Privacy Policy

Account information. When you create or update your account, we collect your name, email address, phone number, and profile photo (if provided).

Identity verification information. To enable Host cashouts, we collect the information needed to verify your identity, which is processed by our third-party provider, Stripe Identity. This may include a government-issued identification document and a live selfie for comparison. 2UPark does not store the raw images of your identification documents or biometric comparison data — these are retained by Stripe Identity, and 2UPark receives only a verification status (verified, pending, or failed).

Payment and payout information. We collect the payment method information necessary to process purchases, which is transmitted directly to and stored by Stripe; 2UPark does not store full card numbers on its own servers. For Host cashouts, we collect the payout destination you provide, such as a linked bank account (via Stripe Connect), PayPal email, or Venmo handle.

Vehicle information. If you add a vehicle to your account, we collect its make, model, color, and license plate, which may be shown to your counterpart during an active handoff.

Report and dispute content. If you file a report about a handoff, we collect the category you select and any description you provide.

Customer support communications. If you contact us for support, we collect the content of that communication and any information you provide to resolve your inquiry.

Location data. Because 2UPark's core function involves coordinating a physical handoff, we collect precise GPS location at several distinct points, including: when you create a Broadcast; when you claim a Broadcast; periodically while a handoff is active, to enable live location sharing with your counterpart; when a Driver marks arrival at a spot; and when a Driver releases a spot at the end of a handoff, to calculate a fair pull-out window. A Host's precise location is stored separately from the approximate location shown to nearby Drivers before a spot is claimed, and is only revealed to the Host themselves or to a Driver who has claimed that spot.

General location, while the app is open. Separately from handoff-specific location above, 2UPark also uses your current, general location while the app is open (not in the background) to show nearby demand and improve pricing accuracy for other users in your area. This is distinct from, and does not require, an active Broadcast or handoff.

Device and usage data. We collect information about the device you use to access 2UPark, including device model, operating system and version, unique device or advertising identifiers, IP address, and general usage data such as which screens you view and how you interact with the app.

Push notification tokens. If you enable push notifications, we collect the token needed to deliver them.

Server and diagnostic logs. We collect logs generated by our servers and application, including error and crash reports, which help us identify and fix problems.

Automated decision records. When a report is resolved using the automated or AI-assisted systems described in Section 4, we generate and retain a record of the outcome and the reasoning behind it, associated with the claim and the accounts involved.

Location-integrity signals. To help detect GPS spoofing or location falsification (prohibited under our Terms of Service), we analyze whether reported locations are physically plausible given elapsed time, and whether a device is reporting location through your operating system's mock-location developer setting. We may also retain a limited, de-identified record of certain device or network signals (such as an IP address or device identifier) independent of your account, specifically to detect abuse patterns that might otherwise evade detection by creating a new account.

We may receive information from: Google Sign-In and Apple Sign-In, if you use these to create or access your account (basic profile information such as name and email, and, for Apple Sign-In, a token we use solely to allow you to revoke 2UPark's access to your Apple ID if you delete your account); Stripe, regarding the status of a payment, payout, or identity verification; Mapbox, in the form of traffic and routing data associated with the coordinates 2UPark sends it in connection with your use of the Services; and Sentry, in the form of crash and error reports generated by the application.

When you broadcast or browse spots, 2UPark calculates suggested pricing using factors including your location, current demand in the area, and time of day. When a Driver sets a future arrival time, 2UPark uses live traffic data from Mapbox to estimate whether a given spot is realistically reachable in time, and may filter out or visually de-emphasize spots it determines are not, based on that estimate. When a Driver releases a spot at the end of a handoff, 2UPark calculates a pull-out window using live traffic conditions in the immediate vicinity of that spot.

If a report is filed during a handoff, 2UPark may resolve it using an automated fault-determination system that applies a consistent policy based on the reason selected, which party filed the report, and objective data associated with the handoff, such as GPS and timestamp records, including the location-integrity signals described in Section 2.2.

