking by disabling remote images in your email program; the links still work either way.

The Site and Apps are served over HTTPS only. Passwords are stored as one-way hashes, access to our infrastructure is restricted to authorised personnel, report evidence is stored outside the public web root, and analytics identifiers are random values that are not linked to your identity.

The Site and Apps are directed at adults arranging parking. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.

If we change what we collect or how we use it, we will update this page and the effective date above. Significant changes will be highlighted on the Site and, for account holders, announced in the Apps. Each version is identified by its effective date, and we record which version you accepted when you registered.