Privacy policy
Last changed: 4 November 2026. Effective from: 4 November 2026.
This is an English translation of the Swedish privacy policy (Integritetspolicy för AntPark) of the same version and date. If the two differ, the Swedish version applies.
Short version
We collect what is needed for a booking to go through and for the money to end up in the right place. We do not sell any data and we show no advertising. You can download everything we hold about you, and you can delete your account yourself in the app.
Two things we deliberately do not do: we store no card numbers — they are handled by Stripe and never reach us — and we do not currently collect personal identity numbers (personnummer). If we become legally obliged to report the income of those who rent out to the Swedish Tax Agency (Skatteverket) (see Who we share data with), we will change this policy before we start collecting what is required.
Who is responsible
The controller (personuppgiftsansvarig) is Antworks AB, company registration number (organisationsnummer) 559592-5446, Grävlingsstigen 39, 139 41 Värmdö, Sweden. Questions about personal data: dataskydd@antpark.app.
We have no data protection officer. One is required when the core activities consist of regular and systematic monitoring of people on a large scale, or of sensitive data. AntPark arranges parking: we do not track anyone and we process no sensitive data. All questions about personal data go to the address above.
What we collect, and why
Your account
| Data | Where it comes from | Why | Legal basis |
|---|---|---|---|
| Name | Apple or Google when you sign in, or your own choice | The other party should know who they are meeting | Contract |
| Previous names, at most ten | Every time you change your name | A notification to the other party was written with your name as it was then, and when you delete your account we also remove the old names from those notifications | Contract |
| Email address | The same | Receipts, notifications, contact | Contract |
| Phone number | You enter it, we verify it by SMS | Shows that the account belongs to a human being: one number can hold at most three accounts. SMS notifications if you turn them on, and the country calling code suggests your country and your card’s currency | Contract and legitimate interest |
| Which service you signed in with | The sign-in | So that you can get in next time | Contract |
| Language and mode (car or boat) | Your choice; the language follows your device until you have chosen one | Show the right content | Contract |
| Time zone | Your device, when you sign in and when it changes zone | Send the day’s summary at seven o’clock where you are | Contract |
| The version of the terms and of the policy you accepted, the language and the time | Your acceptance | Show which terms applied | Contract |
| A code for joining a company | We create it and email it to your address | Show that it is you who reads that address’s mailbox (see Associations and companies) | Contract |
| Countries you asked to hear about | Your choice, “Notify me when it opens” | Tell you when renting out or payouts open there | Contract |
| Profile picture, if you add one | You upload it | So the other party recognises you | Contract |
We never see your password at Apple or Google.
If you add an email address, we send a link to it. The page the link opens says which account the address is being added to and asks first. If you answer This wasn’t me, we remove the address from that account, and nothing is confirmed.
What you post
- Vehicles: registration number and the country on the plate, type (car, motorcycle, motorhome, caravan, trailer or lorry), model, dimensions and battery size.
- Boats: name, model, length, beam, draught and height on the trailer.
- Listings (if you rent out): title, description, address, coordinates, pictures, prices, opening hours, door code, space number and directions.
- The charger, if the spot has one: make, model, the charger’s identity and the electricity price.
- Pictures you upload. We remove location data and other metadata from them when they are stored.
- Messages to the other party and to support. A report of another party is stored as a message in your support thread, together with the booking it concerns. If you report a listing, we store the reason and your note.
- Blocks: if you block the other party in a conversation — a renter if you rent out, or the person renting out if you rent — we store whom you blocked and when, until you lift the block.
- Reviews and ratings you write.
When you book
The booking’s times, the price and its parts, which vehicle or boat was parked there, and when you checked in and out. The vehicle details are stored as a snapshot — if you sell the car, the booking should still show which vehicle actually stood in the spot. The booking and the monthly spot also store which version of the terms you last accepted, and a listing stores which version the owner had accepted when it was published. The vehicle’s type is stored separately and remains when the vehicle details are deleted: that a motorcycle stood in the spot does not say who you are, and the owner’s spot relies on it.
