1. Introduction
Trippa.ca (“the App”, “we”, “us”, “our”) is a web-based transit scheduling and real-time tracking application designed to provide GO Transit passengers in the Greater Toronto Area (GTA) with live transit information, route planning, and scheduling assistance. This Privacy Policy outlines how we collect, use, disclose, and protect your personal information.
By accessing or using Trippa.ca, you agree to be bound by this policy. If you do not agree with any part of these privacy practices, please do not use the App.
2. Information We Collect
2.1 Personal Information You Provide
We may collect the following information when you voluntarily provide it:
- Account Information: Your name, email address, and password if you create an account
- Accessibility Preferences: Information about mobility or accessibility requirements you voluntarily disclose
- Saved Locations: Frequently accessed stops, routes, or favourite destinations you explicitly save
- Communication Preferences: Your notification and communication settings
2.2 Information Collected Automatically
When you use Trippa.ca, we automatically collect certain information:
- Location Data: Precise GPS coordinates are collected ONLY when you explicitly grant location permission. This data enables real-time vehicle tracking and transit arrival estimates
- Device Information: Device type, operating system version, browser type, and unique device identifiers
- Usage Data: Features accessed, routes searched, stops viewed, session duration, and interaction patterns
- IP Address and Network Information: Your IP address, Internet Service Provider (ISP), and network connection type
- Cookies and Tracking Technologies: We use cookies, local storage, and similar technologies to maintain session state and remember preferences
- Error Logs: Application crash reports, error messages, and technical diagnostics
2.3 Information from GO Transit
The App integrates publicly available GO Transit data including real-time vehicle positions, route schedules, service alerts, and stop information. This data is provided by GO Transit’s open data APIs and does not contain personal information about individual transit users.
3. How We Use Your Information
We use the information collected for the following lawful purposes:
- Service Delivery: Providing real-time transit tracking, arrival predictions, and route planning functionality
- Account Management: Creating and maintaining user accounts, authentication, and password recovery
- Notifications: Sending push notifications or email alerts for service disruptions, delays, or information you requested
- Analytics and Improvement: Analysing user behaviour and app performance to identify issues, improve features, and enhance user experience
- Technical Support: Providing customer support and resolving technical issues
- Compliance and Safety: Ensuring compliance with applicable laws, preventing fraud, and protecting app security
- Legal Obligations: Responding to lawful requests from government authorities or courts
- Marketing: With your explicit consent, sending promotional materials about new features or related services
4. Data Sharing and Disclosure
4.1 We Do NOT Share Personal Information For Marketing
We strictly limit third-party data access. Your personal information is NOT sold, rented, or shared with external parties for their marketing purposes.
4.2 Limited Sharing With Service Providers
We may share limited information with trusted third parties who assist us in operating the App, subject to confidentiality agreements:
- Cloud Infrastructure Providers: We use secure cloud hosting services (e.g., AWS, Azure) to store app data and backups
- Analytics Providers: Anonymised usage data may be shared with third-party analytics services to understand app performance
- Payment Processors: If premium features are offered, payment information is handled by PCI-compliant payment processors
- Push Notification Services: Notification platforms may receive anonymised user IDs required for delivery
4.3 Legal Requirements
We may disclose personal information if required by law, by court order, or to protect our legal rights, property, or the safety of our users. We will notify you of such disclosure unless legally prohibited.
5. Data Retention
We retain personal information only as long as necessary:
- Account Data: Retained for the duration of your account plus 90 days after closure, unless longer retention is required by law
- Location Data: Real-time location is processed in-memory only. Historical location data is not stored unless explicitly saved by the user
- Usage and Analytics Data: Aggregated analytics are retained for up to 24 months for trend analysis
- Error Logs: Technical logs are purged after 30 days unless an investigation is ongoing
6. Data Security
We employ industry-standard security measures to protect your personal information:
- HTTPS Encryption: All data in transit is encrypted using TLS 1.2 or higher
- At-Rest Encryption: Sensitive data stored on servers is encrypted at rest
- Access Controls: Strict role-based access controls limit employee access to personal data
- Regular Security Audits: Third-party security assessments are conducted annually
- Incident Response: We maintain a documented incident response plan for potential data breaches
- Staff Training: All employees handling data receive privacy and security training
However, no security system is impenetrable. While we strive to protect your information, we cannot guarantee absolute security against unauthorised access.
7. Your Rights and Choices
7.1 Canadian Privacy Rights (PIPEDA Compliance)
Under the Personal Information Protection and Electronic Documents Act (PIPEDA), you have the following rights:
- Right of Access: You may request access to all personal information we hold about you
- Right to Correction: You may request correction of inaccurate or incomplete personal information
- Right to Deletion: You may request deletion of your personal information, subject to legal retention requirements
- Withdraw Consent: You may withdraw consent to certain data collection or use at any time
- Right of Complaint: You may file a complaint with the Privacy Commissioner of Canada if you believe your rights have been violated
To exercise any of these rights, contact us at privacy@trippa.ca. We will verify your identity and respond within 30 days of receipt of your request.
7.2 Location Permissions
Location data is collected only with your explicit permission. You can revoke location access at any time through your device settings or app preferences. Revoking access will disable real-time vehicle tracking features but will not affect route planning or stop information.
7.3 Notification Preferences
You may manage notification preferences within the app settings. You may opt out of promotional communications at any time by following the unsubscribe link in emails or adjusting in-app settings.
8. Cross-Border Data Transfers
The App is hosted and operated within Canada. However, some service providers (such as cloud infrastructure providers) may process data in the United States or other jurisdictions. Any cross-border transfers are made in compliance with PIPEDA and include contractual safeguards to protect your personal information.
9. Contact Us
For privacy-related inquiries, concerns, or to exercise your rights, contact us:
- Privacy and Data Rights: privacy@trippa.ca
- General Support: Contact page
Also see our Terms of Service for the full user agreement.