Privacy Policy

1. Curbi and this policy

Decodation LLC, registered in Idaho, United States, operates Curbi. Curbi is a technology platform connecting drivers with independent hosts who offer private parking. This policy covers the website and apps, accounts, listings, bookings, messages, support and optional features. It describes our data practices; it is not a waiver of your privacy rights.

The Terms of Service describe the roles of Curbi, hosts and drivers, including parking and payment responsibilities. Curbi remains responsible for its own privacy obligations. Our privacy-request contact is listed below.

2. Information we process

• Account information: name, email, optional phone number and profile photo, authentication identifiers and account settings.
• Parking and vehicle information: listings, public descriptions and photos, marked parking areas, availability, vehicle details and photos, and booking instructions.
• Bookings and payments: reserved times, prices, payment and refund references, subscription entitlements, host earnings and payout records. Full card details are handled by payment providers, not stored by Curbi.
• Communication and safety: booking messages and photos, reviews, support requests, complaints, evidence and moderation decisions.
• Device and security information: authentication, App Check and notification tokens, technical errors and security logs. Signed-in foreground screen names and activity times are recorded for service operations and account support.

3. Location and device permissions

Foreground location is optional and is used for nearby parking search and your map position. You can enter a destination instead. Parking search does not request background location tracking.

Camera, photos, microphone, speech-recognition and notification permissions are used for features you choose. You can control these permissions in your device or browser settings. Speech recognition may be handled by your operating system or browser provider.

Public listing documents use approximate locations. Exact addresses and private access instructions are restricted to authorized booking access. Do not include private access codes or personal information in public listing text or photographs.

4. How information is used

• Provide account access, search, listings, availability, bookings, messages and notifications.
• Process parking payments, refunds, host subscriptions, earnings and payouts.
• Support users, investigate reports and disputes, prevent fraud, enforce service rules and protect accounts.
• Maintain service reliability, investigate technical errors and meet applicable legal and financial-record obligations.

5. Sharing and service providers

Relevant information is shared with the parties to a booking and authorized Curbi support or administration staff. Public listing information is shown to drivers; private access information is not made part of the public listing.

Google Firebase supports authentication, database and file storage, notifications, App Check and technical diagnostics. Google Maps and Places support maps and destination search. Stripe and Stripe Connect handle parking payments and host payouts. Apple, Google Play and RevenueCat handle store purchases and host subscription entitlements.

These providers process information under their applicable agreements and privacy policies, including outside your country where their infrastructure operates. We may disclose information when required by law or needed to investigate abuse, resolve a dispute or protect rights. We do not promise that technical security measures eliminate every risk.

A host can receive the booking and vehicle information needed to identify the reserved vehicle, provide access and handle the reservation; a driver can receive the information needed to contact the host and use the booked area. Hosts and drivers must use this information for the booking and lawful related needs, protect it and avoid publishing it. A public review or public listing photo can be visible to other people.

If you open an external parking provider, map or navigation app, that provider handles your interaction under its own privacy policy. A link or data source does not establish an active commercial booking integration. If Curbi introduces a commercial integration requiring additional personal data, the relevant disclosure and permission will be presented before that transfer.

We may share necessary records with professional advisers or an acquiring business in a lawful business transfer, subject to appropriate confidentiality and privacy requirements. A transfer does not eliminate applicable privacy rights.

Google Maps and Places features use Google services. Google's Privacy Policy, linked below, is incorporated by reference for information handled by Google through those features. This does not replace Curbi's responsibilities or the other disclosures in this policy.

Google Privacy Policy

Mobile crash diagnostics

Native iOS and Android versions with diagnostics enabled use Firebase Crashlytics to investigate crashes and technical errors. Reports can include crash stack traces, app and operating-system versions, device information, Crashlytics installation UUIDs and Firebase installation IDs.

Curbi's Dart error handler removes exception-message text and sends an error-type label and code stack trace. Curbi's native authentication code sets your account identifier in Firebase Crashlytics when you are signed in. This identifier may accompany native crash reports to help investigate technical errors. The Dart handler does not deliberately add message text, voice transcript, precise location or payment details to Crashlytics. Native SDK diagnostics are separate; this does not mean that crash reports contain no identifying data.

Firebase states that Crashlytics keeps crash traces and associated identifiers for 90 days before starting removal from live and backup systems. This is not a promise of deletion exactly on day 90. Contact Curbi for privacy questions about technical diagnostics.

6. Optional OpenAI processing

Curbi asks permission before sending information to OpenAI for optional AI features. Voice search sends recognized speech text and relevant search context for interpretation. AI assistance sends the text you choose. Listing AI review sends the selected public description and listing photos after permission.

Private address and access-instruction fields are excluded from the structured listing review request. A public description or photograph can itself contain personal information, so do not upload access codes, faces, readable plates or other private information unnecessarily.

