NTRSCTN, INC. — GLOBAL PRIVACY POLICY

Effective Date: November 10, 2026

Last Updated: November 10, 2026

1. Scope, Data Controller & Dispute Resolution

This Global Privacy Policy governs the collection, processing, storage, and protection of personal data by NTRSCTN,Inc. ("RENDEZ," "we," "us," or "our") through our website (joinrendez.com) and our mobile application (collectively,the "Services").

• Data Controller: NTRSCTN, Inc.

• Jurisdiction: California, United States

• Primary Contact & Data Inquiries: admin@joinrendez.com

• Canadian Privacy Contact: Data Protection Officer, admin@joinrendez.com

Dispute Resolution Notice:

Any disputes, claims, or controversies arising out of or relating to this Privacy Policy, our data handling practices, or your statutory rights shall be governed by and resolved in accordance with the mandatory Dispute Resolution, Binding Arbitration, and Class Action Waiver provisions set forth in our Terms of Use.

Individuals located in the European Economic Area (EEA), the United Kingdom, Switzerland, Canada, Mexico, or the United States may contact our privacy team directly at admin@joinrendez.com regarding any data protection inquiry,access request, or the exercise of statutory privacy rights.

2. The Personal Data We Collect

We collect personal information directly from your interactions, through system telemetry, and via authorized device sensors:

A. Information You Provide Directly

• Identity & Account Information: Username or alias, mobile phone number, date of birth (collected to verify the mandatory 18+ age requirement), postal or zip code (from which general geographic territory and country dialing code are derived), optional email address (which you may voluntarily add or update in your account settings), and customer support correspondence. We do not require or collect your real first or last name, nor do we request an independent country of residence. Login authentication is passwordless and handled exclusively via one-time SMS passcodes (OTP).

• Professional & Educational Data: Job title, employer name, college/university attended, academic major, and professional skills voluntarily added to your profile.

• Interests & Profile Attributes: Profiles feature predefined interest and lifestyle categories (such as About Me,Food & Drink, Entertainment, Fitness & Hobbies, Travel & Places, and Animal Lover). Populating these categories is completely optional; an item is only displayed if you choose to add it. You can edit, replace, or clear your entries within any category at any time directly in your profile settings. When you remove or clear tags from a category,that data is immediately erased from your active profile.

• Sensitive Personal Characteristics (Special Category Data): Users may voluntarily select or create hashtags reflecting sensitive traits, including neurodivergence, disability status, health conditions, or religious beliefs. This information is never required or solicited by RENDEZ and is processed solely based on your explicit consent when you affirmatively choose to add these tags to your profile. You can remove these voluntary tags at any time directly in the App, which erases them immediately from active storage.

• Visual Information (Live In-the-Moment Capture Only — No Biometrics): When you mutually agree to exchange photos with another attendee at an event, the App accesses your device camera solely to capture an immediate, live photo in the moment. RENDEZ never requests, scans, reads, or accesses your device’s photo library, camera roll, or stored albums. Photos cannot be uploaded from your device gallery. We do not extract facial geometry, scan biometric identifiers, or utilize facial recognition technologies on any photos.

• Safety & Moderation Statements: When you report another account for harmful conduct, we collect the written reason and incident statement you submit to investigate violations of our Terms of Use and maintain community safety.

B. Information Collected Automatically

• Precise Geolocation Data: Real-time GPS coordinates (latitude and longitude) collected when you check into a venue or search for nearby events and attendees.

• Venue & Google Places Data: Place identification tokens (place_id, place_name) mapped via the Google Places API to establish venue check-ins.

• Device Telemetry & Security Integrity: Operating system and version, hardware model, screen resolution,network connectivity type (such as LTE or Wi-Fi), IP address, app build version, app-scoped installation identifiers (such as vendor-specific instance IDs or SDK-generated UUIDs used solely for session continuity and diagnostics),and automated security integrity status (including checks to verify whether a device is rooted or jailbroken to safeguard application security). We do not collect persistent hardware serial numbers (UDIDs) or cross-app mobile advertising identifiers (such as IDFA or GAID).

