Privacy policy

1. Who is responsible

The controller for your data under the EU General Data Protection Regulation (GDPR) is:

Write to us at that address with any question about your data or to use any of your rights below.

2. What we process and why

Your account

You sign in with Google. We receive your Google account ID, email address and name, and store them with your role (patient or partner), the display name you choose, and when you accepted that Parkie is not medical advice. We need this to give you an account and keep it secure (Art. 6(1)(b) GDPR, performance of our contract with you).

Your health information

If you use Parkie as a patient, you can enter:

• your diagnosis month and year, stage (Hoehn & Yahr) and typical symptoms,
• your medications and vitamins with dose, schedule and notes,
• what you log during the day: doses taken, ON and OFF times, motor and non-motor symptoms with severity, meals, water and sleep.

This is health data, a special category of personal data. We process it only because you explicitly agree to it when you enter it (Art. 9(2)(a) and Art. 6(1)(a) GDPR), and only to provide Parkie’s features to you and the partners you link. You can withdraw that consent at any time by deleting entries or your whole account. This does not affect anything that happened before.

From your logs, Parkie calculates an estimated medication level and meal-timing hints. These are rough illustrations for you, worked out on our server. We do not make any automated decisions about you.

Sharing with partners

You decide whether to link a partner, such as family or a carer, using your share code and a one-time PIN. A linked partner can see your profile, plan and logs, read-only, and gets in-app notifications about the events they chose (for example a dose taken or an OFF period). We store the link and these notifications. You can remove a partner at any time, and partners can unfollow you.

Technical data

• Time zone. The app sends your device’s time zone so “today” and reminders match your clock.
• IP address and request details. Our servers see your IP address when the app connects. We use it briefly, in memory, to protect the service from abuse (rate limiting), and it appears in server logs that are limited in size and overwritten automatically as new entries come in. We only look at them to fix problems or investigate abuse. Legal basis: our legitimate interest in running a secure service (Art. 6(1)(f) GDPR).

On your device

The app keeps your sign-in tokens in your device’s secure storage, and settings such as light or dark mode on the device. Dose reminders are scheduled as local notifications on your phone. We do not use a push-notification service.

3. Who helps us run Parkie

We use a small number of service providers. They process data only on our instructions under data processing agreements:

• Server hosting: [hosting provider, location of the server]. Our database runs on this server.
• Cloudflare, Inc. (USA): network, DNS and security for api.parkie.cc, and hosting of this website. Connections are encrypted between your device and Cloudflare, and through a private tunnel from Cloudflare to our server. Cloudflare therefore handles the data in transit, including your IP address.
• Google (Google Ireland Ltd. / Google LLC): sign-in only. Google tells us who you are when you sign in. We send no health data to Google.

Where a provider processes data outside the EU or EEA, the transfer is covered by the EU–US Data Privacy Framework or the EU Standard Contractual Clauses.

Apple and Google also process data under their own privacy policies when you download Parkie from their app stores.

We do not share your data with anyone else unless the law requires us to.

4. How long we keep it

We keep your data for as long as you have an account. When you delete your account in Settings, we immediately delete your profile, medications, logs, partner links and notifications. Linked partners get a short note that your account is gone. Server logs are overwritten automatically, as described above. [If you keep database backups: “Backups are overwritten within 30 days.”]

As a partner, deleting your account removes your links and notifications. It does not touch the patient’s own data.

5. Your rights

You have the right to:

• access your data and get a copy (Settings → Export gives you all your logs as CSV files),
• correct it (edit it in the app),
• delete it (delete entries, or Settings → Delete account),
• restrict or object to processing,
• data portability, and
• withdraw your consent at any time.

Contact us for anything you can’t do in the app.

You can also complain to a data protection supervisory authority, for example the one where you live or [our lead supervisory authority].

6. Security

Everything is encrypted in transit (HTTPS). Our database is not reachable from the internet, and the server only accepts traffic through the Cloudflare tunnel. Partners have read-only access. Linking needs your share code and a PIN that changes after each link and after five wrong tries. Requests are rate-limited to slow down abuse. No system is perfectly secure, so please also keep your phone locked.

7. Children

Parkie is not intended for anyone under 16. If you believe a child has created an account, contact us and we will delete it.

8. This website

parkie.cc is a static website hosted by Cloudflare. It sets no cookies and uses no analytics. Fonts and images are served from this site itself. Cloudflare processes your IP address to deliver the pages and protect them from attacks (Art. 6(1)(f) GDPR).

9. Changes

If we change how we handle your data, we will update this page and the date above, and tell you in the app if the change matters to you.