If you charge, we store the charging session with the booking: the meter readings, the power and the times. It is kept like the accounting records.
Payments
Amounts, fees, dates and who paid whom. You type your card number into Stripe’s form, and it never reaches us. If you save the card, we see its brand, the last four digits and when it expires, and an identifier from Stripe that tells whether two cards are the same, so that you can choose it next time. With the card we also store whether it is in a wallet such as Apple Pay or Google Pay, and when, where (on the web or in the app) and in which version you agreed that later payments may be charged to it. If you remove the card, it can no longer be used for payment, but the details about it remain with us until you delete your account, because the payments charged to the card point to them. If you rent out, you register a bank account with Stripe for payouts; the check of your identity is done by them and is required under the anti-money-laundering rules. We store a reference to your account with Stripe, its country and currency, the email address we sent there, and whether the account can receive money or what Stripe is waiting for — not the details you have given them.
If you have a founding owner place (grundarplats) (the terms of use, section 5), we store the place’s number, when your first spot was published and the last day of the offer. It determines the fee on your charges, and the row remains when the account is deleted — with nothing but your id — because the places are only given out once.
Cases
If you open a case, we store your description, the other party’s answer, the pictures you both upload and our decision with its reasons.
Devices and sign-ins
Which devices are signed in, the device’s name, platform and when the sign-in happened — what you see under Active devices and can sign out one by one.
If you turn on notifications in the browser, we store the browser’s push address — the address at the browser’s own push service and two keys — so that a notification can reach you when the app is closed. It is removed when the browser cancels it, when you sign out and when you delete your account.
If you turn on notifications in the app for Android or iPhone, we store the phone’s push address: an address that Google (on Android) or Apple (on iPhone) gives the app, and that can only be used to send notifications to that particular app on that particular phone. We stop using it when Google or Apple says it is no longer valid, and it is removed when you sign out and when you delete your account.
Associations and companies
If you join an association or a company with us, we store which organisation, your role there and when you joined. It is shown under Associations and companies in Profile, and you can leave the organisation. If you have a spot through it, you first terminate that agreement, and if you are its only administrator, you first give the role to someone else. If you join an association’s queue for its spots, we store the flat’s number and the queue date, and if you get a spot from the queue, we store the agreement with the flat and the fee the association charges on the notice (avin); you pay that fee to the association, not to us.
If your company has added its email domain with us and your address on that domain is confirmed, we compare the domain in your address with the company’s and offer you to join under Associations and companies. If your sign-in service has verified the address, that is enough. If you have only confirmed it with the link in our email, we first email a six-digit code there, which you type into the app: it shows that it is you who reads the mailbox. The code is stored as a checksum and not in plain text, is valid for 30 minutes and only the latest one, and is deleted one week after it has been used or has expired. You become a member only when you tap Join, and the administrators then see your name and your role as for someone who joined with a code. If you change jobs, you remain until you leave the company in the app or an administrator removes you.
What the association or company itself does with its member register — the queue, the agreements and the fees on the notice — is decided by the association or company. For that data we process the personal data on the organisation’s behalf, and questions about it can also be put to the organisation.
If the association or company has turned on its public page, the organisation’s name and the board’s presentation are visible to anyone who has the address. The members are not shown there. Spots the organisation has opened to others are visible to everyone, and the others only to someone signed in as a member.
If you are an administrator and fill in the organisation’s billing details, we store them as the organisation’s: the email address for invoices, the postal address, the reference, the VAT registration number and the Peppol ID. If the email address or the reference is your own, it is personal data. We use the details to invoice the organisation for the portal, and when an invoice is created they are copied into its supporting record, which is kept as accounting records.
Expressions of interest
If you register interest for your association or your company on our pages for associations and companies, we store the organisation’s name, your name, your email address, and, if you give them, your phone number, roughly how many spots it concerns and your message, with the page’s language and when the registration came in. We use them only to get in touch about the service, and the registration does not create an account. Deleted after one year, whether or not we have been in touch. The legal basis is our legitimate interest in answering someone who has asked us to get in touch, and you can object to it at any time: we then delete the registration.