• Usage & In-App Activity: Search queries, check-in timestamps, checkout events, profiles you have viewed,connection requests, and real-time WebSocket connection session states.

3. How We Use Personal Data & Lawful Bases (GDPR & UK GDPR)

We process personal data only when authorized under explicit lawful bases pursuant to GDPR Articles 6 and 9:

• Authentication & Account Provisioning

  • Categories of Data: Mobile phone number, session authentication tokens.

  • Lawful Basis: Performance of a Contract (GDPR Art. 6(1)(b)) — delivering passwordless verification codes via AWS SNS and managing sessions via cryptographic tokens.

• Real-Time Check-In & Nearby Discovery

  • Categories of Data: Decimal GPS coordinates, Google Place IDs, username, profile tags.

  • Lawful Basis: Performance of a Contract (GDPR Art. 6(1)(b)) — displaying venue attendees and calculating physical distance proximity.

• Live Mutual Photo Swaps

  • Categories of Data: Live camera capture, user identifiers.

  • Lawful Basis: Performance of a Contract (GDPR Art. 6(1)(b)) — transmitting image data for private photo exchanges between mutually consenting users.

• Displaying Sensitive Hashtags

  • Categories of Data: Special Category Data (voluntary health, neurodivergence, or religious tags).

  • Lawful Basis: Explicit Consent (GDPR Art. 9(2)(a)).

• Transactional Push Notifications & Direct Messaging

  • Categories of Data: Push notification tokens, sender alias, message delivery timestamps.

  • Lawful Basis: Performance of a Contract (GDPR Art. 6(1)(b)) — delivering real-time alerts for incoming connection requests and private, direct one-to-one (1:1) messages via Firebase Cloud Messaging.

• Event Deep Linking & Content Sharing

  • Categories of Data: Technical referral parameters, click timestamps.

  • Lawful Basis: Performance of a Contract (GDPR Art. 6(1)(b)) and Legitimate Interests (GDPR Art. 6(1)(f)) — routing shared event links via AppsFlyer so users land directly on the shared content upon launch or install.

• App Configuration & Stability

  • Categories of Data: Device model, operating system version, locale.

  • Lawful Basis: Legitimate Interests (GDPR Art. 6(1)(f)) — enforcing application version compatibility and reliability via Firebase Remote Config.

• Product Diagnostics & Optimization

  • Categories of Data: Internal user account IDs, app-scoped installation IDs, device hardware properties, IP-derived city/region, screen views, and button taps.

  • Lawful Basis: Legitimate Interests (GDPR Art. 6(1)(f)) — evaluating feature adoption, stability, and navigation patterns via Mixpanel to maintain platform quality.

• Safety Moderation & Ban Enforcement

  • Categories of Data: Submitted report reasons, user account IDs, and phone numbers of banned accounts.

  • Lawful Basis: Legitimate Interests (GDPR Art. 6(1)(f)) and Vital Interests (GDPR Art. 6(1)(d)) — investigating user reports, enforcing blocklists, and maintaining platform banlists.

• Transactional Email Delivery

  • Categories of Data: Email address (if optionally added in settings), username.

  • Lawful Basis: Performance of a Contract (GDPR Art. 6(1)(b)) — delivering essential administrative notices and support replies via AWS SES.

• Infrastructure Diagnostics & Performance

  • Categories of Data: Error stack traces, hardware model, IP address.

  • Lawful Basis: Legitimate Interests (GDPR Art. 6(1)(f)) — monitoring crash telemetry and application stability via Sentry.

4. Software Development Kits (SDKs), Automated Technologies & Device Permissions

• Web Cookies: Our website (joinrendez.com) utilizes strictly necessary session cookies required for network routing and security. We do not use third-party targeted advertising cookies on our website.

• Mobile SDK Architecture: Our mobile application integrates specific technical service providers:

  • Amazon Web Services (AWS): Hosts our backend compute, relational databases, session caching, encrypted file storage, transactional emails (SES), and SMS OTP delivery (SNS).

