Introduction END 2 END ("the App", "we", "our", or "us") is a smart parking assistant designed to help drivers in the Boston metropolitan area find available parking quickly and efficiently. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights regarding that information. By downloading or using END 2 END, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the App.

Information We Collect 2.1 Location Data Location is the core function of END 2 END. We collect your device's GPS coordinates in order to: • Show nearby parking spots relative to your current position • Calculate real-time distance and estimated travel time to each parking location • Display traffic conditions along routes to parking spots • Provide accurate, location-relevant event warnings (e.g., nearby concerts or sporting events that may affect parking availability) Location data is used in real time and is not stored on our servers beyond what is necessary to fulfill the immediate request. We do not build a history of your location or track your movements over time.

2.2 Account Information When you create an account, we collect: • Your email address • Your display name or username • Profile photo (optional) • Authentication tokens (if signing in with Apple, Google, or Facebook) We use Supabase as our authentication and database provider. Your account information is stored securely and is used solely to identify you within the App, manage your session, and enable community features.

2.3 Community Feed Contributions END 2 END includes a crowdsourced community feed where users can submit parking alerts, tips, and updates. When you post to the community feed, we collect: • The text content of your post • Any photos you choose to attach • Your approximate location at the time of the post (to associate the alert with the correct area) • Your username and the timestamp of your submission Community posts are visible to all users of the App. Do not include sensitive personal information in community posts. Photos are stored securely using Vercel Blob storage.

2.4 Voice Assistant Input END 2 END includes an optional voice assistant feature. When you use this feature: • Your voice input is recorded and sent to OpenAI's Whisper API for transcription • The transcribed text is then processed by an AI assistant (powered by Anthropic's Claude) to generate a helpful response Voice recordings are transmitted securely and are not stored by END 2 END after transcription is complete. Processing is governed by OpenAI's and Anthropic's respective privacy policies. We do not use voice data to build user profiles or for advertising purposes.

2.5 Device and Usage Data We may collect limited technical information to maintain app performance and diagnose issues, including: • Device type and operating system version • App version • Crash reports and error logs • General usage patterns (e.g., which features are used most frequently) This data is anonymized and aggregated where possible and is used strictly for improving the App.

2.6 Push Notification Tokens If you grant permission for push notifications, we collect your device's push notification token in order to send you relevant alerts, such as parking availability updates or important event warnings near your location. You can revoke notification permissions at any time through your device settings.

How We Use Your Information We use the information we collect for the following purposes: • To provide core parking search and navigation functionality • To calculate real-time distances, traffic scores, and estimated travel times • To warn you of events that may impact parking availability in your target area • To power the community feed and display crowdsourced parking alerts • To operate the voice assistant and respond to spoken queries • To authenticate your identity and maintain your account session • To send push notifications relevant to your location or saved spots • To improve App performance, fix bugs, and develop new features • To comply with legal obligations We do not use your data for advertising. We do not sell your personal information to third parties. We do not use your data to build advertising profiles.

Third-Party Services END 2 END integrates with the following third-party services to deliver its features. Each service operates under its own privacy policy:

4.1 Google APIs We use Google Maps and Google Distance Matrix APIs to display maps, calculate distances, and estimate travel times based on real-time traffic conditions. Google may collect certain data as part of these services. Please refer to Google's Privacy Policy at https://policies.google.com/privacy.

4.2 Supabase Supabase provides our authentication system and community feed database. Your account credentials and community posts are stored on Supabase's infrastructure. Please refer to Supabase's Privacy Policy at https://supabase.com/privacy.

4.3 OpenAI (Whisper) Voice input is transcribed using OpenAI's Whisper API. Audio data is transmitted securely to OpenAI for processing. Please refer to OpenAI's Privacy Policy at https://openai.com/privacy.

4.4 Anthropic (Claude) The voice assistant's text responses are generated by Anthropic's Claude AI. Transcribed text queries are sent to Anthropic's API for processing. Please refer to Anthropic's Privacy Policy at https://www.anthropic.com/privacy.

4.5 Ticketmaster We use the Ticketmaster API to retrieve information about upcoming events near your location that may affect parking availability. We share only your approximate location coordinates with this service and do not share personally identifiable information.

4.6 Upstash Redis We use Upstash Redis to temporarily cache traffic and event data in order to reduce redundant API calls and improve App performance. This cache stores aggregated, non-personal data and expires automatically.

4.7 Vercel Our backend API and photo storage run on Vercel's infrastructure. Community feed photos are stored using Vercel Blob. Please refer to Vercel's Privacy Policy at https://vercel.com/legal/privacy-policy.

4.8 Expo & Apple Push Notification Service (APNs) Push notifications are delivered through Expo's notification infrastructure and Apple's APNs. Your device push token is used solely to deliver notifications you have opted into.

Data Retention We retain your data only as long as necessary to provide the App's services: • Account information is retained for as long as your account is active. You may request deletion at any time. • Community posts may be hidden automatically based on community feedback. Posts are retained in our database unless you request permanent deletion by contacting us at the email address in Section 9. • Voice recordings are not retained after transcription is complete. • Location data used for real-time requests is not stored after the request is fulfilled. • Cached traffic and event data expires automatically within 1 to 6 hours. • Crash logs and usage analytics may be retained for up to 12 months for diagnostic purposes.

Your Rights Depending on your location, you may have the following rights regarding your personal data: • Access: You may request a copy of the personal data we hold about you. • Correction: You may request that we correct inaccurate or incomplete data. • Deletion: You may request that we delete your account and associated personal data. • Withdrawal of Consent: You may revoke location or notification permissions at any time through your device settings. Note that revoking location permission will significantly limit the App's functionality. • Data Portability: You may request your data in a portable format where technically feasible. To exercise any of these rights, please contact us at the email address listed in Section 9.

Children's Privacy END 2 END is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately and we will take steps to delete such information.

Security We take the security of your personal data seriously. We implement industry-standard measures to protect your information, including: • Encrypted data transmission using HTTPS/TLS • Secure authentication via Supabase with Row Level Security (RLS) policies • API key restrictions and quota limits to prevent unauthorized access • Access controls limiting who can access user data However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Contact Us If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

END 2 END Email: end2end.app.contact@gmail.com Instagram / TikTok: @end2end_e2e

Changes to This Privacy Policy We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make changes, we will update the "Last Updated" date at the top of this policy. We encourage you to review this policy periodically. Your continued use of the App after any changes constitutes your acceptance of the updated policy.
END 2 END | Privacy Policy | Effective May 1, 2026