Privacy Policy

Last updated and effective: October 12, 2026 · 🇩🇰 Læs på dansk

1. Data Controller

The data controller for all personal data processed through the Legal Parking mobile application ("App") is:

• Company: Innova Apps
• Address: Tove Maës Vej 1, 1 TH, 2500 Valby, Denmark
• CVR: 45291154
• Email: support@innovaapps.ai

Innova Apps is the data controller under the EU General Data Protection Regulation (GDPR) and the Danish Data Protection Act (Databeskyttelsesloven) for all personal data processed by the App.

2. Information We Collect

When you use Legal Parking, we collect and process the following categories of personal data:

• License plate numbers: Entered during vehicle registration, verified against the Danish Motor Register (DMR), stored in our database, and shared with the Parking Rights Service (PRS) and our payment processor (Stripe) as a reference identifier. For parkings in Aalborg and Roskilde, the plate is sent to Arrive SmartHUB instead of PRS (see section 9).
• Location data (GPS): Your device's GPS coordinates are used to determine your parking zone. GPS coordinates are sent to the PRS API when registering parking and are stored alongside your parking session records. For parkings in Aalborg and Roskilde, GPS coordinates are not sent to Arrive SmartHUB or to the municipality. Location is only accessed while the App is actively in use.
• Parking session data: Zone, street name, start and end time, duration, and cost for each parking session.
• Payment information: Payments are processed by Stripe. Your card details are handled exclusively by Stripe under their PCI-DSS compliance; card numbers never touch our servers. We store a Stripe customer identifier linked to your account.
• Vehicle information: Make, model, and optional nickname as provided by you.
• Parking sign photos (AI Sign Reader): Images you capture are sent to OpenAI for AI analysis. By default, images are processed in real-time and not permanently stored. If you opt in to "help improve the service," images may be stored for up to 12 months with an account identifier.
• Device information: Basic device identifiers for app functionality and crash reporting.
• Usage analytics: Anonymous app usage data collected via Firebase Analytics, including approximate location (~1 km precision).

3. How We Use Your Information

• Register your parking with Copenhagen's official Parking Rights Service (PRS)
• Register your parking in Aalborg and Roskilde with Arrive SmartHUB, which Aalborg Kommune's and Roskilde Kommune's parking enforcement use to check parking
• Process payments and issue refunds via Stripe
• Verify your vehicle via the Danish Motor Register (DMR)
• Display parking zones and information relevant to your location
• Process parking sign images through AI for instant explanations
• Provide parking history and session summaries
• Record requests for new parking areas and, if you ask, notify you if Legal Parking launches in an area you requested, or if we decide not to
• Improve app functionality and user experience
• Fix bugs and troubleshoot technical issues
• Respond to your support requests

4. Lawful Basis for Processing

We process your personal data on the following legal grounds under GDPR Article 6:

• Contract performance (Art. 6(1)(b)): Parking registration, payment processing, vehicle management, refund calculation, and parking history. All necessary to deliver the service you request.
• Legitimate interest (Art. 6(1)(f)): Analytics, crash reporting, fraud prevention, and service improvement. Our legitimate interest is to maintain and improve a reliable service. This does not override your fundamental rights.
• Consent (Art. 6(1)(a)): Optional storage of parking sign images for service improvement, requests for new parking areas, and the optional notifications about requested areas. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Legal obligation (Art. 6(1)(c)): Retention of transaction records for tax and accounting purposes as required by Danish law.

5. Vehicle Verification (DMR)

As required by the City of Copenhagen, we verify license plates against the Danish Motor Register (Motorregistret / DMR) during vehicle onboarding. This confirms that the license plate is associated with a registered vehicle. The verification is performed via a secure API connection. We do not store the full DMR response; only the verification status.

6. GPS Positioning Disclaimer

7. AI Sign Reader

When you use our AI Sign Reader feature:

• The photo you take is sent to OpenAI for processing via a secure API
• By default, processing happens in real-time and the image is not permanently stored on our servers
• If you have opted in to "help improve the service," the image may be stored for up to 12 months linked to your account identifier
• We do not provide your images to OpenAI for the purpose of training AI models
• You can use the App without the AI feature if you prefer

8. Third-Party Data Recipients

We share personal data with the following third parties, each for a specific purpose:

