Privacy Policy

Last updated: September 19, 2026

What we collect

We deliberately collect as little as possible:

• Sign-in information — Firebase Authentication uses your phone number, email or Apple account identifier to sign you in. Verified phone is available in the app and website; Apple sign-in is also available on iPhone, iPad and the website. Existing email and Google accounts can be recovered; Google recovery is available in the browser. Apple may provide a private relay address when you choose Hide My Email. We ask for your consent before linking Apple or a phone number to your existing Curbwise account. We never sell your sign-in information.
• Phone verification security — Google stores phone numbers used for verification to help prevent spam and abuse across Google services. Phone verification also uses reCAPTCHA, which uses a security cookie for risk analysis. See Google's privacy policy.
• Map location and usage — your search or map location is sent to our service to fetch nearby data. Visited map grid cells and request counts are stored with your account for daily usage limits.
• Service logs — hosting and request logs may contain your IP address, browser information and requested URLs, including map coordinates, for operation, diagnostics and abuse prevention.
• Report submissions — if you flag incorrect curb data, we store the description, optional photo, selected curb location and optional device location you submit so we can fix the data. These locations may be precise. Reports also include your account identifier and browser information.
• Saved parking and preferences — your saved car location, optional parking note, recent selected destinations, named saved places, reminder and preferences are stored on the device where you use the app. Saved-place names and locations stay on this device; you can rename or remove them from search. Recent destinations can be removed or cleared from search. Parking notes are not sent to our service. After you clear a car spot, its details remain temporarily in memory to offer a 10-second Undo action; no separate parking history is stored.
• Apple purchase history — for Apple purchases, we store an account-linked purchase identifier, transaction identifiers, product, environment and subscription status to verify Premium access, restores and renewals. Apple processes payment; we do not receive or store your payment-card details or retain signed receipt payloads.
• Google Play purchase history — for Google Play purchases, we store a purchase token privately on our server, the verified product and base plan, purchase environment, subscription status and expiry, and an account binding that uses an obfuscated identifier. We use this information to verify Premium access, restores, renewals and payment changes. Google processes payment; we do not receive or store your payment-card details.

What we don't do

• No advertising trackers, no sale of personal data.
• No background location tracking.

Third-party processors

Authentication and data storage run on Google Firebase / Google Cloud. Address searches are sent to NYC Planning’s GeoSearch service. Map tiles come from the City of New York or, when configured, Stadia Maps. When you choose walking directions, the saved destination is shared with Google Maps; your parking note is not included. These providers receive request information such as your IP address and the searches or map areas requested. Requests may be logged and used to operate and improve their services under their own policies.

See Firebase privacy information and the NYC privacy policy. Provider security logs, backups and deletion processing may outlast the removal of your active Curbwise account records.

Apple processes Apple sign-in and in-app purchases under Apple's privacy policy. Apple sign-in credentials used for account deletion are sent securely for revocation and are not retained by Curbwise.

Google Play processes Android purchases and subscription updates under Google's privacy policy.

Data retention & deletion

You can delete your account in the Curbwise iPhone app from Account & settings ("Delete my account"), including after your trial ends. Successful deletion removes your authentication record, profile, usage history, submitted reports and their photos. Saved parking, parking notes, recent destinations, named saved places and reminders are cleared on the device making the request. Clear the app’s stored data on other devices if you used it there.

To stop requests already in progress from recreating deleted data, we keep a technical marker containing a hashed account identifier and deletion timestamps. It stops blocking writes after two hours; expired markers are removed in bounded cleanup during later deletion requests. This marker contains no contact information, parking locations, reports or photos.

Account deletion removes your account-linked purchase identifiers and subscription state, including stored Google Play purchase tokens and account bindings. To prevent purchases being reassigned by replay, we retain minimal ownership records: for Apple, the original transaction identifier, purchase environment and a one-way hash of the deleted account identifier; for Google Play, one-way hashes of the purchase token, any replaced token, and the deleted account identifier. These retained records contain no contact information or raw Google purchase tokens. The stores retain their own purchase records. Deleting your Curbwise account does not cancel a store subscription; cancel through the original store to stop future renewal charges.

If deletion can’t be confirmed, retry or request help. You can request account deletion without the app, or email hello@curbwise.dev for deletion and privacy questions.

Changes

If this policy changes, we'll update the date above and provide any notice or obtain any consent required by applicable law. This policy describes our data practices; it does not waive your privacy rights.

About this informational website

This website presents app information and help; it does not provide account sign-in or a live map. Our hosting providers process ordinary connection and request information to serve and secure the site. We do not add advertising trackers. If you email support, we receive the information you choose to send. App Store, Instagram and other external links are governed by those services’ own privacy policies.