Privacy Policy

Effective and last updated: October 10, 2026

This Privacy Policy describes how Transbay ("Transbay," "we," "us," or "our") collects, uses, and discloses information in connection with the Headways mobile application and the Headways website at headways.transbay.dev (together, the "Service"). By using the Service, you acknowledge the practices described in this Policy.

1. Information We Collect

1.1 Location Information

With your permission, the Service accesses the location of your device in order to display your position, show nearby stops and vehicles, and plan trips. In the mobile application, location is accessed only while the application is in use. On the website, location is accessed only when you select the locate control or request a trip from "Your location." You may withdraw permission at any time through your device or browser settings.

When you request a trip, the coordinates of the origin and destination are transmitted to our servers for the purpose of calculating routes. We do not store those coordinates. We do not maintain a history of your location and we do not sell your location information.

1.2 Account Information

You may create an account by signing in with Apple through Transbay Accounts. If you do so, we collect and store your Apple account identifier, the username you choose, the email address provided by Apple (which may be an Apple private relay address), a credential that allows us to revoke the Service's access to your Apple ID upon deletion of your account, and records of the sessions on which you are signed in.

If you are signed in, the mobile application synchronizes the following information to your account: past journeys, scheduled and recurring trips, saved and recent places (including places such as Home and Work), pinned lines, and application settings. While you are riding a journey with Go, the journey is also associated with your account for display on the website and is removed when the journey ends. The website retrieves this information in order to display your tickets and, at your direction, saves, repeats, or deletes trips on your account.

The website sets two cookies, which are used solely to keep you signed in.

1.3 Live Activities and Notifications

When you start a journey with Go, the mobile application transmits to our servers the journey plan and a push notification token, so that we may update your Live Activity and send alerts. Updates are delivered through Apple's push notification service. This information is retained only for the duration of the journey and is deleted when the journey ends, and in any event within a few hours.

1.4 Vehicle Photographs

If you submit a photograph of a vehicle, we collect the photograph, the vehicle and agency you identify, and any credit or description you enter. Submissions are displayed to other users of the Service together with the relevant vehicle. Submissions are not associated with your account. You should not submit any content that you do not wish to be made available to others.

1.5 Trip-Planning Records

To evaluate and improve the accuracy of our trip planner, we create a record of each trip search and of each journey that you begin in the mobile application. Each record contains the time of the request; the transit stop nearest to each end of the journey and its distance from that end, rounded to the nearest 50 meters; the walking speed and change-safety preferences used; and the options returned. For a journey that you begin in the mobile application, the record also contains the rides taken and whether a faster route was available. These records are not associated with your account and do not contain your coordinates or IP address. The associated records described in Section 1.6 are kept separately.

1.6 Account Usage and Trip Searches

If you are signed in to the mobile application, the application includes your account credential with its requests to our servers, and we associate those requests with your account. For each account, we count the number of requests made, the volume of data returned, and the server time consumed, by hour and by type of request.

We also keep a record, associated with your account, of each trip search you make and each journey you begin. Each record contains the time of the request; the transit stop nearest to each end of the journey and its distance from that end, rounded to the nearest 50 meters; the rides in the first option returned or, for a journey you begin, the rides you took; the walking speed and change-safety preferences used; and the computational cost of the request. We use these records to understand which journeys people make and how the Service is used, to improve the Service, and to manage the cost of operating it. These records do not contain your exact coordinates. The website does not transmit your account credential and is not recorded in this manner.

1.7 Technical Information

In order to respond to a request, our servers receive your IP address and the information necessary to identify what you have requested, such as a stop, route, or vehicle. Our application code does not store your IP address or compile a record of the stops, routes, or vehicles you view. Our hosting provider may retain standard connection logs.

1.8 Information Stored on Your Device

The Service stores your settings, filters, saved presets, pinned vehicles, and most recent map position on your device. On the website, this information is stored in your browser's local storage and is not transmitted to us, except to the extent it is synchronized to your account as described in Section 1.2. In the mobile application, your sign-in session is stored in the iOS Keychain.

2. How We Use Information

We use the information described above to:

• provide, operate, and maintain the Service, including displaying vehicles and stops, planning trips, and delivering Live Activities and alerts;
• authenticate you and synchronize your data across your devices;
• evaluate, test, and improve the accuracy and performance of the Service, including the trip planner;
• analyze how the Service is used, including which journeys signed-in users search for, and measure and manage the cost of operating it;
• secure the Service and troubleshoot problems; and
• respond to your communications and comply with applicable law.

3. Analytics and Tracking

We do not use third-party analytics services, third-party crash reporting services, advertising identifiers, or tracking technologies in the Service, and we do not track you across other applications or websites. The only measurements of your use of the Service that we make are those described in Sections 1.5 and 1.6. Errors that occur on the website are written to your browser's console and are not transmitted to us. We do not build advertising profiles.

4. Disclosure of Information

We do not sell your personal information and we do not disclose it for advertising purposes. We disclose information as follows:

• Apple. Apple provides Sign in with Apple, push notifications for Live Activities, and maps and place search. On the website, Apple Maps is loaded directly from Apple, and Apple therefore receives your IP address, the map area you view, and the places you search for. Our server only signs the token that authorizes the map to load.
• Transbay Accounts. Transbay Accounts administers sign-in and stores your synchronized data, usage counts, and trip-search records.
• Railway. Railway provides hosting for our servers and databases.
• Legal requirements. We may disclose information where we believe in good faith that disclosure is required by law, regulation, or legal process, or is necessary to protect the rights, property, or safety of Transbay, our users, or others.

These providers process information in accordance with their own privacy policies, which govern their use of that information.

5. Retention

• Account information, synchronized data, usage counts, and trip-search records associated with your account are retained until you delete your account.
• Live Activity information is deleted when the journey ends.
• Trip-planning records are retained for an indefinite period for the purpose of improving the trip planner.
• Vehicle photographs are retained until removed.
• Information stored on your device remains there until you clear it or delete the application.

6. Your Choices

• You may disable location access at any time through your device or browser settings. The Service remains available without it.
• You may use the Service without signing in, in which case no data is synchronized and no usage is counted against an account.
• You may sign out at any time.
• You may delete your account at transbay.dev/account. Deletion removes your account, your synchronized data, your usage counts, and your trip-search records, and revokes the Service's Apple sign-in grant.
• You may contact us to request access to, correction of, or deletion of information we hold about you, or the removal of a photograph you submitted.

7. Children

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. Changes to This Policy

We may update this Policy from time to time. If we do, we will revise the date at the top of this page. Your continued use of the Service after an update constitutes your acceptance of the revised Policy.

9. Contact

Questions about this Policy or requests relating to your information may be directed to privacy@transbay.dev.