Privacy Policy for AllSpark

1. Information We Collect

Location Data

To provide core functionality including displaying nearby EV chargers, calculating optimal routes, and enabling navigation templates via Android Auto, our App requires access to your location data.

• Foreground Location: We collect location data when the app is actively in use on your screen.
• Background Location: We may collect location data when the app is running in the background (for example, during active navigation to a charging station or projecting to your car screen).

Device and Usage Data

We automatically collect certain information about your device and how you interact with the App, including app version and build, platform, distribution channel, device family, IP address, operating system version, consent state, and app performance or security signals. Optional product analytics is collected only when you opt in.

Personal Information and Authentication

If you create an account using our authentication service, we collect personal information such as your name, email address, and OAuth authentication tokens.

Photos and Camera

If you use features to capture or upload images of charging stations or update your profile picture, the App requests permission to access your device camera or photo gallery. We only access the specific images you select.

Charging, Roaming, Session, and Billing Data

If you use an enabled roaming or charging service, we may process a pseudonymous charging token or contract identifier, the selected charging location, EVSE and connector, authorization and remote command outcomes, session timestamps, meter and energy values, applicable tariffs, costs, charging records, and request or correlation identifiers. We do not send payment-card details through the ENAPI OCPI connection.

2. How We Use Your Information

• Show you the nearest available EV charging stations.
• Calculate accurate driving routes based on your vehicle model.
• Display navigation instructions on your phone or Android Auto interface.
• Create and secure your user account.
• Authorize, start, monitor, stop, reconcile, and support charging sessions.
• Calculate charges, resolve disputes, prevent fraud, and meet accounting or legal obligations.
• Improve internal application performance.

We rely on performance of a contract where processing is necessary to provide a requested charging or account service; legitimate interests for proportionate security, reliability, fraud prevention, support, and audit activity; legal obligations for applicable accounting, tax, or regulatory records; and consent for optional analytics or marketing where required.

3. Data Sharing

We do not sell your personal data. We may share information with:

• Google Maps Platform: To render maps and directions. Your location data is subjected to Google's Privacy Policy.
• Service Providers: Third parties who perform services on our behalf, such as authentication hosting.
• ENAPI and participating charging operators: When ENAPI-enabled roaming is available, ENAPI GmbH acts as a technical transaction broker between Allspark and the relevant CPO. We exchange the minimum information needed to route charging requests and process sessions, tariffs, charging records, support, and settlement. The originating CPO remains identifiable by its OCPI country code and party ID.

ENAPI is based in Germany. A participating CPO may be located outside the European Economic Area depending on the charging service requested. Where a restricted international transfer occurs, we rely on an applicable adequacy decision or appropriate contractual and organisational safeguards.

4. Retention and Security

We keep personal data only for as long as needed for the purpose described. Authenticated mobile navigation telemetry is rounded and currently retained for 30 days. Charging sessions and charging records may be retained for longer periods needed for billing, settlement, accounting, tax, fraud, disputes, legal claims, and statutory obligations. Staging integration data is quarantined, access-restricted, and subject to shorter engineering retention periods.

We use access controls, encryption, credential rotation, audit records, data minimisation, and scheduled retention controls. No internet transmission or storage system is completely secure.

5. Your Data-Protection Rights

Subject to applicable law, you may request access, correction, deletion, restriction, or portability of your personal data and may object to processing. Where processing is based on consent, you may withdraw consent at any time without affecting earlier lawful processing. You may also lodge a complaint with the Irish Data Protection Commission or your local supervisory authority.

6. Account and Data Deletion

Depending on your applicable local privacy laws (including GDPR and CCPA) and Google Play Store policies, you have the right to request the deletion of your account and personal data.

• In-App: You may permanently delete your account and associated data by navigating to Profile > Settings > Delete Account within the App.
• Web: You can also review deletion steps and request account deletion from our Account Deletion page.

7. Contact Us

If you have any questions about this Privacy Policy, please contact us at dev@allspark.ie.

Website: www.allspark.ie