docs/OFFICIAL_APP_PRIVACY.md — readable-by-anyone comparison based on the official
app's manifest + decompiled bundle (v4.4.0): auto-sends GPS to IPS on map open;
bundles Segment/Amplitude/Firebase/Sentry + ad-ID + install-referrer; can send
IMEI; but NO background location. Contrasts with BigBrainParking (explicit-only
location, zero analytics). Confidence levels labeled. Linked from README.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Location privacy (hard invariant): the device GPS is sent to the API ONLY when
the user taps "My location" and searches.
- Map opens on your LAST session's parking lot (the meter's coordinate from
history), not your GPS.
- "Last" -> "Last lot": centers on the last session's lot and searches there
(~couple-mile view) — no GPS.
- "Search this area" falls back to the tracked viewport center, never the GPS fix.
About page: lead with a BigBrainParking open-source blurb + repo link (was showing
ParkSmarter's own About text first); privacy wording updated to match; drop the
now-unused getAbout fetch.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
- docs/PARKSMARTER_API.md: narrative guides (bootstrap/auth, finding parking,
estimates, initiating a transaction, sessions/receipts, account) + per-endpoint
reference + a behaviors/gotchas table (200-on-error, stale-token empty body,
multi-estimate fallback, free windows, flat-rate zones, no free check-in).
- client README: link the guide; promote PastSession/ParkingReceipt to CONFIRMED
(ActiveSession still pending — no active session at capture time).
- Main README: mark "Start a paid session" as working (confirmed live end-to-end).
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
- Session-expiry reminders are purely on-device (AlarmManager); added an Android
notification channel and a "Send a test reminder" button (Account > Notifications)
to verify delivery without a real session
- Strip all FCM/bridge talk from unifiedPush.ts + README; UnifiedPush(ntfy) is now
an optional no-op stub for hypothetical future server-initiated messages only
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Forgejo keeps obtainium:// URLs in markdown links (verified via the render API) but
not as bare autolinks — so use [text](obtainium://…) syntax in INSTALL.md and README.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
- Fix withReleaseSigning: RN template's unconditional debug signingConfig was
overriding the release key. Now uses the release key when BBP_UPLOAD_* is set
(verified: APK signed CN=BigBrainParking), else debug.
- INSTALL.md: dead-simple Obtainium setup (one-tap obtainium:// link + manual
Forgejo-source steps). README links it.
- scripts/publish-release.sh: create a Forgejo release + upload the signed APK.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Reverse-engineered ParkSmarter API client (TypeScript, live-verified) plus a
de-Googled Expo/React Native app for GrapheneOS: MapLibre meter map with GPS,
VisionCamera QR kiosk scanning with save/share, local session-expiry reminders,
UnifiedPush wiring, and Gitea CI to publish signed APKs for Obtainium.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