  • Google Firebase: Firebase Cloud Messaging (FCM) dispatches transactional connection and chat push alerts.Firebase Remote Config evaluates device operating system and app build versions to deliver required updates.

  • Mapbox & Google Places: Mapbox renders interactive in-app discovery maps. Google Places API resolves venue locations and geocoding.

  • AppsFlyer: Facilitates functional deep linking and event sharing across messaging and social platforms so users are routed directly to specific events. AppsFlyer is not used for cross-app advertising campaigns or advertising tracking.

  • Mixpanel: Evaluates in-app feature usage, user flows, and product diagnostics to improve platform stability.Mixpanel captures diagnostic technical attributes (operating system, device model, screen resolution, app-scoped installation identifier, and coarse city/region derived from IP address) linked to your internal user account identifier. Users can opt out of analytics tracking by enabling device-level restrictions ("Ask App not to Track" on iOS or "Delete Advertising ID" on Android) or by emailing admin@joinrendez.com.

  • Sentry: Captures real-time diagnostic error logs and crash stack traces.

• Device Permissions Requested:

  • Camera (Live Capture Only): Requested solely to capture a real-time photo for mutual photo swaps. The Services do not request, access, or scan your photo library or stored albums.

  • Precise Geolocation: Requested to detect venue check-ins and show nearby users who share common interests.

  • Push Notifications: Requested to deliver real-time alerts for incoming connection requests and direct messages.

5. How We Share & Disclose Personal Data

We do not sell personal data for monetary payment. Disclosures are limited to:

• Other RENDEZ Attendees (Context-Gated 1:1 Visibility Only):

  RENDEZ does not operate a public feed, searchable member directory, open discussion forum, or group chat system. Member visibility and messaging are strictly gated behind reciprocal context:

  • Event Interest Gate: You can discover and message other attendees marked as "interested" in an event only if you have also affirmatively marked yourself as "interested" in that same event.

  • Live Venue Check-In Gate: You can discover and view profiles of attendees checked into a physical venue only while you are actively checked into that exact same location.

  • Mutual Network Gate: Outside of live check-ins or mutual event interest, profiles and messaging are accessible solely between users who have established a mutual connection in their network.

  • No Group Messaging: All communications across the Services are strictly private, direct one-to-one (1:1) transmissions between two individual users. We do not support group chats, multi-party messaging rooms,public walls, or broadcast channels.

• Service Providers (Data Processors): Contracted enterprise vendors operating under GDPR Article 28 Data Processing Agreements (including AWS, Google Cloud, Mapbox, Sentry, AppsFlyer, and Mixpanel).

• Corporate Transactions: If NTRSCTN, Inc. enters into a merger, asset acquisition, corporate financing, or reorganization, user data may be transferred to the acquiring entity subject to this Privacy Policy.

• Safety & Legal Enforcement: We disclose data to law enforcement or judicial authorities when required by binding legal process, or when necessary to protect personal safety, prevent real-world harm, or defend legal claims.

6. Aggregated Insights & Commercial Brand Reporting

We generate aggregated, de-identified audience insights for event venues, brand partners, and researchers (such as overall event turnout metrics or interest trends around voluntary brand hashtags):

• Privacy Suppression Thresholds: Demographic or interest breakdowns are suppressed using industry-standard minimum group thresholds (k-anonymity) to prevent individual re-identification.

• Strict Category Exclusions: Voluntary sensitive hashtags (disability, health, neurodivergence, religion),usernames, phone numbers, and photos are strictly excluded from partner reports.

• Dissociated Data Standard: Reporting metrics utilize dissociated statistical aggregates that cannot be linked back to individual users.

• Contractual Safeguards: Recipients of aggregate data are contractually and legally prohibited from attempting to re-identify any individual.

