Perky Privacy Policy
- Version: 1.0 (draft)
- Effective date: [EFFECTIVE DATE]
- Controller: Guy Ganot, 45 Gordon Street, Tel Aviv 6439404, Israel ("Perky", "we", "us")
- Contact: support@perky.co.il
Draft, not yet reviewed by a lawyer. The bracketed items are decisions for the operator. Have an Israeli lawyer review this text before launch against the Protection of Privacy Law 5741-1981 (including Amendment 13, in force since August 2025), the Privacy Protection (Data Security) Regulations 5777-2017 and the database registration / notice duties, and publish a Hebrew version, which should prevail for users in Israel. Where the facts below describe the system (what is stored, for how long, who sees it), they are taken from the app's design logs and database as of this version; keep this text in step with them.
This policy explains what personal data Perky collects when you use the Perky app, why, who sees it, how long we keep it and what you can do about it. It is part of our Terms of Use (https://perky.co.il/en/terms). Words in bold with capitals (leaving driver, arriving driver, hand-off, car account, credits) mean what they mean in the Terms.
1. The short version
- You sign in with your phone number. We keep it, your first name and your car's details (plate, make, model, colour, size) to run your car account.
- We collect your location only during an active hand-off, about once every few seconds, also in the background, and delete it [7] days after the hand-off ends.
- When you search for parking, the app sends a rough area (about 100 m) to find offers and the server keeps nothing.
- The only location kept outside a hand-off is your car's saved parking spot, visible only to the car's members and deleted within [14] days.
- Parking rules you report are stored as information about the place, never linked to you.
- People who share a car with you see your first name and full phone number.
- We do not sell your data, do not show ads and do not track you across other apps or sites.
- You can delete your account in Settings. We erase your personal data and keep the credit and hand-off records without any link to you.
2. What we collect and why
2.1 Account
| Data | Where it comes from | Why |
|---|---|---|
| Phone number | You, at sign-in | To create and secure your account (one phone number, one account) and to send you one-time sign-in codes |
| One-time sign-in codes, sign-in times, session tokens | Generated when you sign in | To verify it is you and keep you signed in |
| First name | You, at sign-up | So the other driver and the members of your car know who you are |
| Language setting, notification settings, Terms version you accepted and when | You / the app | To show the app in your language, to send you only the notifications you asked for, and to prove acceptance of the Terms |
We do not collect your email address, a password, your contacts, photos, or your date of birth.
2.2 Your car
| Data | Where it comes from | Why |
|---|---|---|
| Plate number, make, model, colour | You, when you register or join a car | To identify the car account, to show the other driver which car to look for, and to prevent a plate being registered twice |
| Car size | Suggested from make and model (section 5.4), confirmed by you | To match you only with spots your car fits |
| Membership: which phones belong to the car, who is the owner, join dates | The app, from your actions | To run the shared car account |
| Invites you send | You | We store the invited phone number and the optional first name you type until the invite is accepted, declined or expires ([7] days) |
| Join requests | You | So the owner can approve or decline you; a request expires after [7] days |
| Plate claims ("this is my plate") | You | The plate, your description and our resolution note, so we can review your claim; your description is removed when the claim is resolved |
2.3 Hand-offs and credits
| Data | Where it comes from | Why |
|---|---|---|
| Offers you post: the spot's location, the time you plan to leave, your walk-back time in minutes | You | So arriving drivers nearby can see and accept the offer |
| Hand-off history: who the leaving and arriving drivers were, times, state changes, cancel reasons, reports, extensions | The app, from both drivers' actions | To run the hand-off, resolve problems and keep the credit ledger correct |
| Credit ledger: every movement of credits, the car's balance | The app | To run credits correctly; the ledger is append-only and every movement is recorded |
| Reviews (disputes): the drivers' reports and free text, our decision and note | You and our team | To decide a review fairly; free text is removed when your account is deleted |
| Reliability record of the car | The app, from hand-off outcomes | To order and limit offers and protect the service; not shown to other users, and old events fade out over about [30] days |
2.4 Location
Location is the most sensitive thing we handle, so here is exactly what happens.
- Searching. When you look for offers, the app sends a centre point snapped to a grid of about 100 m. The server uses it to answer and does not store it. Your precise position stays on your phone.
- Posting an offer. The spot's position (where the car is parked, not where your phone is at any other time) is stored with the offer. Your walk-back time is calculated on your phone; only the number of minutes is sent.
