Privacy Notice

Location Access

The map requests your device location to suggest nearby charging stations. Website coordinates are used to request nearby results and are not used to build a long-term location history. If you use authenticated mobile navigation, Allspark may retain rounded, short-lived route telemetry for service reliability, safety, and support. Our current operational retention period for that telemetry is 30 days.

Analytics

We use Vercel Analytics and optional Microsoft Clarity to understand aggregate usage patterns. These tools collect usage metadata such as pages viewed, device type, and interaction signals. Analytics runs only if you opt in via the consent prompt.

Third-Party Services

Charging station information may originate from Eco-Movement, ENAPI, participating charging point operators, and other sources identified in our Data & Attribution page. Navigation handoff actions may open Apple Maps, Google Maps, or other providers per your device settings. Those providers manage data you choose to share through their interfaces.

Roaming and Charging Services

When ENAPI-enabled roaming is available and you use a roaming or charging feature, Allspark may exchange the minimum information needed with ENAPI GmbH in Germany and the relevant CPO. This can include a pseudonymous charging token or contract identifier, the selected location, EVSE or connector, remote start or stop command status, session times, energy and meter values, tariff and cost information, charging records, and security or correlation identifiers.

ENAPI acts as a technical transaction broker. It routes data and requests between Allspark and the participating operator; the originating CPO remains responsible for its own charging infrastructure and source data. We do not send payment-card details through this OCPI connection.

Why We Process Roaming Data

Core charging and roaming data is processed to provide the service you request and administer the charging contract. Security, reliability, fraud prevention, troubleshooting, and audit records are processed where necessary for our legitimate interests. Charging and billing records may also be retained to meet accounting, tax, dispute, and other legal obligations. Optional product analytics remains consent-based and is not the legal basis for delivering a charging session.

What We Store

If you sign in, we store profile data you provide (name, phone number, vehicle details, preferred connector types, and home base label). Profile photos are stored in our Supabase storage bucket. If you contact us by email, we retain your message for support and compliance purposes.

What We Do Not Store

We do not build a long-term raw location history from website map use, and we do not store payment card details in the ENAPI OCPI connection. Filter selections and ordinary map interactions stay on your device unless they are needed for an authenticated service request or you opt into analytics.

Recipients, Transfers, and Retention

We share personal data only with service providers and roaming participants needed to operate Allspark, including ENAPI and the relevant CPO for a requested charging service. ENAPI is based in Germany. A CPO may be located outside the European Economic Area depending on where you charge. If personal data is transferred outside the EEA, we use an applicable adequacy decision or contractual and organisational safeguards required by data-protection law.

We retain each category only for as long as needed for the stated purpose. Operational navigation telemetry is currently retained for 30 days. Roaming session and charging records may be retained longer where necessary for billing, settlement, accounting, legal claims, fraud prevention, or statutory obligations. Quarantined staging integration data uses shorter engineering retention periods and is not used to provide live charging.

Your Choices

You can opt in or out of analytics at any time using the consent prompt. Subject to applicable law, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent without affecting earlier lawful processing and may complain to the Irish Data Protection Commission. Contact us using the address below to exercise your rights.

Account and Data Deletion

Depending on your applicable local privacy laws (including GDPR and CCPA) and Google Play Store policies, you have the right to request deletion of your account and personal data.

• In-App: You may permanently delete your account and associated data by navigating to Profile > Settings > Delete Account in the app.
• Web: You can also review deletion steps and request account deletion from our Account Deletion page.

Full Privacy Policy

Read our full mobile app privacy policy for complete details on data collection, sharing, and deletion workflows.

Contact

For privacy questions or data requests, email dev@allspark.ie.