• City of Copenhagen / Parking Rights Service (PRS): License plate, GPS coordinates, and parking session details are shared to officially register your parking and enable enforcement verification. Copenhagen Parking Info
• Arrive SmartHUB (Arrive, Stockholm, Sweden): For parkings in Aalborg and Roskilde only. License plate, parking area number, start and end time, the parking fee owed to the municipality and the parking's reference number are sent so that the municipality's parking enforcement can check your parking on its handheld terminals. No GPS position, account identifier or payment details are sent. Arrive
• Aalborg Kommune (Parkeringskontrol Nord): For parkings in Aalborg only; see section 9. Aalborg Kommune parking
• Roskilde Kommune: For parkings in Roskilde only; see section 9. Roskilde Kommune parking
• Stripe: Payment processing. Stripe receives a reference identifier linked to your account. Card data is handled exclusively by Stripe under PCI-DSS compliance. Stripe Privacy Policy
• Danish Motor Register (DMR): License plate numbers are sent for vehicle verification during onboarding. Motorstyrelsen
• OpenAI: Parking sign images are sent for AI analysis (transient processing). OpenAI Privacy Policy
• Google / Firebase: Anonymous analytics data and crash reports. Firebase Privacy Policy
• Google Maps: For displaying the interactive parking map. Google Privacy Policy

9. Data Shared with Municipalities

City of Copenhagen

In accordance with our operational agreement with the City of Copenhagen, the municipality has access to relevant parking registration data in order to verify valid parking payment, handle enforcement, and process complaints. This includes:

• License plate number
• Parking zone and location
• Parking session start and end times
• Payment status (paid / refunded)

No payment card details or Stripe customer identifiers are shared with the municipality.

Aalborg Kommune

Under our agreement with Aalborg Kommune, parkings you buy in Aalborg are shared with Aalborg Kommune so that its parking enforcement, Parkeringskontrol Nord, can check valid payment, handle appeals and settle the parking fees with us. Parkeringskontrol Nord reads your parking through Arrive SmartHUB, and Aalborg Kommune's staff can see it in a web portal we provide. This includes:

• License plate number
• Aalborg parking area number and name
• Parking start and end times, duration and the parking fee owed to Aalborg Kommune
• The parking's reference number (AAL-TXN-...)

No GPS position, account identifier, payment card details, Stripe identifiers or service fees are shared with Aalborg Kommune or Arrive.

Every access to the web portal is logged, including each license plate Aalborg Kommune's staff look up (for example to handle an appeal) and which staff member looked it up; we keep these logs for 730 days and then delete them automatically.

Roskilde Kommune

Under our agreement with Roskilde Kommune, parkings you register in Roskilde, including registrations of the free first hours that cost 0 kr, are shared with Roskilde Kommune so that its parking wardens can check them, handle appeals and settle the parking fees with us. The wardens read your parking through Arrive SmartHUB, and Roskilde Kommune's staff can see it in a web portal we provide. This includes:

• License plate number
• Roskilde parking area number and name
• Parking start and end times, duration, the parking fee owed to Roskilde Kommune and, when a parking continues an earlier one, the free time carried over
• The parking's reference number (ROS-TXN-...)

No GPS position, account identifier, payment card details, Stripe identifiers or service fees are shared with Roskilde Kommune or Arrive. Roskilde Kommune receives this data as its own data controller and decides how it uses it, for example for parking control, appeals, settlement and statistics.

Every access to the web portal is logged, including each reference number or license plate Roskilde Kommune's staff look up and which staff member looked it up; a license plate that matches none of our parkings is logged without the plate. We keep these logs for 730 days and then delete them automatically.

10. Data Security

• All data transmission is encrypted using HTTPS/TLS
• Payment card data is handled exclusively by Stripe under PCI-DSS compliance and never touches our servers
• Database access is restricted by role-based access controls
• Server-side operations use Firebase Admin SDK with strict security rules
• Regular security reviews and updates

11. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy:

• Parking session history: 24 months (required for tax documentation and dispute resolution)
• Parking enforcement check data: 90 days
• Parking sign images (if consent given): 12 months
• Requests for new parking areas: 12 months after your last request
• Analytics data: Up to 14 months
• Crash reports: 90 days
• Account data: Retained until you request account deletion
• Aalborg and Roskilde parkings sent to Arrive SmartHUB: Kept by Arrive and the municipality under their own retention rules. SmartHUB offers no way for us to delete a record once it has been sent.
• Aalborg and Roskilde settlement records: The monthly statements and annual audit documentation our agreements with Aalborg Kommune and Roskilde Kommune require are accounting records and are kept for 5 years under the Danish Bookkeeping Act.

