Privacy Policy

Last updated: February 24, 2026

TapOut ("the App") is a UC Davis campus parking enforcement alert app. This policy explains what data we collect, how we use it, and your rights as a user.

1. Data We Collect

• Email address. Collected when you verify your account via one-time passcode (OTP). Used solely to authenticate your account.
• Device identifier. A random UUID generated on your device and stored securely in the iOS Keychain. Used as your account identifier for all authenticated requests.
• Push notification token. Collected if you grant notification permission. Used to send you TAPS alerts.
• Parking activity. Lot check-ins, check-outs, TAPS sightings you report, and votes you cast on sighting reports. Used to power the community feed and occupancy stats.
• Ticket photos. If you use the Scan Ticket feature, a photo of your parking ticket is uploaded to our server for text extraction (OCR) to auto-fill a TAPS report. The image is not stored after processing.
• Optional sighting notes. Free-text notes you may attach to a TAPS sighting report. Visible to other users in the community feed.

2. How We Use Your Data

All data collected is used exclusively to operate the App:

• Authenticating your account and securing API access.
• Displaying real-time parking occupancy and TAPS sighting feeds.
• Sending push notifications when TAPS is spotted near your parked location.
• Processing ticket photos to auto-generate sighting reports.

We do not use your data for advertising, marketing, analytics sold to third parties, or any purpose unrelated to the App's core functionality.

3. Data Sharing

We do not sell, rent, or share your personal data with third parties. Your data is stored on our backend server (Google Cloud App Engine) and is not disclosed to outside parties except as required by law.

The App allows you to open AMP Parking or Honk Mobile via a deep link when a TAPS alert is received. Tapping that link hands you off to that app — we do not share any of your data with those services.

4. Data Retention

• Account data (email, device ID) is retained while your account is active.
• Ticket photos are deleted from our servers immediately after OCR processing.
• Parking sessions and sightings are retained to power historical predictions.

5. Your Rights

You may request deletion of your account and associated data at any time by contacting us at the address below. Upon request we will delete your email address, device identifier, and all associated parking and sighting records.

6. Children's Privacy

The App is not directed at children under 13. We do not knowingly collect personal information from children under 13.

7. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the App after changes constitutes acceptance of the updated policy.

8. Contact

Questions or data deletion requests can be sent to:
ucd.tapout@gmail.com