LEGAL · UPDATED 28 OCTOBER 2026

Privacy policy

What Park & Dash collects, why, who sees it, and the choices you have. In plain language.

01Who we are

Park & Dash is a parking service run by Inoseek (“Inoseek”, “we”, “us”), based in Nairobi, Kenya. This policy explains what personal information we collect when you use the Park & Dash app, our website and the parking lots that use our service, what we do with it, and the choices you have.

For the purposes of the Kenya Data Protection Act, 2019, Inoseek is the data controller of the information described here. You can reach us at contact@inoseek.ai.

02What we collect

We collect only what we need to run parking and payments for you:

  • Account details: your name, email address and phone number, and a password if you sign up with one. We store only a scrambled (hashed) form of your password, never the password itself.
  • Sign in with Google: if you choose it, Google tells us your name and your verified email address. We never see your Google password.
  • Your cars: the number plates you register, and whether each one is active.
  • Parking sessions: the lot, the number plate, the time the car entered and left, the duration, the fee and whether it has been paid.
  • Money records: your wallet balance, top-ups, parking charges and refunds, with M-Pesa phone numbers and transaction references. We never see or store your M-Pesa PIN or card details.
  • Alerts, refunds and support: alerts about your cars, refund requests and the messages you send us.
  • Device and notification data: a push-notification token for your phone, your notification choices, and technical information such as your IP address that our servers record when the app connects.

The app does not use your phone’s location, contacts, camera or microphone, and it contains no advertising or third-party analytics.

03How we use your information

  • To create and secure your account, and to confirm your email address and phone number.
  • To recognise your registered car at a participating lot, start and end your parking session, and work out the fee.
  • To take payment from your wallet or send an M-Pesa payment request, and to keep an accurate record of every charge, top-up and refund.
  • To send you notifications and text messages about parking, payments, alerts and your account.
  • To answer support requests, investigate disputes and handle refunds.
  • To keep the service safe, prevent fraud and misuse, and meet our legal and accounting duties.

We do not sell your personal information, and we do not use it for advertising.

04Number plate recognition

Participating parking lots use cameras that read number plates. When a car enters or leaves, the system records the plate text, the time, the lot and the camera. In some lots the camera may also keep a still image of the vehicle from the moment of detection.

We match the plate to a registered car to start your session and to charge the right account. A plate that is not registered is still recorded as a parking session so that the parking fee can be collected by the lot’s staff.

05Who we share it with

We share information only where it is needed to provide the service:

  • Lot owners and their staff see the parking sessions at their own lots (number plate, driver name, times, fee and payment status). Staff may look up a plate to collect an unpaid fee, which shows the vehicle owner’s name and phone number. They do not see your wallet balance or your activity at other lots.
  • Service providers who work for us: Safaricom (M-Pesa payments), Celcom (text messages), Brevo (emails), Google and Firebase (push notifications and Sign in with Google), and the cloud and database companies that host our systems. They may use your information only to provide their service to us.
  • Authorities, when the law requires it or to protect people and property.

If Inoseek is ever sold or merged, your information would move with the service under this policy.

06App permissions

  • Notifications: to tell you when you park, pay or when something needs attention. You can turn them off in the app’s settings or in your phone’s settings.
  • Internet: the app needs a connection to work.
  • Text-message code autofill: on Android the app can fill in a verification code sent to you. It uses Google’s SMS Retriever, which reads only the verification message meant for the app, and the app does not ask to read your other messages.

07How long we keep it

We keep your account information while your account is open. Records of money movements (charges, top-ups and refunds) and the parking sessions behind them are kept for as long as accounting, tax and other laws require, and to settle disputes.

When you ask us to delete your account we remove or anonymise your personal details. We may keep the financial and parking records that we are required to keep, without your name and contact details where possible. See how to delete your account.

08Your rights and choices

Under the Kenya Data Protection Act, 2019 you have the right to:

  • know what personal information we hold about you and get a copy of it;
  • have wrong or out-of-date information corrected;
  • object to how we use your information, or ask us to restrict it;
  • ask us to delete your information, subject to the records we must keep;
  • receive your information in a portable format.

You can update your name, phone number and notification choices in the app. For anything else, write to contact@inoseek.ai from the email address on your account. If you are not satisfied with our answer, you may complain to the Office of the Data Protection Commissioner of Kenya.

09How we protect it

Information travels between the app and our servers over encrypted connections (HTTPS). Passwords are stored hashed, access to our systems is limited to people who need it, and money records are kept in a tamper-evident ledger. No system is perfectly secure, so please keep your password private and tell us straight away if you think your account has been used by someone else.

10Where it is processed

Some of the companies that host or help run our service process information outside Kenya. When that happens we use providers that protect information to a standard that meets the Kenya Data Protection Act’s requirements for transfers.

11Children

Park & Dash is for people aged 18 and over. We do not knowingly collect information from children. If you believe a child has given us information, tell us and we will delete it.

12Changes to this policy

We may update this policy as the service changes. We will post the new version here with a new “updated” date, and for important changes we will also tell you in the app or by email.

13Contact us

Inoseek, Nairobi, Kenya. Email contact@inoseek.ai or call +254 740 916 598. Our terms of use are at inoseek.ai/terms.