Privacy Policy

Effective Date: October 2, 2026

Route On Time ("we", "us", "our", or the "Company") operates the Route On Time mobile application for iPhone (the "App") and the website https://routeontime.com (the "Website"). This Privacy Policy explains what information we collect, how we use and share it, how long we keep it, and how you can delete it. We aim to collect only what the App needs to work.

Data Controller: Route On Time is the data controller responsible for your personal data. If you have questions about this policy or our data practices, contact us at hello@routeontime.com.

By downloading, installing, accessing, or using the App or Website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the App or Website.

1. Information We Collect

We collect the information you give us, information created when you use the App's features, and limited technical information needed to run the service.

1.1 Account Information

You need an account to use the App. Depending on how you sign up, we receive:

• Email and password: Your name, email address, and a password. Passwords are handled by Firebase Authentication; we never see or store your password in readable form. We send account emails such as email verification and password reset messages.
• Sign in with Apple: Your name (Apple shares it only the first time you sign in) and an email address. If you choose Apple's "Hide My Email" option, we receive a private relay address (ending in @privaterelay.appleid.com) instead of your real email. Messages we send to that address are forwarded to you by Apple, and we treat the relay address as your account email.
• Google Sign-In: Your name, email address, and Google profile picture link, as shared by Google when you choose to sign in with Google.
• Account identifier: A unique user ID assigned to your account.

1.2 Profile Photo (Optional)

If you add a profile picture, you choose a single photo from your photo library. We receive only the photo you pick, not the rest of your library. The photo is resized and stored with our cloud storage provider so it can appear in your profile. You can change it at any time.

1.3 Location

The App asks for "While Using the App" location permission. It never requests or uses location in the background, and it does not track your movements.

• When it's used: While you're planning a trip or editing saved places, the App uses your device's precise location to offer "Current location" as a starting point and to show place search results near you.
• Where it goes: Your coordinates are sent to our mapping provider, Mapbox, to return nearby search results and calculate travel times.
• When it's stored: Your current location is stored on our servers only if you save a trip that starts from it, as that trip's starting point.
• Your control: Location is optional. If you don't allow it, you can still type in any address. You can change this at any time in the iOS Settings app under Route On Time → Location.

1.4 Trips, Saved Places and Activity

To provide the App's features, we store the content you create and the activity it generates:

• Trips: Trip names, start and destination places (names, addresses and coordinates), schedules, recurring-trip settings, route preferences (such as avoiding tolls or highways), and Smart Leave and departure countdown settings.
• Saved places: Home, work and other saved locations you choose to add.
• Trip history and stats: Planned and actual leave and arrival times, trip durations, and whether you left or arrived on time.
• Progress: XP, levels, badges, streaks, and a history of XP you've earned.
• Insights: Reliability scores, time savings and environmental impact estimates calculated from your trip history. Some of this is calculated and cached on your device.
• App preferences: Settings such as dark mode and notification preferences, stored on your device.

1.5 Place Searches

When you search for a place, the text you type is sent to Mapbox to return suggestions. We don't keep a log of your searches; only the places you save in a trip or as a saved location are stored.

1.6 Purchases and Subscription Information

If you subscribe to Route On Time Pro:

• Payment processing: Apple processes all payments through the App Store. We never receive or store your payment card details.
• Subscription data: Our subscription provider, RevenueCat, receives your account user ID and your App Store purchase information (such as the plan purchased, purchase and renewal dates, and subscription status) so the App can unlock Pro features and restore your purchases.

1.7 Calendar

The App asks for calendar access only when you tap "Add to Calendar" on a trip. It then creates one event in your default calendar containing the trip name, start and destination place names, time, and estimated duration. The App does not read your existing events or reminders, and nothing from your calendar is sent to us. You can turn off calendar access at any time in the iOS Settings app.

1.8 Notifications

If you allow notifications, departure alerts (including Smart Leave alerts and departure countdown reminders) are scheduled locally on your device. When you allow notifications, the App also obtains a push notification token from Apple through Expo's notification service. We do not currently store that token on our servers, and we don't use notifications for marketing. You can turn notifications off in the App's Settings or in the iOS Settings app.

1.9 Trip Sharing

• Trip links: When you share a trip link, anyone signed in to Route On Time who opens that link can view that trip's details (name, start and destination places, and schedule) and add a copy to their own account. Their copy records which trip it came from and who created it, and you may earn XP when others add your trip. Only share trip links with people you trust.
• ETA sharing: The "Share ETA" feature creates a message containing only the trip name and your estimated arrival time (no addresses or coordinates). It is sent through the iOS share sheet to the app and people you choose.
• Other apps: Content you share through other apps (such as messaging apps) is handled under those apps' privacy policies.

1.10 Technical Information and Identifiers

When the App connects to our service providers, they automatically receive standard technical information such as your IP address, device model, operating system version, app version, and identifiers (your account user ID and identifiers generated by the Firebase and RevenueCat software in the App). We use this to operate, secure and troubleshoot the service. The App does not include advertising or third-party analytics SDKs and does not access your device's advertising identifier (IDFA).