7. Mobile Messaging Compliance (AWS SNS & Global Carrier Terms)

MOBILE MESSAGING COMPLIANCE:

By providing your mobile phone number and opting in through the RENDEZ application, you consent to receive transactional SMS messages for account verification and login authentication purposes. These messages are sent only when requested by you. NTRSCTN, Inc. will not share, sell, or rent your mobile phone number or SMS opt-in consent data with any third parties or affiliates for marketing or promotional purposes. Your phone number is used solely for authentication, account security, and service-related communications.

These providers are contractually bound to use your data only to perform services on our behalf.

SMS Terms:

Message frequency varies based on your login activity. Message and data rates may apply. You may opt out of receiving SMS messages at any time by replying STOP, which will prevent you from logging into the app. For assistance, reply HELP or contact admin@joinrendez.com.

8. International Cross-Border Data Transfers

RENDEZ is operated by NTRSCTN, Inc. in the United States. If you access our Services from the European Economic Area (EEA), the United Kingdom, Switzerland, Canada, or Mexico, your personal data will be transferred to, stored, and processed on AWS infrastructure located within the United States.

We safeguard cross-border transfers through the following mechanisms:

• Direct Service Delivery (GDPR Art. 49(1)(b)): When you register an account and check into events from outside the United States, your data is transferred to our US servers because it is strictly necessary to perform our contract with you and deliver the requested Services.

• Enterprise Sub-Processor Agreements: Where we transfer personal data to our third-party infrastructure and service providers (including AWS and Google), those providers are bound by Data Processing Addenda incorporating the European Commission’s Standard Contractual Clauses (SCCs) (Implementing Decision (EU) 2021/914), the UK International Data Transfer Addendum, and their respective active certifications under the EU-U.S. Data Privacy Framework (DPF) where applicable.

• Technical Safeguards: All external communications across public networks are encrypted in transit using TLS 1.2 or higher, and persistent storage on AWS is encrypted at rest using AES-256 encryption.

9. Data Retention, Ephemeral Lifecycles & Account Erasure

A. Ephemeral Check-In Presence vs. Archived Records

• Active Check-In Presence: When you check in at a venue or event, your active presence is discoverable by other attendees. To protect user privacy, active check-in presence automatically expires on a periodic rolling cycle (typically after approximately eight (8) hours), checking you out if you have not manually done so.

• Archived Records: Past check-in records (venue IDs and timestamps) are retained in our secure database for the life of your account solely for internal platform analytics, system reporting, and aggregated venue turnout statistics. We do not provide a public or user-facing historical timeline of past check-ins. Archived check-in records are permanently purged upon account deletion.

B. Mutual Photo-Swap Storage

Mutual photo-swap images are stored in private, access-restricted cloud storage buckets accessible only to the two participating accounts. Photo-swap images remain securely stored for the duration of the active exchange and are permanently purged upon account deletion.

C. Voluntary Account Deletion (Hard Delete)

You can delete your account at any time directly within the App settings. When you initiate account deletion:

1. Your personal data (username, phone number, optional email address, coordinates, active profile tags, photos, and active check-ins) is permanently and promptly deleted from our active production databases and caches.

2. This process is irreversible; previous profile data and account history cannot be restored or reactivated. However,unless an account was banned for conduct violations, you are welcome to register a new account at any time using your mobile phone number.

3. Encrypted disaster-recovery backups are routinely overwritten and purged on a rolling cycle (generally within approximately thirty (30) days).

D. Administrative Safety Retention (Soft Delete / Anti-Recidivism)

To protect community safety and prevent harassment:

1. When an account is banned by administrators for violating our Terms of Use or safety guidelines, the record is flagged in a soft-deleted state, isolating it from all public app functionality.

2. The associated mobile phone number is retained in our secure database unique index to enforce our banlist and prevent the banned individual from re-registering or creating new accounts with that phone number.

3. Safety incident reports submitted by users are retained for up to two (2) years under our legitimate interests to preserve evidence in the event of legal disputes, regulatory inquiries, or law enforcement investigations.