You can use regular search without AI. Declining AI listing review can require manual review. AI output does not guarantee legality, safety, ownership, measurements, vehicle fit or actual availability.

Curbi requests API response storage to be disabled where supported. This is not a promise of zero provider retention; provider security and abuse-monitoring practices and the applicable account agreement still apply.

7. Retention

Account and service information is kept while needed to provide the service and handle your requests. Newly resolved ordinary support conversations and their support attachments are scheduled for deletion 180 days after resolution. Earlier closed cases require a retention review before removal. A completed account-deletion request can remove ordinary support content earlier. Open cases are not deleted by this closed-case schedule.

Financial, fraud-prevention, safety, property-verification, complaint and dispute evidence can require a separate retention review, including after account deletion, to meet legal obligations, reconcile money or handle claims. The 180-day support schedule does not delete financial ledgers or records subject to a legal hold. Contact us for information about the records and retention reason in your case. Payment providers apply their own legal and contractual retention requirements.

The foreground activity journal has a 90-day retention setting; automatic deletion timing is asynchronous. That journal excludes message contents, voice transcripts, photos, precise location and full payment details. Bookings, payment records, protected evidence and provider records are separate.

8. Account deletion and your choices

Request deletion in Curbi under Settings > Delete account, or use the public account-deletion page linked below. Identity confirmation is required. Active bookings, refunds, payouts and disputes can delay completion; new bookings are disabled after an accepted in-app deletion request.

Deletion removes the account and associated profile, listings, vehicles and owned content through the implemented deletion process. Required financial, safety or dispute evidence may be retained or reviewed separately. Deleting Curbi does not cancel an Apple or Google subscription: cancel that subscription in the store.

You can request access or correction, control device permissions and stop using optional AI. Depending on your location, additional rights or appeal options may apply. We may ask for limited information to verify that a request is yours. Do not send passwords, full card numbers or identity documents by ordinary email unless a secure verification process has been arranged.

9. Browser storage

The website and web app use browser storage to maintain sign-in, remember settings and recover interrupted payment requests. Firebase, App Check and payment providers may use storage necessary for authentication, security and payment. Clearing browser data can sign you out and remove saved preferences; it does not cancel a booking or a subscription.

10. Privacy requests and applicable state rights

You may contact us to request access to personal information, correction of inaccurate information or deletion. Where applicable law provides them, rights can also include receiving a portable copy, opting out of a sale or sharing for cross-context advertising, limiting certain uses of sensitive personal information, and appealing a denied request. The scope of these rights and any exceptions depend on the law that applies to the service and your request.

For California residents, where the California Consumer Privacy Act applies, these rights include knowing the categories, sources, purposes and recipients of personal information, access, correction, deletion, applicable sale/sharing opt-outs and sensitive-information limits, and freedom from unlawful discrimination for exercising those rights. This statement does not claim that every business-size threshold or every exception applies to Curbi.

Submit a request to the email or phone below, or use the account-deletion page. Tell us the right you want to exercise and the account email. We will verify only what is reasonably necessary, respond within the period required by applicable law, explain any permitted extension or refusal, and describe any applicable appeal route. An authorized agent may submit a request; evidence of authority and appropriate identity verification may be needed.

Optional AI permission, device permissions and notification preferences are separate choices. Giving a phone number does not, by itself, authorize promotional text messages. We do not treat acceptance of the Terms as permission for every optional data use.

11. Security and your account

Curbi uses access controls and other technical and organizational measures to protect information. No online service can guarantee that a breach, loss or unauthorized access will never occur. This explanation does not excuse Curbi from security duties or breach-notification obligations imposed by law.

Protect your sign-in credentials and device, keep your account contact details current, and tell support promptly about suspected unauthorized access. Do not send bank details, passwords, private gate codes or identity documents in public content. Where provider onboarding or verification requires sensitive documents, use the designated secure provider flow.

12. Age and international processing

Curbi accounts, hosting and booking are intended for adults aged 18 or older who can enter into a contract. Curbi does not knowingly collect personal information from children under 13. Contact us if you believe a child has provided information so we can investigate and take appropriate action. This policy does not claim that every visitor has completed an age-verification check.

Curbi currently launches in the United States. Service providers may process information in the United States or other countries with different privacy laws. Where applicable law requires a particular transfer safeguard or lawful basis, that requirement still applies; simply using Curbi does not waive it.

13. Updates and contact

The date above identifies this policy version. Material changes will be communicated through an appropriate notice; additional consent will be requested where required by law. We will not treat a rewritten policy as retroactive permission for an unrelated data use.

Contact the operator below about this policy, a privacy request, account deletion or suspected misuse of personal information. The support contact also accepts privacy requests without requiring installation of the app.