1.11 Support Communications

If you email us, we receive your email address and anything you include in your message, and we use it to respond to you.

2. How We Use Your Information

We use the information above only to:

• Provide the App: Create and secure your account, save your trips and places, calculate leave times and travel time estimates, and schedule departure alerts
• Show your insights and progress: Calculate reliability, time savings and environmental impact estimates, and award XP, badges, streaks and levels
• Manage subscriptions: Unlock Pro features, restore purchases, and help with billing questions
• Communicate with you: Send account emails (such as verification and password reset), departure alerts you've turned on, and replies to your support requests
• Keep the service safe and working: Prevent abuse and fraud, troubleshoot problems, and fix bugs
• Comply with the law: Meet legal obligations and enforce our Terms of Service

We do not send marketing emails, and we do not use your information for advertising.

3. Legal Bases for Processing (EEA, UK and Switzerland)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data based on the following legal grounds:

• Contract: Processing necessary to provide the App and the features you request, including your subscription
• Consent: Access to your location, photos, calendar and notifications, which you grant through iOS permission prompts and can withdraw at any time in the iOS Settings app
• Legitimate interests: Keeping the service secure, preventing abuse, and fixing problems, where those interests are not overridden by your rights
• Legal obligation: Processing necessary to comply with the law, such as keeping transaction records

4. No Tracking, No Ads, No Sale of Data

• We do not track you across apps or websites owned by other companies, and we do not share your data with data brokers.
• The App contains no advertising and no advertising SDKs.
• We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

5. How We Share Your Information

We share personal information only as described below.

5.1 Service Providers

We use the following providers to run the App. They process data on our behalf and only for the purposes described:

• Google Firebase (Google LLC): Firebase Authentication (accounts and account emails), Cloud Firestore (your profile, trips, saved places, stats and progress), and Cloud Storage for Firebase (profile photos)
• Mapbox: Maps, place search, and traffic-aware travel times. Mapbox receives your search text, the coordinates of your trip start and destination, and your current location when you use it for nearby results. The Mapbox map component in the App may also send Mapbox limited technical and usage information, as described in Mapbox's privacy policy.
• RevenueCat: Subscription management and in-app purchase validation
• Apple: Sign in with Apple, App Store payments, and delivery of notifications
• Google Sign-In (Google LLC): Sign-in, if you choose to sign in with Google
• Expo (650 Industries, Inc.): Push notification token registration

We require our service providers to protect your personal data and to use it only to provide their services to us.

5.2 Map Apps You Choose to Open

If you tap to open a trip in Apple Maps or Google Maps, the trip's start and destination are passed to that app. What happens next is governed by that app's privacy policy.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal requests, including:

• Court orders, subpoenas, or other legal processes
• Valid requests from law enforcement authorities
• To protect our rights, privacy, safety, or property, or that of our users or others
• To enforce our Terms of Service or investigate potential violations

5.4 Business Transfers

If we are involved in a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your personal information becomes subject to a different privacy policy.

5.5 With Your Consent

We may share your information for other purposes if you ask us to or give us your explicit consent.

5.6 Aggregated or De-identified Information

We may use or share aggregated or de-identified information that cannot reasonably be used to identify you.

6. Data Retention

We keep personal information only as long as we need it:

• Account and profile: Until you delete your account
• Trips, saved places, trip history and progress: Until you delete them in the App or delete your account
• Data cached on your device: Until you sign out, delete your account, or delete the App
• Purchase records: Kept by Apple and RevenueCat, and by us where required, for as long as needed for tax, accounting, and fraud-prevention purposes
• Support emails: As long as needed to help you, and for a reasonable period afterward for our records
• Technical logs: Kept by our service providers for limited periods under their own retention policies

7. Deleting Your Account

You can permanently delete your account and its data from inside the App at any time:

1. Open Route On Time and go to the Settings tab.
2. Scroll to the bottom and tap Delete Account.
3. Confirm by tapping Delete.

For your security, if you signed in more than a few minutes ago, the App will ask you to sign out and sign back in before deleting. This confirms it's really you.

What is deleted immediately:

• Your trips, including recurring trips
• Your trip history and daily trip statistics
• Your XP history and progress (XP, levels, badges and streaks)
• Your profile, including your name, profile photo link, and home, work and saved locations
• Your login account (your Firebase Authentication record). You are then signed out, and your account data cached on that device is cleared.

What happens afterward:

• Remaining copies, such as an uploaded profile photo file and copies in system backups, are permanently deleted within 90 days.
• Purchase records held by Apple and RevenueCat are kept as required for tax, accounting, and fraud prevention.
• Copies of trips that other people added to their own accounts from your shared links belong to them and are not removed.

Subscriptions are not cancelled automatically. Deleting your account (or the App) does not cancel a Route On Time Pro subscription. To stop being charged, cancel it in your Apple Account settings: open the iOS Settings app, tap your name, then tap Subscriptions. See Apple's instructions.