10. Technical & Organizational Security Measures (TOMs)

We maintain rigorous technical and organizational measures compliant with GDPR Article 32:

• Network Isolation: All backend API servers, database instances, and caching layers operate inside private,logically isolated cloud networks protected by firewalls, access control lists, and restricted subnets. Public direct access to core database and cache instances is blocked.

• Cryptographic Controls: External communications across public endpoints are encrypted in transit using TLS 1.2 or higher. Persistent data at rest is encrypted using 256-bit AES encryption.

• Session Management: Sessions are secured via cryptographic authentication tokens using signature verification and automated expiration.

• Automated Redundancy: Encrypted database backups are executed daily, stored in private cloud storage, and rotated via automated retention rules.

11. Third-Party Services & External Links

The Services contain links to external third-party websites, including event organizers, ticketing services, and venue websites. When you tap an external link, you leave the RENDEZ app, and the destination page loads inside your device’s default web browser (such as Safari or Chrome).

RENDEZ does not operate, control, or monitor external websites, nor do we track your activity once you leave the app.Any interactions, purchases, or data you submit on external sites are governed strictly by the third party's independent privacy policy.

12. Regional Statutory Disclosures & User Rights

12.1 European Economic Area (EEA), UK & Switzerland

Residents of the EEA and UK hold statutory rights under the GDPR / UK GDPR:

• Right of Access (Art. 15): Request a copy of the personal data we maintain about you. Pursuant to Art. 15(4),reports submitted by other users will be redacted to protect third-party safety and rights.

• Right to Rectification (Art. 16): Update or correct inaccurate information directly in the App or via support.

• Right to Erasure (Art. 17): Request permanent erasure of personal data ("Right to be Forgotten").

• Right to Restriction (Art. 18): Restrict processing while a data dispute is resolved.

• Right to Data Portability (Art. 20): Obtain your personal data in a structured, machine-readable format (JSON).

• Right to Object (Art. 21): Object to processing based on Legitimate Interests.

• Right to Withdraw Consent: Where processing relies on consent (such as voluntary sensitive hashtags), you may withdraw consent at any time by simply deleting those items from your profile.

• Transparency of Ranking (EU DSA): Attendee discovery lists are ranked based on objective, deterministic criteria,primarily prioritizing the highest count of shared profile interest tags between attendees. We do not use predictive behavioral profiling or opaque machine-learning scoring algorithms to rank attendees.

• Right to Lodge a Complaint: You may lodge a complaint with your local Data Protection Authority (such as CNIL in France, BfDI in Germany, or the ICO in the UK).

12.2 United States (CCPA/CPRA, State Privacy Laws, CalOPPA & Health Privacy)

• Categories Collected & Disclosed: Over the past 12 months, we have collected and disclosed the following statutory categories for operational business purposes: Identifiers (username, mobile phone number, IP address,app-scoped installation identifier, internal account ID, and optional email address; we do not collect persistent hardware serial numbers or mobile advertising identifiers); Protected Characteristics (voluntary hashtags, age); Geolocation Data (precise decimal coordinates); Sensory Data (live-captured photo-swap images — no biometric geometry); and Inferences (de-identified hashtag affinities).

• Sale & Sharing of Data: We do not sell personal information for monetary compensation, nor do we sell or share personal information with third parties for cross-context behavioral advertising. Our integration with AppsFlyer is restricted to functional deep linking for event sharing.

• Global Privacy Control (GPC) & Do Not Track (DNT): Because NTRSCTN, Inc. does not sell personal information or share personal data with third parties for cross-context behavioral advertising, our website does not participate in commercial data transfers that would be restricted by browser-based Global Privacy Control (GPC) signals or Do Not Track (DNT) headers. If we implement third-party advertising trackers in the future, we will update our website technologies to recognize and honor universal opt-out signals in compliance with applicable law.

• Limit Use of Sensitive Information: We collect precise geolocation and voluntary sensitive hashtags. You have the right to limit the use of sensitive personal information by controlling location permissions in your device settings or by deleting voluntary hashtags directly from your profile.

