Privacy Policy – Parkday, Inc.

Effective Date: January 1, 2025

1. Introduction

This Privacy Policy (“Policy”) outlines the practices of Parkday, Inc. (“Parkday”, “we”, “us”, or “our”) regarding the collection, use, disclosure, and protection of personal information obtained through the Parkday platform, including our website located at https://heyparkday.com, mobile applications, and all other related services (collectively, the “Service”). This Policy is incorporated by reference into our Terms of Service.

By accessing or using the Service, you agree to the terms of this Policy and consent to the collection and processing of your information in accordance with this Policy and applicable laws.

2. Information We Collect

2.1 Account and Identity Verification Data

We collect personal information necessary to register and authenticate users through Google Single Sign-On (SSO), including:

• Full name

• Email address

• Profile metadata (e.g., photo)

We do not collect or store your Google SSO password.

2.2 Dietary Preferences and Health Data

Users may voluntarily provide dietary preferences, food allergies, or exclusions. This data is used exclusively to tailor menu recommendations via automated systems and is not shared with restaurants or third parties.

HealthKit & Apple Health (Food/Nutrition Only)

Scope. Connecting Apple Health (“HealthKit”) to Parkday is optional. We only access Health data after you grant explicit permission.

Health Data We Access (Read & Write). With your permission, Parkday may read and write the following HealthKit nutrition data types:

• Dietary Energy (calories)

• Dietary Protein

• Dietary Carbohydrates

• Dietary Fat (total)

Parkday does not access steps, heart rate, or other HealthKit categories at this time.

Purpose of Use. Solely to:
(i) display your nutrition/dietary history,
(ii) track goals and trends you request (calories/macros), and
(iii) improve the accuracy of in-app nutrition insights and logging.
We do not use Health data for advertising, marketing, or profiling, and we do not sell Health data.

Consent & Control. Manage permissions in Settings → Health → Data Access & Devices → Parkday (or in the Health app). You can revoke permissions or disconnect HealthKit in-app; Parkday will stop accessing Health data when disconnected.

Processing. Parkday calculates your meal macros and writes them to Apple Health via HealthKit. If you enable reading, Parkday will read only the nutrition types you permit (calories, protein, carbohydrates, fat). HealthKit data may be transmitted to Parkday’s servers solely to operate these features, is encrypted in transit and at rest, not used for advertising, and can be revoked anytime in iOS Health settings.

Third-Party Sharing. No sharing of Health data with advertisers, data brokers, or social networks. Service providers acting on our behalf (e.g., cloud hosting) may process Health data under confidentiality and security obligations, solely to deliver the Service. Any sharing beyond processors (e.g., research/clinical partners) occurs only with your separate, explicit consent identifying data and purpose.

Retention & Deletion. We retain Health-derived data only as needed to provide enabled features and otherwise as described in Retention of Data. Request deletion by emailing app@heyparkday.com or by deleting your account; we will remove Health-derived data from our servers within a reasonable period, subject to legal obligations.

Security. Health data is encrypted in transit (TLS) and at rest. Access is limited to personnel with a business need. On your device, Apple protects Health data (including device encryption when locked).

No Advertising or Sale. We do not use Health data for targeted advertising, do not monetize it, and do not sell it.

Accuracy & Medical Use. Parkday is not a medical device and does not provide medical advice. Do not rely on Parkday for diagnosis or treatment decisions.

Legal & Compliance. Parkday is not a HIPAA-covered entity. Our handling of HealthKit data is governed by this Policy, Apple’s HealthKit terms, and applicable laws (e.g., GDPR as described herein).

2.3 Technical and Usage Data

We automatically collect technical information about your use of the Service including:

• IP address and location (if permitted)

• Browser and device information

• Operating system details

• Page interaction data and session duration

2.4 Tracking Technologies

We utilize cookies, pixel tags, and analytics tools (e.g., Google Analytics, Firebase) to:

• Maintain session integrity

• Track feature usage

• Improve user experience

You may disable cookies via your browser settings.

3. Purposes for Data Use

Your personal data may be used for the following purposes:

• Operating and maintaining the Service

• Personalizing your experience (including dietary tagging)

• Fulfilling obligations to employer clients

• Ensuring platform security

• Conducting analytics and diagnostics

• Complying with legal obligations

We do not use your data for profiling or advertising.

4. Data Sharing and Disclosure

We do not sell your data. We may disclose information only:

• To service providers under confidentiality

• As required by law or court order

• In the event of a corporate transaction (e.g., acquisition)

• With your express consent

Health and dietary data are never disclosed for advertising or sold.

5. Data Retention

We retain personal data as long as necessary to provide the Service or as required by law. Deletion requests can be sent to app@heyparkday.com.

6. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

• Access or correct your personal information

• Request deletion of your data

• Object to or restrict processing

• Withdraw consent (where applicable)

• Lodge a complaint with your data authority

7. International Data Transfers

Your data may be processed in the United States. We implement appropriate safeguards for international transfers as required by applicable law.

8. Children’s Privacy

The Service is not intended for users under 13. We do not knowingly collect personal information from children.

9. Data Security

We implement technical and organizational safeguards to protect your data. However, no method of transmission is 100% secure.

10. Changes to this Policy

We may update this Privacy Policy from time to time. Changes will be effective upon posting. Material updates will be communicated directly.

11. Contact

For any privacy questions or data requests, contact:
📧 app@heyparkday.com