Privacy Policy

JTransit is a jeepney trip planner for Cebu City, Philippines. For anything in this policy, contact us at boscafsoftware@gmail.com.

Usage data.We assign your browser a random identifier (stored on your device) and record how the app is used: the trips you search for (the place names and map coordinates of the start and end you choose), whether results were found, the places you look up on the routes screen (the place name, its map coordinates, and how many routes we found passing there), feedback you give on routes, when we showed you a prompt asking for feedback, when you tap Start ride on a route and which route and direction it was for (and, when you start from a trip you searched for, which result you picked), which routes you share and whether you used your phone's share sheet or copied the link, which pages you visit, which of our web addresses you arrived on, and whether you're using a phone, tablet, or computer. If you sign in, this activity is linked to your account as well as to the browser identifier.

Messages you send us.When you send feedback — from Settings, from the prompt on the home screen, or after rating a set of results — we keep what you wrote, the category you chose, and the page you were on. When it follows a trip result, we also keep the place names of that trip. If you're signed in, the message is linked to your account.

Your position, when you ask us to use it. If you tap Use my locationto set the start of a trip, your browser asks your permission and, if you agree, gives us your device's position. We use it to plan that trip, and we record it with the search as the trip's starting point. We only ever read your position when you ask us to — we do not track you in the background, and if you never tap it, we never receive it.

Approximate location, only if you allow it. If you opt in, we record the approximate city-level location of your connection (for example, “Cebu City, PH”), derived from your network address by our hosting provider. This setting is separate from the position described above— it works out roughly which city you are in from your network address, and never reads your device's GPS — and we never store your IP address with your usage data. You can turn this off anytime in Settings.

Your route while you ride, only if you turn it on. Ride tracking is off until you switch it on, and everything else in the app works without it. When you start a ride, we record your device's position along the way — the path you travel, with times — and stop when you end the ride, arrive, or leave the app. If you record a ride for a proposed route in the crowdsourcing section, that recorded path is attached to the proposal — with nothing linking it to you or your device — as evidence for review, and the proposal's page shows only a count of recorded rides. If you don't record a ride, we may afterwards ask whether you rode a route you looked up; answering that saves only the route, your start and end points, and the times — not a path. Your device removes idle jitter and stray readings before anything is sent to us.

Your privacy choices. When you turn a privacy setting on or off, we record the choice, the date, and which version of this policy was in effect, so we can show what you agreed to and when. That record is kept against your browser identifier, never your account.

Account data.If you create an account, we store your email address and a securely hashed password. Recorded rides are never attached to your account, even when you're signed in.

On your device.Favorites, theme, your anonymous identifier, your privacy choices, and your recently searched places (with their coordinates, so we can offer them again) are stored in your browser's local storage. If ride tracking is on, a note of the route you last looked up is kept there too, so we can ask whether you rode it — that note stays on your device. You can clear all of it by clearing your browser's storage for this site. We do not use third-party advertising or tracking cookies.

To make the planner better. Searches tell us which routes and areas need work and where searches fail, feedback tells us what is broken or missing in words we could not infer from usage alone, and city-level location shows us where to expand coverage. Recorded rides give us four things we cannot get any other way: real travel times between stops, the boarding areas where people actually get on and off, corrections to route geometry where the recorded path differs from the map, and demand by route and hour. We also use this data to fix problems and keep the service running. We do not sell your data or use it for advertising.

Our legal grounds. We rely on your consent for everything that reads your location — tapping Use my location, the city-level connection location, and ride tracking — each asked for separately. The connection location and ride tracking can be switched off anytime in Settings; Use my locationruns only when you tap it, after your browser asks your permission. Everything else described above (usage data, feedback you send, account data) we process because it is necessary to run and improve the service you are using — the Data Privacy Act's legitimate-interest ground.

A recorded ride is deleted within 30 days. We keep it that long for two reasons: so you can ask us to erase your rides and have something to erase, and so we can recalculate if we find a mistake in how we processed them. The path of a ride recorded for a proposed route is deleted on the same 30-day schedule. Before that deletion, we fold rides into combined figures — typical travel times, busy boarding areas, ride counts per route. Those figures are pooled across many riders, contain nothing that points back to you, and we keep them. Other usage data is deleted after 12 months. Feedback you send us is also deleted after 12 months. Records of your privacy choices are kept for 12 months after you change them, as proof of what you agreed to and when. Account data is kept while your account exists and deleted when your account is deleted.

Our service providers process data on our behalf: Vercel (hosting), Neon (database), and Mapbox (place search — when you type a place, your search text goes to Mapbox to return results — plus map tiles and walking/driving directions). Your browser contacts Mapbox directly, so your network address reaches it along with the request, the same way it would if you visited its site. Once our monthly Mapbox search allowance is used up, place search goes to LocationIQ instead for the rest of that month, on the same terms: your browser sends it your search text directly. Recorded rides are not sent to any of them— ride paths stay in our own database and are processed there. Some of our providers store data on servers outside the Philippines; when they do, we remain responsible for your data under the Data Privacy Act — moving it abroad never moves our obligations. Our providers act under their own security and privacy obligations. Beyond them, we don't share your data with anyone unless the law requires it.

Route data © OpenStreetMap contributors, available under the Open Database License.

Your data travels over encrypted connections and is stored with providers who are contractually bound to protect it. Access to the database is limited to what the app itself needs, and no one can view an individual rider's recorded path — recorded rides are only ever shown to us as combined figures pooled across many riders. The one exception is a ride you record for a proposed route: its path (never linked to you or your device) is shown to our reviewers as part of reviewing that proposal. No service can promise perfect security. If a breach affects your personal data, we will notify the National Privacy Commission and you within 72 hours of learning of it, as RA 10173 and the Commission's rules require.

Under the Philippine Data Privacy Act of 2012 (RA 10173) you have the right to be informed about, access, correct, and object to the processing of your personal data, to have it erased or blocked, to data portability, to damages, and to file a complaint with the National Privacy Commission (privacy.gov.ph).

To exercise any of these rights, email boscafsoftware@gmail.com. To withdraw location or ride-tracking consent, use the toggles in Settings. Either takes effect immediately for future activity, and turning off ride tracking also offers to delete every ride still within the 30-day window.

Once rides have been folded into combined figures, nothing in those figures identifies you, so that step cannot be undone. Deleting your rides removes the recorded paths; it does not remove the pooled totals they contributed to.

If this policy changes, we'll update this page and the date at the top. Meaningful changes to what we collect will be asked about again, not assumed.