Where the system described in Section 4.2 cannot confidently determine an outcome, 2UPark may use an artificial intelligence system, provided by Anthropic, to review the available evidence and determine a resolution, including the amount, if any, refunded or paid to each party. The evidence reviewed may include the description provided by the reporting party, GPS and timestamp data from the handoff, and both parties' rating and report history. 2UPark does not send payment card numbers or identity verification documents to this system. AI-assisted decisions under this section can result in funds moving without a 2UPark employee reviewing that specific decision before it takes effect. 2UPark retains a written record of the reasoning behind each such decision and periodically reviews these records for quality and consistency. If you have questions about a decision affecting your account, contact us using the information in Section 12.

2UPark monitors account-level patterns, including how frequently an account files reports, how frequently reports are filed against an account, rating and handoff history, and the location-integrity signals described in Section 2.2, to detect potential abuse of the reporting system and to protect users from repeat problematic conduct. Depending on these patterns, an account's future disputes may be automatically routed to closer review, or the account may be temporarily restricted from broadcasting or claiming spots, as described in our Terms of Service.

The systems described in this section are periodically reviewed by 2UPark personnel for accuracy and fairness, and can be adjusted or disabled by 2UPark at any time. If you believe an automated or AI-assisted decision affecting your account was made in error, you may contact us using the information in Section 12 to request that it be reviewed.

During an active handoff, your display name, rating, vehicle information (if provided), and real-time location are shared with your counterpart for the duration of that handoff only. If you file a report, information relevant to the report — such as GPS and timestamp records, and, where necessary to resolve the dispute, a summary of your description — may be shared with the other party to that handoff.

We share information with the following categories of service providers, each of which is authorized to use your information only as necessary to provide services to 2UPark:

• Stripe — payment processing, payouts, and identity verification.
• Supabase — database hosting and account authentication.
• Google — mapping and Google Sign-In.
• Apple — Apple Sign-In and app distribution.
• Mapbox — routing, traffic, and navigation data.
• Anthropic — the AI-assisted dispute review described in Section 4.3.
• Sentry — error and crash monitoring.
• Resend — transactional email delivery.
• Push notification providers (Apple and Google) — delivery of push notifications.

We may disclose information: where required by law, subpoena, or other legal process; to protect the rights, property, or safety of 2UPark, our users, or the public; to investigate suspected fraud, security incidents, or violations of our Terms of Service; to payment processors or card networks in connection with a chargeback; and to law enforcement in connection with a report of a crime or emergency, including information reasonably necessary to identify the parties to a specific handoff.

If 2UPark is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will notify you, through the app or by other reasonable means, of any such change in ownership or control of your personal information, and of any choices you may have regarding it.

We may share your information for any other purpose disclosed to you at the time of collection, or with your consent.

We do not sell, rent, or trade your personal information to third parties for their own independent marketing purposes.

You can access and update most of your account information — including your name, phone number, email, profile photo, and vehicle information — directly in the app. You may request a copy of your personal data by contacting us using the information in Section 12.

You may request deletion of your account and associated data at any time through the app, subject to the retention practices described in Section 8. If you use 2UPark on Android, you may also request deletion through a web-based form at 2upark.com/delete-account, without needing the app installed.

You may opt out of promotional communications at any time through your notification settings in the app or by following the unsubscribe instructions in the communication itself. You cannot opt out of transactional communications, such as one-time sign-in codes, receipts, and safety-related notices, while continuing to use the Services.

You can control location, camera, and notification permissions through your device's operating system settings. Declining certain permissions may limit your ability to use features that depend on them, such as broadcasting or claiming a spot.

As described in Section 4, you may contact us to ask about or request review of an automated or AI-assisted decision affecting your account.

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we have collected about you, to request deletion, and to non-discrimination for exercising these rights. Residents of other states with comprehensive privacy laws may have similar rights under those states' laws. You may exercise these rights using the contact information in Section 12.