- During a hand-off. From the moment an offer is accepted until the hand-off ends, both drivers' phones send their position about once every 5 seconds, including when the app is in the background. We use it to tell the leaving driver you are approaching, to check that both phones are at the spot when you tap "I'm here", to complete a hand-off automatically, and as evidence when a problem is reported. Collection stops when the hand-off reaches a final state or goes to review, with one exception: after the leaving driver reports a problem, their own positions for that hand-off (only theirs) are still collected until the arrival deadline, so a review can see whether they drove away.
- Retention. Hand-off positions are deleted [7] days after the hand-off ends. For a hand-off under review they are kept until the review is decided, then the same [7] days apply.
- Saved parking spot. Your car has at most one saved spot: the point where it is parked, saved when a member taps to save it or when the car's own hand-off completes. Only the car's members can see it. It is deleted when the car hands that spot off to another driver, when a member taps "I moved the car", when the car account closes, and in any case [14] days after it was saved.
- Spot reports. When you answer questions about a spot's parking rules, we store a point rounded to about 10 m (the hand-off's or the saved spot's, never your phone's), the rules and the month, with no link to you, your car or the hand-off. A short-lived link exists only until the parking event's window closes, so you can edit your answer. These reports are kept for [24] months after their month, then deleted.
We never build a history of where you have been. There is no location data about you outside the items above.
2.5 Notifications
We store your phone's push notification token so we can send you hand-off and car notifications (for example "You can leave", "Did you park?", invites, join requests and credits). We log which notifications were sent so we do not send the same one twice. You can turn each category on or off in Settings or in your phone's settings.
2.6 Technical data
Our servers log requests (time, the action, your account id, errors) for security, abuse prevention and debugging. [If a crash-reporting tool is added: We use [CRASH REPORTING PROVIDER] to receive crash reports with device model, OS version, app version and the crash's technical details; these are not used for advertising.] We do not use advertising identifiers or tracking SDKs.
2.7 Anti-abuse records
To pay the welcome credit only once per plate and once per phone number, ever, we keep a keyed hash (HMAC-SHA256 with a secret key) of every plate and phone number that received it. The hash cannot be reversed into the number, and it is kept even after you delete your account, otherwise the rule could be bypassed by deleting and re-registering.
2.8 Support
If you write to support@perky.co.il, we keep your message and our reply to help you and to improve the service.
3. Legal basis
Under Israeli law we process your data with your informed consent, given when you sign up and accept the Terms, and because it is necessary to provide the service you asked for. Where the GDPR applies (if you use Perky from the European Economic Area), our bases are: performance of the contract (running your account, cars, hand-offs and credits), our legitimate interests (security, abuse prevention, resolving reviews, the reliability record, the anti-abuse hashes), legal obligations (keeping records), and your consent for location in the background and for notifications, which you can withdraw in your phone's settings at any time. Giving us your phone number, name, car details and location during hand-offs is a condition of using Perky; without them the service cannot work.
4. Who sees your data
4.1 Other users
- The other driver in a hand-off sees your first name, your car's plate, make, model, colour and size, your position while the hand-off is active, and the hand-off's state. They do not see your phone number.
- Drivers searching nearby see your offer: the spot, the leaving time, and your car's details as needed to decide. They do not see your name until a hand-off is accepted, and never your phone number.
- Members of your car see each other's first name and full phone number, the car's details, its credit balance and ledger, its saved spot, and a read-only view of the car's active hand-off. Invite only people you are happy to share this with.
4.2 Our team
A small number of Perky administrators can read hand-off and location records, reviews, plate claims and ledger entries to resolve reviews and claims, fix problems and keep the service safe. Administrator actions are logged.
4.3 Service providers (processors)
They process data on our behalf and under our instructions, and may not use it for themselves.
| Provider | What for | Data | Where |
|---|---|---|---|
| Supabase ([SUPABASE ENTITY]) | Database, authentication, server functions, realtime updates, hosting | Everything in section 2 | [HOSTING REGION, e.g. EU (Frankfurt)] |
| [SMS PROVIDER, e.g. Twilio] | Sending the one-time sign-in codes | Your phone number and the code | [REGION] |
| Apple (APNs) and Google (FCM), via Expo's push service (Expo / 650 Industries) | Delivering push notifications | Push token, the notification's text | United States |
| Anthropic | Suggesting your car's size | Make and model only, no plate, name, phone or location | United States |
| Apple Maps / Google Maps / Waze | Showing the map in the app and opening directions when you tap a link | The spot's position (and your phone's position inside the maps app, under that app's own policy) | Per their policies |
| [CRASH REPORTING PROVIDER, if added] | Crash reports | Device and app technical data | [REGION] |
4.4 Others
We disclose data when the law requires it, to a court, the police or another authority with a valid demand, to protect the rights, safety or property of Perky, our users or others, or to a successor if Perky is sold or merged (we will tell you before your data is subject to a different policy). We do not sell personal data and do not share it with advertisers.
