Privacy Policy

1. What we collect

When you create an account, we collect your email address and the dashboard configurations you save (station names and IDs). We do not collect your location, payment information, browsing history, or any other personal data.

2. How we use your data

Your email is used solely to authenticate you and, if you chose magic-link sign-in, to send you a one-time login link. Your dashboard configurations are stored so you can access them across devices. We do not use your data for advertising or share it with third parties.

3. Where data is stored

Account data is stored in a Postgres database hosted by Supabase (supabase.com), with servers located in the United States. If you use the app without an account, your dashboards are stored only in your browser’s local storage and never leave your device.

4. Third-party services

We use the following third-party services to operate this app:

• Supabase — authentication and database hosting
• MTA Real-Time Feeds — live subway and bus arrival data
• OpenStreetMap / Komoot Photon — address and place search
• Vercel — web hosting and edge functions

None of these services receive your personal data beyond what is necessary for their function. Transit data queries do not include any identifying information.

5. Cookies and sessions

If you are signed in, an HttpOnly session cookie is stored in your browser to keep you authenticated. This cookie is not used for tracking. No other cookies are set.

6. Your rights

You may delete your account at any time via Account Settings. Deletion permanently removes your email address and all saved dashboards from our database. You may also simply stop using the service — we do not retain data beyond what is actively stored in your account.

7. Contact

Questions about this policy? Email willacrum@gmail.com.