1. What we collect

Depending on how you use the Service, we may process:

• Location you choose to search — the destination you type, drop a pin on, or (only if you grant browser permission) your approximate current location. This is used to find nearby parking and is not linked to your identity.
• A random session identifier generated in your browser to group the searches in a single visit. It is not an account and does not identify you personally.
• Search details — destination label, walking-time radius, price/convenience preference, vehicle type, filters, and the number of results returned.
• Technical data — your IP address is used transiently to apply rate limits and is not stored together with your search records. If you accept analytics, your browser and device type may be processed by our analytics provider.
• Local storage on your device — your language choice, vehicle choice, and your saved favourites and recent searches. These stay on your device and are not personal identifiers.

2. Cookies and analytics

We do not use advertising cookies, and we do not use any cookies for analytics. We use Vercel Web Analytics and Vercel Speed Insights to understand how the Service is used and how quickly it loads. Both are cookie-free: they set no cookies, store nothing on your device, and do not track you across other websites. Because they cannot identify you or follow you elsewhere, they run without a consent banner.

Aggregate measurements include the page visited, referrer, and coarse device and country information derived from your request. They are not combined into a profile of you.

3. How we use your data

We use the data above only to:

• Provide the core service — locate, rank, and display nearby parking by price and walking time;
• Protect the Service — apply rate limits to prevent abuse of our paid mapping quota;
• Understand and improve the Service — in aggregate, using cookie-free measurements that cannot identify you.

4. Third parties and cross-border transfer

To provide the Service we share the minimum necessary data with the following service providers, who act as our data processors:

• Mapbox — mapping, address search (geocoding) and walking-time estimates. The destination text and coordinates you search are sent to Mapbox.
• OGCIO Address Lookup Service (a Hong Kong Government service) — to resolve Hong Kong building and street names you search.
• Supabase — database hosting for parking data and search logs (servers located in Singapore/Sydney region).
• Vercel — application hosting, plus cookie-free traffic measurement (Web Analytics) and performance measurement (Speed Insights).

5. Retention

Search logs (session identifier, search coordinates, and search parameters) are retained only as long as necessary to operate and improve the Service, and are deleted or anonymised thereafter. Data stored in your browser’s local storage remains until you clear it.

6. Security

We use industry-standard measures, including encrypted (HTTPS) connections and access controls on our database, to protect data against unauthorised access, loss, or misuse.

7. Your rights under the PDPO

Under the PDPO you have the right to request access to, and correction of, any personal data we hold about you, and to ask how we use it. Because we do not collect names or contact details, we may be unable to link a request to a specific person without additional information.

To make a request, contact us at the address below. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner for Personal Data, Hong Kong (PCPD).

8. Children

The Service is intended for a general audience and is not directed at children. We do not knowingly collect personal data from children.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “last updated” date below.

Contact

privacy@mouwai.app

Office of the Privacy Commissioner for Personal Data, Hong Kong (PCPD): www.pcpd.org.hk