5. Where your data is stored
Our database and servers are hosted by Supabase in [HOSTING REGION]. Some providers in section 4.3 are in the United States. When data leaves Israel we rely on the provider's contractual commitments (data processing agreements and, where relevant, standard contractual clauses) and the Privacy Protection (Transfer of Data to Databases Abroad) Regulations.
6. How long we keep data
| Data | Kept until |
|---|---|
| Hand-off positions | [7] days after the hand-off ends (after the review is decided, for a hand-off under review) |
| Saved parking spot | Hand-off of that spot, "I moved the car", the car's closing, or [14] days after saving, whichever is first |
| Search area | Never stored |
| Spot reports (place data, no link to you) | [24] months after their month |
| Invites and join requests | Until accepted, declined or expired ([7] days) |
| Plate claims | Your description is removed when the claim is resolved; the claim record goes when your account is deleted |
| Account, car and membership data | While your account exists, then erased on deletion (section 7) |
| Hand-off and credit records | Kept, without your name or number, after your account is deleted, for the integrity of credits and for our records |
| Welcome-credit hashes | Indefinitely (section 2.7) |
| Server logs | [30] days |
| Operational alerts | [30] days after they are resolved |
| Support messages | [2] years |
7. Deleting your account
You can delete your account in Settings → Account at any time, except while you are the acting member in an open hand-off or in a hand-off under review; finish or cancel it first. Deletion is immediate and cannot be undone.
What happens:
- We erase your phone number, name, sign-in data, push tokens, notification settings, language setting, Terms acceptance record, plate claims, and all of your location data (your hand-off positions are deleted at once, not after the retention period).
- Hand-off and review records keep their facts but lose the link to you: your user id is set to empty and marked as erased, the plate is removed from your hand-offs, and your free text in reviews is removed. Credit ledger entries are kept, with no link to you.
- Your car stays with its other members and its credits. If you were the owner, ownership passes to the longest-standing member. If you were the last member, the car account closes and its remaining credits are removed.
- The keyed hashes of section 2.7 stay.
If you cannot use the app, write to support@perky.co.il from the phone number of the account (or with a way for us to verify it is yours) and we will delete it for you.
8. Your rights
Under Israeli law you may inspect the data we hold about you and ask us to correct or delete data that is wrong, incomplete, unclear or out of date. If the GDPR applies to you, you also have the rights of access, rectification, erasure, restriction, portability and objection, the right to withdraw consent, and the right to complain to your supervisory authority. To exercise any right, use the app (most of your data is visible and editable in Settings and in your car's screens) or write to support@perky.co.il. We may ask you to confirm you control the account's phone number. We answer within [30] days.
9. Security
Data is encrypted in transit (TLS) and at rest by our hosting provider. Every change to your data goes through server-side functions that check who you are and what you may do; the app itself has no direct write access to the database, and database rules limit each user to their own rows and their car's rows. One-time codes expire after a short time. Secrets (such as the key for the hashes in section 2.7) are stored in a secrets vault. Access by our team is limited to the people who need it and is logged. No system is perfectly secure; if a breach affects you, we will notify you and the Privacy Protection Authority as the law requires.
10. Children
Perky is for licensed drivers aged [18] and over. We do not knowingly collect data from anyone younger. If you believe a minor has an account, write to support@perky.co.il and we will delete it.
11. Changes to this policy
We may update this policy. We will tell you about material changes in the app [at least 14 days] before they take effect, and the app may ask you to accept the new version. The current version is always available in the app under Settings → Legal and at https://perky.co.il/en/privacy.
12. Contact
Guy Ganot, 45 Gordon Street, Tel Aviv 6439404, Israel. support@perky.co.il. [If appointed: Privacy officer / data protection officer: [NAME, EMAIL].] [If the GDPR applies and a representative is required: EU representative: [NAME, ADDRESS].]