Privacy Policy

1. Who We Are

Rent My Spot is a mobile platform that connects people who have unused parking spots, driveways, garages and storage spaces with people who need them. The application is developed and operated by ItWorksinUA (itworks.in.ua).

For questions about this policy, contact us at privacy@rentmyspot.io.

2. Data We Collect

2.1 Information you provide directly

• Phone number — used for authentication via SMS OTP.
• Profile information — display name and optional profile photo you upload.
• Spot listings — address, description, pricing, availability and photos of your parking spot or storage space.

2.2 Information collected automatically

• Device information — device model, operating system version, unique device identifiers and app version.
• Usage data — screens visited, features used, search queries, tap events and session duration (collected via Firebase Analytics).
• Crash reports — stack traces and error logs automatically sent when the app crashes (via Firebase Crashlytics).
• Location data — approximate or precise location (GPS) when you search for spots near you or when you pin a listing on the map. Location is never collected in the background.
• Push notification tokens — to deliver real-time alerts for new spots matching your saved searches.

2.3 Information from third parties

• If you sign in via a social provider in a future release, we may receive a name and email address from that provider.

3. How We Use Your Data

We use your information to:

• Create and manage your account and authenticate your identity.
• Publish and display your spot listings on the map.
• Send push notifications for saved-search matches and booking updates.
• Analyse usage patterns to improve app performance and features.
• Detect and prevent fraudulent listings or misuse of the platform.
• Comply with legal obligations.

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

4. Third-Party Services

The app integrates the following third-party services, each with their own privacy policies:

• Firebase (Google) — authentication, Firestore database, file storage, analytics and crash reporting. Google Privacy Policy.
• Google Maps — map display and address geocoding. Google Privacy Policy.

These providers may transfer data to servers outside your country. Google is certified under the EU–US Data Privacy Framework and provides appropriate safeguards for international transfers.

5. Data Sharing

We do not sell your personal data. We share data only in the following circumstances:

• With other users — your listing details (address, price, photos, availability) and your display name are visible to other app users.
• With service providers — Firebase and Google Maps as described above.
• Legal requirements — if required by law, court order or governmental authority.
• Business transfers — if our business is acquired or merged, user data may be transferred as part of that transaction. We will notify you in advance.

6. Data Retention

We keep your account data for as long as your account is active. If you delete your account:

• Your profile and listings are removed from the app within 30 days.
• Anonymised analytics data (no personal identifiers) may be retained for up to 24 months.
• Data we are required to retain for legal or audit purposes may be kept for up to 5 years.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure ("right to be forgotten") — request deletion of your data (subject to legal retention obligations).
• Portability — receive your data in a structured, machine-readable format.
• Restriction — ask us to limit how we process your data in certain circumstances.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, you may withdraw at any time via in-app settings or by contacting us.

To exercise any of these rights, email privacy@rentmyspot.io. We will respond within 30 days. If you are in the EU/EEA and believe we have not addressed your concern, you have the right to lodge a complaint with your local Data Protection Authority.

8. Cookies & Tracking

The mobile app does not use cookies. It uses Firebase SDKs that may set local device identifiers for analytics and crash reporting purposes.

The landing website may use Google Fonts (served from Google's CDN), which may log the requesting IP address as described in Google's privacy policy. No other tracking cookies are set on this website.

9. Children's Privacy

Rent My Spot is not directed at children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will delete it promptly. If you believe a child has provided us with personal data, contact us at privacy@rentmyspot.io.

10. Security

We implement industry-standard security measures including:

• Encrypted data transmission (HTTPS / TLS 1.2+).
• Firebase Security Rules to restrict database access to authorised users only.
• Phone-number OTP authentication to prevent unauthorised account access.
• Regular dependency updates to patch known vulnerabilities.

No system is perfectly secure. In the event of a data breach that poses a high risk to your rights, we will notify affected users and relevant authorities as required by law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via an in-app notification and update the "Last updated" date at the top of this page. Continued use of the app after the effective date constitutes acceptance of the revised policy.

12. Contact Us

If you have any questions or requests regarding this Privacy Policy:

• Email: privacy@rentmyspot.io
• Website: itworks.in.ua