DrivewayFlowBack home

Legal

Privacy Policy

Last updated September 1, 2026

DrivewayFlow (“we,” “us,” or “our”) is a household parking coordination tool operated at https://drivewayflow.com (the “Service”). This policy explains what data we collect, why we collect it, who we share it with, how long we keep it, and the controls you have. It applies to our website and to the app you sign in to.

By using the Service, you agree to this Privacy Policy.

1. Information We Collect

Account information

  • Name and email address, used to create and manage your account and to communicate with you. Sign-in is handled by Supabase Auth; a password is stored there only as a hash and never reaches our own database. If you sign in with Google, we store your Google account identifier and profile picture instead of a password.

Payment information

  • Payments are processed by Stripe. We do not store your card number. We keep your Stripe customer and subscription identifiers, your subscription status, and your trial and billing dates.

Household connections

  • The household name, its invite code, the username you use in that household, and your household's parking rules — quiet hours, whether nearby street parking is allowed, and any restrictions on individual spaces.

Your content

  • The driveway layout you build; for each car a name, a rough size band, whether it may use the garage, and optionally a body shape and colour used only to draw it. We do not collect the make, model, licence plate or VIN, and there is no way to upload a photo.
  • The leave and return times you type for each weekday, any one-off changes for a specific date, and — only if you choose to grant it — permission for another member to move one of your cars. We do not import any calendar and we do not collect location or GPS data.

Parking plans

  • The plans we compute for your household: where each car should be parked, and which cars must move and when. We keep recent plans so the Service can spread the awkward jobs fairly over time.

Usage data and cookies

  • Two cookies, both strictly necessary: a sign-in session cookie, and one recording which of your households you are viewing. We use no analytics, advertising or third-party tracking cookies. Stripe sets its own cookies on its checkout and billing pages. We do not follow you across other websites, so there is nothing for a “Do Not Track” signal to switch off.

2. How We Use Your Data

  • To provide the Service: computing your household's parking plan from the schedules, layout and rules you enter, and keeping members in sync.
  • To process payments and manage your subscription.
  • To send transactional emails about your account, such as email confirmation, password resets and billing notices.
  • To provide customer support.
  • To secure and improve the Service.

We do not sell your data, and we do not use your content for advertising or to train any model.

3. Who We Share Data With

We share data only as needed to run the Service:

  • The other members of your household: they see each other's schedules, vehicles, the driveway layout and the parking plan — that is the point of the Service, and it is worth knowing before you enter your working hours. They see the username you chose, never your email address, and your billing details are visible only to you.
  • Service providers that run the Service: Supabase (database, authentication), Netlify (hosting), Stripe (payments), Resend (email delivery), Google (sign-in, if you choose it), and Google Fonts, which serves one icon font and therefore sees your browser's IP address.

These providers operate internationally, so your information may be stored or processed outside the country you live in, including in the United States, where it is subject to the laws of the country it is held in.

We never sell your personal data to anyone, and we do not share it with third parties for their marketing.

4. Data Retention

  • Account information: kept while your account is active.
  • Schedules, vehicles, layouts, parking rules and plans: kept while your household exists. You can edit or clear them at any time from inside the app.
  • Email confirmation and password-reset links: single-use and short-lived, and they cannot be reused once followed.
  • If you delete your account, we delete your personal data immediately. If you own a household, deleting your account deletes that household for everyone in it; the app warns you before you confirm.
  • Stripe retains payment and invoice records under its own legal and tax obligations after your account is gone. They contain no household or schedule data.

5. Your Controls

  • Edit or clear your schedule, vehicles, availability and household details at any time from inside the app.
  • Withdraw a key-sharing permission at any time. An absent permission is always read as a refusal, never as consent.
  • Leave a household at any time. Leaving is never blocked by anyone's billing status.
  • Manage or cancel your subscription from Billing, and delete your account from Settings → Delete account.
  • Revoke DrivewayFlow's access to your Google account at any time via Google's security settings: https://security.google.com/settings/security/permissions
  • To access, correct, export, or delete your data, or to delete your account, contact us at [email protected] and we will handle it promptly.

6. Google Services

DrivewayFlow loads one icon font from Google Fonts, which makes your browser's IP address visible to Google when a page loads. If you choose to sign in with Google, we also use Google's sign-in services to identify you.

7. Google Privacy Policy

As we use the Google services described above, your data may also be subject to Google's Privacy Policy: https://policies.google.com/privacy. You can revoke our access to your data via the Google security settings page linked in section 5.

8. Children's Privacy

DrivewayFlow is not intended for children, and we do not knowingly collect any data from children.

9. Security

Passwords are held by Supabase Auth as hashes and never reach our own database, and card details are entered directly on Stripe's own pages. Row level security is enabled and forced on every database table, and every query passes through a server-side layer that checks your household membership and role before returning anything. No method of transmission or storage is 100% secure, but we use commercially reasonable safeguards to protect your information.

10. Updates to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or in the app. The “Last updated” date at the top reflects the latest revision.

11. Contact

Questions, concerns, or data requests: [email protected].