The registration is the request to be contacted: the form says what the data is used for, and sending it is the choice. That is why there is no consent checkbox.
When you search
When someone searches on the map, we store a 500-metre square, which hour it was, and whether anything was available. No account, no device, no IP address, no search term and no exact time.
It is used to see where demand exists and where it is missing. Someone who posts a spot also sees two figures for the neighbourhood around the spot: how many searches were made there in the last week and how many of them found no available spot. The figures are shown only when the neighbourhood has at least twenty searches, so that they are never about a few people. Deleted after 90 days.
When you ask us to tell you
If a search finds no available spot, you can tap Tell me when something opens up here. We then store, on your account, the map area, the time you searched for, the form — hour, day or month — and your vehicle’s type, and we search on your behalf every five minutes. If something becomes available, you get a notification with the link to the spot. This is the only place where we store where you intended to park: everything else about it stays on your device (see Storage in your browser and on your phone). The watch is removed when it has been triggered, when the time you searched for begins, after at most 30 days, when you sign out and when you delete your account, and you can remove it yourself in the notification settings. It is included in the export of your data.
Technical logs
We log requests to the service with a trace id and, if you are signed in, your account id. This is needed to be able to answer “why did it go wrong for me yesterday”. Deleted after 30 days.
Location
The app asks for your location only when you tap for it yourself — to show where you are on the map, or to search near you. We do not track you in the background, and the location is not stored separately on your account. If you search near you, the location is rounded to about one kilometre, and the search covers a square that extends a little over one kilometre in each direction. That square is what we process — see When you search above. If you ask us to tell you when something becomes available near you, the map area is stored in the watch (see When you ask us to tell you).
If you choose to note down where the car is parked, that point and your note are stored only in your browser, never with us. They remain until you remove them, park the next time or sign out. In the apps only the note is stored, on the phone, and no location.
Who sees what
- The other party sees your name and your reviews, but never your phone number or your email address. The name is shown shortened — the first name and the initial of the surname — on the listing page and until the owner has accepted a booking; after that you see each other’s full names in that booking. If you rent a spot, the owner sees the vehicle’s type and model straight away, and the registration number once they have accepted the booking.
- Your profile picture, if you have added one, is visible to signed-in users next to your name: on the listing page, in the thread, in the booking and next to your reviews.
- Other users see reviews you have written, with your first name and the initial of your surname.
- A listing you have published is visible to everyone, also to someone who is not signed in: the title, the description, the pictures, the prices and roughly where the spot is. The listing has its own page that search engines may read. Your shortened name and your profile picture are seen only by someone who is signed in. If support takes the listing down, the pictures are visible only to you and to support.
- An association or a company you have joined sees your full name, your role and when you joined: its administrators and managers, but not the other members. Phone number and email address are not shown. If you book one of the organisation’s spots, the administrators and managers see your name and the time in the spot’s calendar and in the list of bookings. If you are in the association’s queue, they see your name, the flat and the queue date, and if you have a spot from the queue, the agreement with the flat and the fee. The board can download a list with your name, the flat, the spot and the fee to send to the association’s financial manager (ekonomisk förvaltare), who charges the fee on the notice.
- Our support sees everything about an account, unmasked, to be able to answer questions and decide cases. Every action a case handler takes is logged with who took it.
