Privacy Policy

ParkAlert (“ParkAlert”, “we”, “us”) is a mobile app that lets drivers reach the owner of a parked vehicle without either of them sharing a phone number. This policy covers the ParkAlert apps for iOS and Android, this website, and the services behind them. It explains what we collect, why, and the choices you have.

For any question about this policy or your data, contact us at privacy@getlawha.com.

Other people in ParkAlert only ever see a nickname we generate for you (for example “Blue Falcon 482”). They never see your real name, phone number, email address, ID number or documents, and they cannot find out which vehicles belong to you.

Looking up a plate only tells the person looking whether the vehicle is registered in ParkAlert. The owner is not told who looked.

• Account details: your mobile phone number, which you sign in with using a one-time code sent by SMS; your generated nickname; your language and country; and, if you choose to add one, an email address, which we confirm with a code.
• Verification documents: images of your Qatar ID (QID) and of the registration card (Istimara) of each vehicle you register, and the details read from them, such as your QID number and the plate. We use them to confirm that you are who you say you are and that the vehicle is yours.
• Vehicles: the plates and vehicle details you register, and whether you removed, sold or transferred a vehicle.
• Vehicle vault: on a paid plan, the bills, receipts, insurance and registration papers, warranties and manuals you choose to add, with the details you give them (title, dates, amount, garage and any private notes).
• Maintenance details: for each thing you track on a vehicle — such as an oil change, tyre rotation or battery — how often it is due, the dates and odometer readings you log, roughly how far you drive in a day, and whether you want reminders by notification, by email or both, so we can estimate when it is next due and remind you.
• What AI reads from your vault: on Premium Plus, a short summary of each document and details read from it — such as its date, the garage, the odometer reading, the amount, the work done and each line on a bill or receipt — and the document’s text, stored so the assistant can find it. We also count how many questions you ask each month. The questions themselves and the assistant’s answers are not stored.
• Alerts, messages and calls: the alerts you send and receive, the messages in your conversations, and a record of each call (who called whom, when, how long it lasted and how it ended). Call audio is not recorded.
• Device information: an identifier the app creates when it is installed (not an advertising identifier and not a hardware identifier), the platform, operating-system version, device model, app version and country. It is stored with your messages, calls, vehicles and verification requests so we can investigate abuse.
• Emails we send you: a record of each one — the address, what kind of email it was (a confirmation code or a reminder, for example), its subject, which reminder it was about and whether it was sent. Confirmation codes are blanked out of the record, and the body of the email is not kept.
• Notification tokens from Apple and Google, so we can send you alerts, messages and incoming calls.
• Subscription details: if you buy a paid plan, the app store tells us (through RevenueCat) which plan you have, its price, its status and renewal date. We never receive your card or payment details.
• Safety records: the users you block and the reports you make or that are made about you.
• Technical logs: your IP address and basic request information, kept for security, rate limiting and troubleshooting.

We do not collect your location, your contacts or your photos beyond the document images you choose to upload.

• To run ParkAlert: sign you in, deliver alerts, messages and calls, and show you your vehicles and conversations.
• To verify identities and vehicle ownership, and to settle disputes about who owns a plate.
• To keep people safe: enforce these rules, act on reports and blocks, limit how often lookups and alerts can be made, and investigate abuse.
• To provide paid plans: know which plan you are on and what it includes.
• To keep your vehicle vault, remind you when maintenance or a document's expiry is due — by email as well, if you switch that on — and build an export of a vehicle's history when you ask for one.
• On Premium Plus, to summarise your vault documents with AI and answer your questions about your own vehicles from your own records.
• To contact you about your account, for example to confirm your email address.
• To secure, maintain and improve the service, and to meet our legal obligations.

We do not sell your personal data, we do not show advertising, and we do not track you across other companies’ apps or websites.

Documents are stored in private storage that is never publicly reachable. They are checked by an automated review, and may be checked by a member of our team. They are never shown to other users, and once uploaded they cannot be downloaded through the app — not even by you.

