Privacy Policy for AllSpark

1. Information We Collect

Location Data

To provide core functionality including displaying nearby EV chargers, calculating optimal routes, and enabling navigation templates via Android Auto, our App requires access to your location data.

• Foreground Location: We collect location data when the app is actively in use on your screen.
• Background Location: We may collect location data when the app is running in the background (for example, during active navigation to a charging station or projecting to your car screen).

Device and Usage Data

We automatically collect certain information about your device and how you interact with the App, including app version and build, platform, distribution channel, device family, IP address, operating system version, consent state, and app performance or security signals. Optional product analytics is collected only when you opt in.

Personal Information and Authentication

If you create an account using our authentication service, we collect personal information such as your name, email address, and OAuth authentication tokens.

Photos and Camera

If you use features to capture or upload images of charging stations, update your profile picture, or personalize an account vehicle, the App requests permission to access your device camera or photo gallery. We only access the specific images you select. Vehicle images are auto-oriented, resized, converted to WebP, and stripped of EXIF and other embedded metadata before private storage. They are removed after replacement, explicit deletion, vehicle deletion, or account deletion.

Charging, Roaming, Session, and Billing Data

If you use an enabled roaming or charging service, we may process a pseudonymous charging token or contract identifier, the selected charging location, EVSE and connector, authorization and remote command outcomes, session timestamps, meter and energy values, applicable tariffs, costs, charging records, and request or correlation identifiers. We do not send payment-card details through the ENAPI OCPI connection.

Allspark Charging Intelligence for OpenAI

If you use the anonymous, read-only Allspark Charging Intelligence service through an OpenAI product, OpenAI may provide Allspark with an optional coarse location hint, such as an approximate area, when that feature is available and enabled. Allspark uses the hint only to rank nearby charging stations for the current request. The service does not request an Allspark account, payment details, favourites, charging-session data, or permission to start, stop, reserve, or modify charging activity.

2. How We Use Your Information

• Show you the nearest available EV charging stations.
• Calculate accurate driving routes based on your vehicle model.
• Display navigation instructions on your phone or Android Auto interface.
• Create and secure your user account.
• Authorize, start, monitor, stop, reconcile, and support charging sessions.
• Calculate charges, resolve disputes, prevent fraud, and meet accounting or legal obligations.
• Improve internal application performance.
• Answer anonymous, read-only charger discovery and vehicle-connector compatibility requests made through the Allspark Charging Intelligence service for OpenAI.

We rely on performance of a contract where processing is necessary to provide a requested charging or account service; legitimate interests for proportionate security, reliability, fraud prevention, support, and audit activity; legal obligations for applicable accounting, tax, or regulatory records; and consent for optional analytics or marketing where required.

3. Data Sharing

We do not sell your personal data. We may share information with:

• Google Maps Platform: To render maps and directions. Your location data is subjected to Google's Privacy Policy.
• Service Providers: Third parties who perform services on our behalf, such as authentication hosting.
• ENAPI and participating charging operators: When ENAPI-enabled roaming is available, ENAPI GmbH acts as a technical transaction broker between Allspark and the relevant CPO. We exchange the minimum information needed to route charging requests and process sessions, tariffs, charging records, support, and settlement. The originating CPO remains identifiable by its OCPI country code and party ID.
• OpenAI: OpenAI operates the interface through which you may invoke Allspark Charging Intelligence and processes your conversation under its own terms and privacy policy. OpenAI may send Allspark an optional coarse location hint. Allspark returns the requested public charging-station information to OpenAI for presentation to you.
• Infrastructure and charging-data providers: Our hosting and security providers process requests on our behalf. Charger records may originate from the station-data providers and operators identified by Allspark. We do not send the OpenAI coarse location hint to charging point operators for an anonymous nearby search.

ENAPI is based in Germany. A participating CPO may be located outside the European Economic Area depending on the charging service requested. Where a restricted international transfer occurs, we rely on an applicable adequacy decision or appropriate contractual and organisational safeguards.

4. Retention and Security

We keep personal data only for as long as needed for the purpose described. Authenticated mobile navigation telemetry is rounded and currently retained for 30 days. Charging sessions and charging records may be retained for longer periods needed for billing, settlement, accounting, tax, fraud, disputes, legal claims, and statutory obligations. Staging integration data is quarantined, access-restricted, and subject to shorter engineering retention periods.

We use access controls, encryption, credential rotation, audit records, data minimisation, and scheduled retention controls. No internet transmission or storage system is completely secure.

Allspark does not write an OpenAI-provided coarse location hint to an account, profile, search history, analytics record, application database, or plugin log. It is held only while the current nearby-search request is processed and is then discarded, so its application-level retention period is zero. Standard infrastructure and security logs may retain non-location request metadata under our operational retention controls. Public station results may include provider-sourced station coordinates because those coordinates identify and map the stations returned to you.

5. Your Data-Protection Rights

Subject to applicable law, you may request access, correction, deletion, restriction, or portability of your personal data and may object to processing. Where processing is based on consent, you may withdraw consent at any time without affecting earlier lawful processing. You may also lodge a complaint with the Irish Data Protection Commission or your local supervisory authority.

6. OpenAI Location Choices

Providing a coarse location hint is optional. You can decline or disable location sharing in the relevant OpenAI product or device controls. Allspark Charging Intelligence remains read-only, but a nearby search may be less relevant or unavailable without an approximate area. The service does not accept raw latitude, longitude, or a street address as public tool input. These controls are separate from location permissions you may grant directly to the Allspark website or mobile app.

7. Account and Data Deletion

Depending on your applicable local privacy laws (including GDPR and CCPA) and Google Play Store policies, you have the right to request the deletion of your account and personal data.

• In-App: You may permanently delete your account and associated data by navigating to Profile > Settings > Delete Account within the App.
• Web: You can also review deletion steps and request account deletion from our Account Deletion page.

8. Contact Us

If you have any questions about this Privacy Policy, please contact us at dev@allspark.ie.

Website: www.allspark.ie