Who we share data with
| Who | What | Why |
|---|---|---|
| Stripe | Payment details, amounts, and for those who rent out, identity and bank details. Stripe’s payment form also collects information about your device to detect fraud. For the identity check, money laundering and fraud, Stripe is itself the controller, under its own privacy policy | Payments and payouts |
| Apple, Google | The sign-in takes place with them; we get name and email back | Sign-in |
| 46elks AB, which sends our SMS | Your phone number and the message: the verification code, or a fixed sentence for a notification you have turned on. 46elks is a telecommunications operator and is itself responsible for its own processing, among other things under the Swedish Electronic Communications Act (lagen om elektronisk kommunikation) | Verification and notifications |
| The provider that sends our email | Your email address and the content of the message | Receipts, notifications, the confirmation link and the code for a company |
| The browser’s push service (Google, Mozilla, Apple or Microsoft, depending on the browser) | The notification, encrypted so that only your browser can read it, and when it was sent | Notifications when the app is closed, if you have turned them on |
| Google (Firebase Cloud Messaging) and Apple (Apple Push Notification service) | The phone’s push address and the notification — the title, the text and the link in the app. Unlike in the browser, the notification passes through their service unencrypted. The app for Android has Google’s library for notifications, which sends an id for that particular installation to Google (Firebase Installation ID). Google processes the data on our behalf; Apple is itself responsible for its service | Notifications in the app for Android or iPhone, if you have turned them on |
| Microsoft Azure | All data, as hosting provider | Running the service |
| OpenFreeMap (openfreemap.org) | The map area you are looking at, and, as with every download on the internet, your IP address | Showing the map |
We do not sell data, and we do not give it to anyone for marketing.
We disclose data to an authority when the law requires it. That may be the Swedish Tax Agency (Skatteverket): the EU’s rules on reporting by platforms (DAC7) may require us to provide information about the person who rents out and about the income. The legal basis is then a legal obligation.
Where the data is
The service runs in Microsoft Azure’s data centres in Sweden. The email we send goes through Microsoft within the EU and the EEA. Some of the providers above may process data in other countries; where that happens outside the EU/EEA, the transfer relies on the European Commission’s standard contractual clauses. Where the provider is also certified under the EU–US Data Privacy Framework, the Commission’s adequacy decision for the United States also applies.
How long we keep it
| What | How long |
|---|---|
| The account and what you have posted | Until you delete the account |
| A listing you have removed | The pictures are deleted immediately. The address, the door code and the texts remain with us, not visible to anyone, until you delete the account |
| Listings that were never published | After 183 days the draft is removed and the pictures are deleted. The address and the texts remain, not visible to anyone, until you delete the account |
| Notifications | Read: 90 days after they were sent. Unread: until you read them or delete the account |
| Signed-in devices | 30 days after the sign-in has expired or been signed out |
| Devices for notifications | The address is removed when you sign out; the fact that the device existed, until you delete the account |
| Accounting records — amounts, fees, dates, who paid whom | Seven years from the end of the calendar year in which the booking ended, under the Swedish Bookkeeping Act (bokföringslagen). After that we remove what points to you |
| The organisation’s billing details | Until the administrator changes them; in an invoice’s supporting record, as accounting records, seven years |
| Searches without an account | 90 days |
| Watches (“tell me when something opens up here”) | Until they have been triggered, the time has begun, you have signed out or removed them — at most 30 days |
| Expressions of interest from the pages for associations and companies | One year |
| Technical logs | 30 days |
| Backups of the database | 14 days: that is how far back the database can be restored |
| Backups of the files — the pictures, the cases’ pictures and the log files | 30 days, one copy per night |
| Codes for joining a company, and the verification codes for phone and email | One week after the code has been used or has expired |
| Audit log of support’s actions | 90 days |
What happens when you delete your account
You delete the account yourself in the app. Then your name, previous names, email, phone number, profile picture, sign-ins, vehicles, boats, time zone, listings with their addresses, pictures, chargers, saved cards, watches, push tokens, verification codes, notifications, the support thread, blocks, bank details, your acceptances of the terms, your requests about countries, your memberships in associations and companies, your places in their queues and all free text you have written disappear. Your name becomes “Borttaget konto” (“Deleted account”), also in the notifications the other party has received about you.
The listing’s title is replaced by the type of spot, so that the renter’s receipt still says what was rented. A title that looks like an address is also removed from the notifications the other party has received about you. Spots you have posted for an association or a company belong to the organisation and remain.
If you are a customer with Stripe, we delete you there too. If Stripe does not respond, the account cannot be deleted just then, and you will have to try again later.
If another party has reported you to support, the report remains in their support thread, with your name, the listing’s title and excerpts from your three most recent messages in your thread, so that support can see what happened. That copy is not removed when you delete your account, but when the person who reported you deletes theirs.