Vault documents are stored in private storage that is never publicly reachable. They are never shown to other users, and they are not available to our support team through our tools. Unlike verification documents, they are yours to open, save and share from the app, because they are your own papers.

AI. On Premium Plus, each document you add is read by an AI model that runs on Cloudflare’s network (Workers AI), to write its summary and pick out its details. When you ask the assistant a question, it is given only your own vehicles, maintenance log and documents — never another user’s — and answers from them. Your documents, questions and answers are not used to train AI models. AI can make mistakes: summaries and answers are a convenience, and the document itself is the record.

Exports: when you export a vehicle's history, the file is built at that moment from your vault and sent to your device. We do not keep a copy. It contains the vehicle, its oil changes and its documents — never your name, phone number, email, ID or private notes. Who you share it with is up to you.

Calls connect the two phones directly (peer-to-peer) whenever possible, and otherwise through a relay server. Neither person sees the other’s phone number. Because a direct connection is made between the two devices, each device can learn the other’s IP address while the call is connected, which is how internet calling works.

We use a small number of service providers to run ParkAlert. They process data only on our instructions and only for the purpose listed:

• Supabase — database and sign-in.
• Cloudflare — hosting of our servers, private storage of verification and vault documents, automated document review, AI processing of vault documents and assistant questions (Workers AI), email delivery and call relays.
• SMS providers — delivering sign-in codes to your phone.
• Google (Firebase Cloud Messaging) and Apple (Push Notification service) — delivering notifications and incoming calls.
• Apple (App Store) and Google (Google Play) — selling and billing paid subscriptions.
• RevenueCat — confirming App Store and Google Play purchases for us. It receives your ParkAlert account identifier, not your name or phone number.

Some of these providers process data on servers outside Qatar. Where they do, we rely on their contractual commitments to protect it.

We may also disclose information when the law requires it, for example in response to a valid request from the authorities in Qatar, or to protect the safety of a person.

We keep your data for as long as your account is open, and afterwards only for as long as we need it for the purposes above — including resolving disputes about a vehicle, handling reports, and meeting legal obligations.

Vault documents stay until you delete them, even if your paid plan ends — the vault becomes read-only rather than being emptied. Deleting a document also deletes its summary and everything read from it. Deleting your account deletes your whole vault, your maintenance log and everything AI read from your documents.

The record of each email we send you is deleted after 365 days.

When you delete your account, your sign-in account is deleted, your notification tokens are removed and your plates are freed for someone else to register. Messages you sent stay visible to the people you talked with, because they are part of those people’s conversations too. We keep a minimal record of the deleted account so that blocks and reports against it keep working: a block follows a phone number for 12 months after deletion, and follows a QID for as long as the record exists.

Under Qatar’s Law No. 13 of 2016 on the Protection of Personal Data Privacy, and other laws that may apply to you, you can ask to see the personal data we hold about you, ask us to correct it, object to how we use it, and ask us to delete it.

• Delete your account at any time from the app’s Settings. Deleting your account does not cancel a paid subscription bought through the App Store or Google Play — cancel it there first (see our Terms).
• Remove your email address at any time in the app.
• Turn notifications off in your phone’s settings.
• For anything else, email privacy@getlawha.com. We will answer within 30 days.

Data travels encrypted between the app and our servers. Access to personal data inside ParkAlert is limited to the staff who need it, and every administrative change is logged. No system is perfectly secure, so we cannot guarantee that information will never be accessed without authorisation, but we work to prevent it and will tell you if a breach affects you as the law requires.

ParkAlert is for drivers and vehicle owners aged 18 or over. We do not knowingly collect data from anyone younger. If you believe a child has created an account, contact us and we will delete it.

We will update this policy when what we collect or how we use it changes, and change the date at the top. If a change is significant, we will tell you in the app before it takes effect.

Privacy questions and requests: privacy@getlawha.com. Anything else: support@getlawha.com.