• Consumer Health Data Disclosures (Washington MHMDA / Nevada SB 370): RENDEZ does not collect health records. However, users may voluntarily select hashtags reflecting dietary restrictions, health conditions, or neurodivergence. By selecting these voluntary tags, you provide express affirmative consent to their display on your profile. You can delete these tags at any time directly in the App.

• Appeals Process: Residents of states with omnibus privacy laws (including Colorado, Connecticut, Virginia, Texas,and Oregon) may appeal a denial of a privacy request by emailing admin@joinrendez.com with the subject "Privacy Request Appeal." Unresolved appeals may be submitted to your State Attorney General.

• Authorized Agents: You may designate an authorized agent to submit privacy requests on your behalf, subject to identity verification and written proof of authorization.

12.3 Canada (PIPEDA & Quebec Law 25)

• Privacy Officer Accountability: Canadian inquiries may be directed to our designated Privacy Officer at admin@joinrendez.com.

• Quebec Default Privacy Safeguards (Law 25): In compliance with Quebec Law 25 (and enforced globally across our entire platform for all users), precise geolocation is disabled by default. RENDEZ never accesses your location until you affirmatively and explicitly grant location permissions through your device operating system settings. You can revoke this permission at any time directly in your device settings.

• Cross-Border Processing Notice: Your personal data is hosted on AWS servers located within the United States and may be accessible to US judicial or regulatory authorities pursuant to lawful orders.

• Regulatory Recourse: You may contact the Office of the Privacy Commissioner of Canada (OPC) or the Commission d'accès à l'information du Québec (CAI).

12.4 Mexico Privacy Notice Addendum (Aviso de Privacidad — LFPDPPP)

Under the Ley Federal de Protección de Datos Personales en Posesión de los Particulares:

• Primary Purposes (Finalidades Primarias): Necessary to deliver the Services: SMS OTP identity authentication,user check-ins, nearby discovery matching, private photo swaps, platform security, and community safety moderation.

• Secondary Purposes (Finalidades Secundarias): NTRSCTN, Inc. does not process personal data for secondary,marketing, commercial prospecting, or advertising purposes. Aggregated venue turnout metrics utilize dissociated (anonymized) data that cannot identify you. If you wish to cease all data processing, you may delete your account at any time within the App, which permanently cancels and erases your personal data.

• ARCO Rights (Derechos ARCO): You have the statutory right to Access (Acceso), Rectify (Rectificación), Cancel (Cancelación), or Oppose (Oposición) data processing. Submit requests to admin@joinrendez.com with your username, phone number, identification copy, and specific ARCO request. Determinations will be issued within twenty (20) business days of receipt, and executed within fifteen (15) business days thereafter.

• INAI Oversight: You may submit enforcement complaints to the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI).

13. Children’s Privacy

The Services are strictly intended for individuals aged eighteen (18) and older. We enforce date of birth verification during onboarding. We do not knowingly solicit or collect data from minors. Any account identified as belonging to an individual under eighteen (18) will be permanently deleted immediately.

14. Changes to This Global Privacy Policy

We reserve the right to update or modify this Global Privacy Policy at any time to reflect operational, legal, or regulatory changes.

When changes are made, we will update the "Last Updated" date at the top of this page. If we make material changes to how we collect, process, or disclose personal data, we will provide prominent notice through the App (such as an in-app notice, push alert, or email notification where provided) prior to the effective date of the changes. Your continued use of our Services after the effective date of any modification constitutes your affirmative acknowledgment of the updated policy.

15. Contact Us, Alternative Formats & Data Inquiries

If you have questions, comments, or statutory rights requests regarding this Privacy Policy or our data protection practices, or if you require access to this policy in an alternative format pursuant to the Americans with Disabilities Act or applicable state laws, please contact our data protection team electronically at:

• Email: admin@joinrendez.com (Subject: "Privacy & Data Protection Inquiry")

• Corporate Inquiries: NTRSCTN, Inc., Attention: Privacy & Legal Operations, California, United States.

We respond to all verified consumer and data subject requests within statutory timeframes applicable to your jurisdiction.