Possie

Privacy policy

Last updated 18 October 2026

Draft for legal review before launch. This text is not yet legal advice and may change.

Possie helps you find somewhere to park near where you’re going. This policy explains what we collect, why, and the choices you have. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).

What we collect

• Destinations you search. We send them to Google to find car parks and routes. We keep a count per day to apply the free-plan limit, not a history of where you went.
• Your location, only if you tap “Use my location”. It is used once to work out the drive and is never stored on our servers.
• Account details if you sign in with Google: your email address and an account ID.
• Billing details are handled by Stripe. We never see or store your full card number.
• Usage stats, only if you allow them. Anonymous events such as “search made” with IP capture turned off. We respect Do Not Track and Global Privacy Control.
• Security logs such as a one-way hash of your IP address, used briefly for rate limiting to stop abuse.

Who we share it with

We use service providers to run Possie: Google Maps Platform (places and routes), Transport for NSW (live Park&Ride counts — we send nothing about you), Supabase (accounts), Stripe (payments), Upstash (caching), Vercel (hosting) and, if you opt in, PostHog (usage stats). Some of these process data outside Australia, including in the United States. We don’t sell your personal information.

Your choices

You can use Possie without an account, decline location access and type a start instead, and switch usage stats off in Settings at any time. You can ask to see, correct or delete your information by emailing support@possie.app. If you’re not happy with our response you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Retention

Daily usage counters expire within 36 hours. Account and subscription records are kept while your account is open and for up to 7 years afterwards where tax law requires it. Deleting your account removes your profile and sign-in.