Privacy Policy
Last updated: April 2026
1. Information We Collect
We collect information you provide directly, including your name, email address, phone number, and payment information when you create an account or make a purchase.
We automatically collect certain information when you use our app, including location data (when you grant permission), device identifiers, and usage data such as routes viewed and tickets purchased.
2. How We Use Your Information
We use your information to:
- Process fare payments and issue tickets
- Provide real-time transit information based on your location
- Send service alerts and account notifications
- Comply with National Transit Database (NTD) reporting requirements
- Improve our services and detect fraud
- Respond to customer support requests
3. Payment Information
Payment card information is processed by Stripe, a PCI-DSS Level 1 certified payment processor. We do not store full card numbers on our servers. We retain tokenized payment method references to enable future purchases.
4. Location Data
Location access is used solely to show nearby stops and real-time arrivals. We do not sell or share your precise location with third parties. Location data is not retained after your session ends.
5. Data Sharing
We do not sell your personal information. We may share data with:
- Transit agencies to fulfill service obligations
- Payment processors to complete transactions
- Government authorities as required by law or for NTD reporting
- Service providers who assist in operating our platform (under confidentiality agreements)
6. Data Retention
We retain transaction records for a minimum of 7 years to comply with Federal Transit Administration requirements. Personal profile information is retained as long as your account is active.
When you delete your account, we anonymize your personal identifiers immediately while retaining anonymized transaction records for compliance purposes.
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate information
- Delete your account and personal data
- Opt out of marketing communications
- Lodge a complaint with your local data protection authority
8. Account Deletion
You can permanently delete your account at any time from Account → Delete Account in the app. Upon deletion, your name, email, phone number, and login credentials are immediately anonymized. Anonymized transaction history is retained for regulatory compliance. This action cannot be undone.
9. Security
We use industry-standard encryption (TLS 1.2+) for data in transit and AES-256 encryption for sensitive data at rest. We conduct regular security reviews and notify affected users promptly in the event of a data breach.
10. Children's Privacy
Our service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at support@yisraeltech.com.