privacy policy

when you sign up, route's sign-in service (amazon cognito) stores your email address, your username and, if you use email sign-up, a hashed password. if you sign in with apple, google or microsoft, that provider confirms who you are and shares your email address; their own privacy policies apply to that step.

sign-up only accepts .edu email addresses, so route uses your email to confirm you're a student and to send a confirmation code.

your profile: first and last name, username, profile photo, a colour, your driving preferences (conversation style and entertainment) and, if you add it, your instagram handle.

the routes you post: where you're leaving from and going to (as places on the map and the town names), the departure time, seats, price and any note.

your reservations, and the messages you send in chats.

a push notification token for your phone, so route can tell you about new messages and reservations.

this is stored on servers run on amazon web services in the united states, and a copy is kept on your phone so the app works quickly and offline.

other signed-in students can see your profile (name, username, photo, school, driving preferences and instagram handle) and the routes you post. they see your email's school domain, never the full address.

messages are only visible to the people in that chat. reservations are visible to you and the driver.

the developer can access this data to run, fix and secure the service, and to respond to reports or legal requests. it isn't shared with anyone else.

if you allow location access, route uses it on your phone to show where you are on the map and, when you ask, to fill in where you're leaving from. your live location isn't sent to route's servers or shared with other users. only the start and end points of a route you choose to post are.

amazon web services hosts route's accounts, database, photos and realtime messaging.

expo's push notification service delivers notifications to your phone through apple. a notification contains the sender's name and the start of the message, or that someone reserved a seat on your route.

apple maps draws the map and turns map points into town names.

sign in with apple, google and microsoft, if you use them.

route contains no analytics, advertising or tracking code, and doesn't use cookies.

route.gusfl.us is a static website. it sets no cookies and runs no analytics. like any website, the hosting provider (amazon web services) may keep standard request logs.

your account, routes, reservations and messages are kept for as long as your account exists, so your history and chats are there when you come back. they're deleted when your account is.

to delete your account, email route@gusfl.us from the address on your account. your profile, photo, routes, reservations and messages are deleted from route's servers and your sign-in is removed.

deleting the app removes the copy on your phone but doesn't delete your account.

route is for college students and isn't directed to children under 13.

if this policy changes, the new version will be posted on this page with a new date at the top.

questions about this policy: route@gusfl.us