After the retention period expires, data is automatically deleted or anonymized.

12. Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights regarding your personal data:

• Right of access (Art. 15): Request a copy of all personal data we hold about you.
• Right to rectification (Art. 16): Request correction of inaccurate personal data.
• Right to erasure (Art. 17): Request deletion of your personal data. Use "Delete My Account" in the App, or email us.
• Right to restriction of processing (Art. 18): Request that we limit how we process your data.
• Right to data portability (Art. 20): Receive your data in a structured, machine-readable format. Use "Export My Data" in the App, or email us.
• Right to object (Art. 21): Object to processing based on legitimate interest.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at support@innovaapps.ai. We will respond within 30 days.

You also have the right to lodge a complaint with the Danish Data Protection Agency:

• Datatilsynet
• Carl Jacobsens Vej 35, 2500 Valby, Denmark
• Email: dt@datatilsynet.dk
• Website: datatilsynet.dk

13. Account Deletion

You can delete your account and all associated personal data at any time:

• In the App: go to Menu → "Delete My Account"
• By email: send a request to support@innovaapps.ai

Upon deletion, the following data is permanently removed:

• All vehicle records
• All parking session history
• All stored parking sign images
• Your requests for new parking areas
• Your Stripe customer profile
• Your Firebase authentication account

Anonymized audit logs may be retained for up to 90 days after deletion for security purposes.

Parkings in Aalborg and Roskilde that were already sent to Arrive SmartHUB cannot be deleted by us, because SmartHUB has no deletion function. The municipality, as the parking enforcement authority, decides how long it keeps them. You can ask Aalborg Kommune about its processing at pnord@aalborg.dk, and Roskilde Kommune at parkering@roskilde.dk.

14. Children's Privacy

Legal Parking is not intended for users under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

15. Requests for New Parking Areas

Outside the areas Legal Parking covers today, the App can show "Pay for parking here: Not available here yet". If you tap it and send a request, we record it so we can decide where Legal Parking goes next. Sending a request is optional, and so is every question in it.

• What we store: the approximate area the request is for, rounded to one decimal of latitude and longitude (roughly 10 km). The area is the centre of the map or the place you searched for; if the map is centred on your position, it is the area around you. We never store your exact location. We also store where in the App you sent the request from; the time and number of requests per area (up to five areas); your answers to the two optional questions (what would help you most, and how often you pay for street parking); whether you asked to be notified; and your device's region setting, platform, app version and language.
• Linked to: your App account identifier (the anonymous account the App creates for you).
• Notifications about your requested areas: if you switch on "Notify me about areas I request", we may send you push notifications telling you if Legal Parking launches in an area you requested, or if we decide not to, using the notification token your device registers with us. It is one choice that covers every area you request. Switching it off in the App stops these notifications right away; you can also turn off notifications for the App in your phone's settings.
• Analytics: Firebase Analytics counts when the option is shown, tapped and sent, with your answers. Like our other analytics, this is based on our legitimate interest (see "Lawful Basis for Processing"), and these events carry the approximate location Firebase derives from your IP address, never the map position.
• Legal basis for the stored request and the notifications: your consent (GDPR Art. 6(1)(a)), given by sending the request and, separately, by switching on the notifications. You can withdraw it at any time.
• Retention and deletion: kept for 12 months after your last request, then deleted automatically. Deleted at once when you delete your account.
• Recipients: stored with Google Firebase (see "Third-Party Data Recipients"). Not shared with any municipality, parking operator or advertiser.

16. Users in the United States (California)

The categories of personal information we collect are listed under "Information We Collect" and "Requests for New Parking Areas", and the third parties we share them with are listed under "Third-Party Data Recipients". We do not sell personal information. You can see, correct or delete your data as described under "Your Rights Under GDPR" and "Account Deletion". How we announce changes to this policy is described under "Changes to This Policy", and the effective date is shown at the top. Do Not Track: the App does not change how it collects data in response to "Do Not Track" signals.

17. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the App or by posting the new policy on this page and updating the "Last updated" date. Material changes will be communicated at least 14 days before they take effect.

18. Contact Us

For questions about this Privacy Policy or to exercise your data protection rights:

• Company: Innova Apps
• Address: Tove Maës Vej 1, 1 TH, 2500 Valby, Denmark
• CVR: 45291154
• Email: support@innovaapps.ai