Privacy Policy

Transit246 ("we", "us", or "our") operates the transit246.com website and the Transit246 mobile application (the "Service"). This Privacy Policy explains how we collect, use, store, and protect your information when you use our Service.

By using the Service, you consent to the practices described in this policy.

1. Information We Collect

1.1 Account Information

When you create an account using a social login provider (Google, Apple, Facebook, or X/Twitter), we receive and store:

• Your email address
• Your name (if provided by the authentication provider)
• A unique identifier from the authentication provider
• Authentication tokens (stored encrypted)

We do not receive or store your social media passwords.

1.2 Location Data

The Service may request access to your device's location to provide features including:

• Nearby bus stops — Finding stops near your current location
• Route planning — Using your location as a trip origin
• Bus stop reports — Attaching your GPS coordinates when reporting a new or incorrect stop location
• Map centering — Showing your position on the map

Location access is optional. You can deny or revoke location permissions at any time through your device settings. The Service remains usable without location access, though some features will be limited.

On the mobile app, we request "when in use" location access only. We do not track your location in the background. Location data used for nearby stops and route planning is processed in real time and is not stored on our servers. Location data submitted with bus stop reports is stored as part of the report.

1.3 User-Generated Content

When you interact with the Service, we collect:

• Bus stop reports — Report type, GPS coordinates, descriptions, route associations, and direction
• Favorites — Saved bus stops and routes

1.4 Usage Data

We collect basic usage analytics including:

• Pages viewed and features used
• Aggregated page view counts (tracked hourly)

We do not use third-party analytics or tracking services (such as Google Analytics or Facebook Pixel). All analytics are processed internally.

1.5 Data Stored on Your Device (Mobile App)

The mobile app stores certain data locally on your device:

• Secure storage (encrypted) — Authentication tokens
• Local preferences — Saved places (home/work locations), trip history, favorite stops and routes, theme preferences, and onboarding status
• Temporary cache — Route and stop data cached for 15 minutes to improve performance

This locally stored data remains on your device and is not transmitted to our servers unless you explicitly sync (e.g., syncing favorites when signed in).

2. How We Use Your Information

We use collected information to:

• Provide and improve the Service
• Authenticate your identity and manage your account
• Display nearby bus stops and plan routes based on your location
• Process and review bus stop reports
• Sync your favorites across devices
• Track contribution points for approved reports
• Send transactional emails (account confirmation, password resets)
• Monitor Service health and usage patterns (aggregated)
• Manage advertising features for business accounts

We do not sell your personal information. We do not use your data for behavioral advertising or user profiling.

3. Information Sharing

We may share your information only in the following circumstances:

• Authentication providers — We exchange tokens with Google, Apple, Facebook, and X/Twitter to verify your identity during login
• Service providers — We use third-party services for email delivery and mapping/routing. These providers process data only as needed to provide their services
• Legal requirements — We may disclose information if required by law or in response to valid legal processes
• Community contributions — Approved bus stop reports become part of the public transit data. Your email address and personal details are not publicly associated with reports

4. Cookies and Session Data

The website uses the following cookies:

• Session cookies — Essential for the website to function. These maintain your login session and are deleted when you close your browser
• Remember me cookies — Optional persistent cookies that keep you logged in between visits
• CSRF protection cookies — Security cookies that protect against cross-site request forgery

We do not use third-party advertising or tracking cookies.

5. Data Security

We take reasonable measures to protect your information, including:

• Passwords are hashed using bcrypt
• OAuth tokens are stored encrypted
• The mobile app uses encrypted secure storage for authentication tokens
• All data is transmitted over HTTPS/TLS
• WebSocket connections use secure WSS protocol
• API authentication uses bearer tokens

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

• Account data — Retained for as long as your account is active
• Bus stop reports — Retained indefinitely as part of the transit data, even if your account is deleted
• Usage analytics — Aggregated page view data is retained for operational purposes
• Local app data — Remains on your device until you clear the app data or uninstall the app

7. Your Rights

You have the right to:

• Request correction of inaccurate information
• Request deletion of your account and associated data
• Withdraw consent for location access at any time via device settings
• Opt out of non-essential communications

To exercise these rights, contact us at the email address below.

8. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

Material changes will be communicated through the Service or via email where possible.

10. Contact Us

If you have questions or concerns about this Privacy Policy, or wish to exercise your data rights, contact us at:

transit246team@gmail.com