If you rent out and have money on its way to you, on your balance with Stripe or on its way to your bank, you cannot delete the account until it has been paid out; the app tells you why. The same applies if you owe something that has fallen due. When the balance is empty, we close your account with Stripe, and if that does not work straight away we try again every hour; the reference to the account is kept only that long. What Stripe itself must keep about the account after it is closed follows their privacy policy.
What you have deleted remains in the backups until they are pruned, at most 30 days (see the table above). We read them only to restore the service after a breakdown.
What remains is the accounting records. The right to erasure does not apply to what must be kept for legal reasons, and for a marketplace that arranges payments that is amounts, fees, dates and who paid whom. That is why those rows are not deleted — they are emptied. What remains is an id and the amounts that point to it, and the id cannot be linked to a human being without information we no longer have.
If you have an ongoing booking or a monthly agreement, it must be ended first.
Your rights
- See and download your data. There is a button in the app that gives you everything we hold about you, in a machine-readable form.
- Correct what is wrong. You change your name, email, phone, vehicles and listings yourself.
- Erase. The button is in the app, and it works as described in the section above.
- Object to processing based on legitimate interest.
- Restrict the processing while an objection is being considered.
Write to dataskydd@antpark.app for anything that cannot be done in the app.
If you think we are handling your data wrongly, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) (imy.se).
Storage in your browser and on your phone
The web app stores:
- Your sign-in in a cookie that only the server can read — not accessible to scripts in the page. The short-lived part of the sign-in exists only in memory and disappears when you close the tab.
- Your choice of language and theme, locally in the browser, so that the app looks the same next time.
- The list of countries and their currencies, the same for everyone and with nothing about you, so that the app can show amounts and countries before the server has answered.
- Where you parked — the point and your own note — if you have chosen to note it down. It is shown while the booking is ongoing and remains until you remove it, park the next time or sign out.
- The three most recent places you searched for, and how long you usually park.
The last two are about you, and they never leave your browser: they are not on any account with us, and they disappear when you sign out or delete the account. If you search without being signed in, the app remembers the most recent places and the duration only in the tab: they disappear when you close it.
The apps for Android and iPhone store on the phone:
- Your sign-in, encrypted with the phone’s own key store (Android Keystore, the keychain on iPhone). It cannot be moved to another phone.
- Your choice of language and theme, and the list of countries and their currencies, as in the browser.
- Your note about where the car is parked, if you have written one, until you remove it, park the next time or sign out. Only the text: the apps store no location.
- The three most recent places you searched for, and how long you usually park.
- The phone’s push address from Google or Apple, if you have turned on notifications, so that it can be removed from our side when you sign out.
- A file you download — your data or a receipt — for a short while in the app’s own storage, while you choose where to save it.
- Pictures you have seen in the app, in the app’s own storage, so that they do not have to be downloaded again, until you sign out.
The note and the places are never sent to us. They disappear when you sign out, as do the files and the pictures. On Android the note and the places are not included in the phone’s backup. On iPhone they may be included in your own backup in iCloud or on your computer.
We use no cookies for marketing or measurement, and that is why there is no cookie banner to click away.
Children
AntPark is not meant for children. You must be 18 to have an account. We do not check age, but we may close an account that belongs to someone younger.
Changes
We may change this policy. A new version gets a new date, and the app asks you to read and accept it before you next book, send a request or publish a listing. We aim to tell you about significant changes in good time before they take effect.
On 26 October 2026 we corrected the policy on the points where it said something other than what the service does: what we see of a saved card, how long drafts, removed listings, notifications and sign-ins are kept, when the accounting records are pruned, what happens to the listing’s title and to a report when an account is deleted, why the deletion waits for money that is on its way, where the email is processed, when a location is stored in a watch, that a published listing is visible also to someone who is not signed in, and the profile picture, the charging and what the apps store on the phone.
On 30 October 2026 we added which roles Stripe, 46elks, Google and Apple have, the basis for an expression of interest, that transfers outside the EU/EEA rely primarily on the standard contractual clauses, that we may become obliged to report the income of those who rent out to the Swedish Tax Agency, and how a new version of the policy reaches you.