Kickstand Privacy Policy

Last updated: 11 September 2026

This policy explains what information the Kickstand app (“Kickstand”) collects, how we use it and the choices you have.

Kickstand is provided by Koki Naniwa (“we”, “us”). Under UK data protection law (the UK GDPR), we are the controller of your personal information. You can contact us at kickstandapp@gmail.com.

In short: we collect what we need to run your account and the shared parking map. Your device location stays on your device. We don’t show ads, we don’t sell your information and we don’t track you across other companies’ apps or websites.

1. Information we collect

Account information

When you create an account we collect your email address and username, and we create a user ID for your account. Your password is handled by our sign-in provider and is never visible to us. If you choose to sign in with Google, we receive your name, email address and profile picture from Google.

Profile photos

If you add a profile photo or cover photo, we store it. Your username, profile photo and cover photo appear on your public profile and can be seen by other users.

Your contributions

We store the parking locations you add, the edits you suggest, the issues you report (including any comment you write) and the spots you save as favourites. Locations you add or edit are shown to everyone on the map together with your username, so riders can see who added a spot and follow updates to it. Favourites are private to you.

Location on your device

With your permission, the app uses your device’s location to show where you are and to centre the map. Your device location is used on your device only. We do not send it to our servers or store it. When you add a parking location, the position of that parking spot is saved as part of your contribution.

Searches

When you search for a place, the text you type is sent to our mapping provider, Mapbox, to find matching places. Searches are not linked to your account.

Usage information

We use Google Analytics to understand how the app is used, for example which screens are viewed. Google Analytics uses an identifier for your installation of the app and may work out an approximate location from your IP address. This information is not linked to your account and is not used for advertising.

2. How we use your information

To run your account and the app’s features, including showing your profile and contributions to other riders. Lawful basis: performance of our contract with you.
To review reports, keep the map accurate and prevent misuse. Lawful basis: our legitimate interests in running a reliable, safe service.
To understand how the app is used and improve it. Lawful basis: our legitimate interests.
To contact you about your account or important changes to the app. Lawful basis: contract and legitimate interests.
To show your position on the map, only if you allow location access. Lawful basis: your consent, which you can withdraw at any time.

3. Who we share it with

We use service providers that process information on our behalf:

Supabase: database, sign-in and file storage (account, profile, photos and contributions)
Mapbox: map display and place search
Google: Google Sign-In (if you choose it) and Google Analytics

Other users can see your public profile and the locations you add or edit, as described above. We may also disclose information where the law requires it.

Some of these providers process information outside the UK, for example in the European Union or the United States. Where this happens, the transfer is protected by the safeguards in the providers’ data processing terms, such as standard contractual clauses and the UK International Data Transfer Addendum.

4. How long we keep it

Account, profile and favourites: until you delete your account.
Parking locations you add or edit: these form part of the shared map and may remain after you delete your account. Contact us if you would like your contributions removed or no longer associated with you.
Issue reports: for as long as we need them to review the issue and maintain the map.
Usage information: in line with the data retention settings of our Google Analytics account.

5. Your choices

Location: turn location access on or off at any time in the iOS Settings app, under Kickstand > Location.
Delete your account: in the app, go to your account, open Settings and choose “Delete my account”. This permanently removes your account, profile and saved favourites.
Google Sign-In is optional: you can create an account with your email address instead.
Anything else: email kickstandapp@gmail.com.

6. Your rights

You have the right to access your personal information, to have it corrected or deleted, to restrict or object to how we use it, to receive a copy of it in a portable format and to withdraw your consent at any time. To make a request, email kickstandapp@gmail.com. We will respond within one month.

If you are unhappy with how we handle your information, you can complain to the Information Commissioner’s Office (ico.org.uk).

7. Children

Kickstand is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information, please contact us and we will delete it.

8. Security

We protect your information with industry-standard measures, including encrypted connections and the access controls provided by our service providers. No method of transmission or storage is completely secure, but we work to protect your information.

9. Changes to this policy

We may update this policy from time to time. When we do, we will change the “Last updated” date at the top of this page and, where appropriate, let you know.

10. Contact

Questions about this policy or your information: kickstandapp@gmail.com.