If you used Sign in with Apple, the App asks you to confirm with Apple before deleting, and then revokes Route On Time's access to your Apple Account. You can also stop using your Apple Account with Route On Time in your Apple Account settings (Settings → your name → Sign-In & Security → Sign in with Apple). See Apple's instructions.

Can't access the App? Email hello@routeontime.com from the email address on your account (or your Apple relay address) and ask us to delete your account. We'll confirm your request and complete the deletion within 30 days.

8. Permissions and Choices

Every permission the App asks for is optional. You can change them at any time in the iOS Settings app under Route On Time:

• Location (While Using the App): Without it, type addresses instead of using "Current location".
• Photos: Only used when you choose a profile picture.
• Calendars: Only used when you tap "Add to Calendar".
• Notifications: Needed for departure alerts. You can also turn them off in the App's Settings.

You can update your name, profile photo and saved places in the App's Settings, and delete individual trips at any time.

9. Data Security

We use reasonable technical and organizational measures to protect your information:

• Encryption: Data is encrypted in transit using HTTPS (TLS), and our cloud providers encrypt stored data at rest
• Authentication: Accounts are secured by Firebase Authentication, Sign in with Apple, or Google Sign-In; we never see your password
• Access controls: Database and storage security rules require users to be signed in, and only you can change your trips and profile
• Purchases: Payments are handled entirely by Apple; we never receive card details

Important: No method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security. Please use a strong, unique password and keep your device secure.

10. Your Privacy Rights

10.1 Rights Available to Everyone

Wherever you live, you can ask us to:

• Access or export the personal information we hold about you (you can also see most of it directly in the App)
• Correct inaccurate information (you can edit your profile and saved places in the App)
• Delete your account and data (in the App, see Section 7, or by email)

To make a request, email hello@routeontime.com. We may need to verify your identity, usually by confirming the request from your account email address. We respond within 30 days, or sooner where the law requires. We will not discriminate against you for exercising your rights.

10.2 EEA, UK and Switzerland (GDPR)

You also have the right to:

• Receive your data in a structured, commonly used, machine-readable format (data portability)
• Restrict our processing in certain circumstances
• Object to processing based on our legitimate interests
• Withdraw consent at any time, without affecting processing that happened before you withdrew it
• Lodge a complaint with your local data protection authority

We respond to GDPR requests within one month. That period may be extended by two more months for complex requests, in which case we'll let you know.

10.3 California (CCPA/CPRA)

California residents have the right to know, access, correct, and delete their personal information, and the right not to be discriminated against for using these rights. In the past 12 months we have collected the following categories of personal information, for the purposes described in Section 2:

• Identifiers: Name, email address, account user ID, and IP address
• Commercial information: Subscription and purchase history
• Geolocation data: Precise location, only while you use the App's trip planning features
• Internet or other electronic network activity: Your in-app activity, such as trips created and completed
• Audio or visual information: A profile photo, if you add one
• Inferences: Reliability scores, insights, and progress derived from your trips

We do not sell or share personal information (as those terms are defined under California law), and we have not done so in the past 12 months. We use precise geolocation, which is sensitive personal information, only to provide the features you request, and not to infer characteristics about you.

10.4 Other U.S. States

Residents of other states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut, Utah, Texas and Oregon) may have similar rights to access, correct, delete, and port their data and to appeal our decision on a request. To exercise these rights or appeal a decision, email hello@routeontime.com.

11. Children's Privacy

Route On Time is not directed to children under 13 (or the higher age of digital consent in your country, such as 16 in some EU member states), and we do not knowingly collect personal information from them. If we learn that we have collected personal information from a child under that age without parental consent, we will delete it. If you are a parent or guardian and believe your child has given us personal information, please contact us at hello@routeontime.com.

12. International Data Transfers

Our service providers store and process data in the United States and other countries, which may have different data protection laws than where you live. When we transfer personal data from the EEA, UK or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) where our providers participate.

13. Our Website

routeontime.com does not use cookies, analytics, or advertising tags. When you visit, our hosting provider (Vercel) and the services that deliver the site's fonts and styles (Google Fonts and the Tailwind CSS CDN) receive standard request information, such as your IP address and browser type, which they may log for security and operations. If you email us from the Website, we receive your email as described in Section 1.11.

14. Automated Decision-Making

The App automatically calculates suggested leave times, travel time estimates, reliability scores, and progress from your trips and live traffic data. These calculations do not produce legal or similarly significant effects; you always decide when to leave and which route to take.

15. Third-Party Privacy Policies

Our service providers' privacy policies:

• Google Privacy Policy and Firebase Privacy and Security
• Mapbox Privacy Policy
• RevenueCat Privacy Policy
• Apple Privacy Policy
• Expo Privacy Policy

16. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to the App, our practices, or the law. We will update the "Effective Date" above and, for material changes, notify you in the App before the changes take effect. Please review this policy from time to time.

17. Contact Us

If you have questions, concerns, or requests about this Privacy Policy or your data, email us at hello@routeontime.com or visit our Support page. If you are not satisfied with our response, you may contact your local data protection authority.

Last updated: October 2, 2026