Privacy Policy

Account information. If you create an account, we store your email address and an encrypted password hash through our authentication provider (Supabase). We never see or store your password in plain text.

Location (optional). If you use "nearby stops", your browser shares your approximate location with us only to sort stops by distance. We do not store your location.

Usage data. We may collect basic technical information such as browser type, pages visited, and error logs to keep the service reliable.

• Provide live departure boards, vehicle positions, and service alerts.
• Authenticate your account and keep your preferences.
• Debug errors and improve reliability of the tracker.
• Respond to support or legal requests.

Real-time positions, trip updates, alerts, and schedule data come from RTD's public GTFS and GTFS-Realtime feeds. That data is public and contains no personal information about riders.

• We do not sell your personal information.
• We do not use advertising trackers or third-party ad networks.
• We do not store your precise location history.

We use browser local storage only to keep you signed in and remember preferences. We do not use third-party tracking cookies.

Account data is kept while your account is active. You can request deletion of your account and associated data at any time by contacting us; we will remove it within 30 days.

Passwords are hashed, connections are encrypted over HTTPS, and database access is protected by row-level security. No method of transmission is 100% secure, but we work to protect your information using industry-standard measures.

Rainbow Transit is not directed at children under 13, and we do not knowingly collect personal information from them.

We may update this policy from time to time. Material changes will be noted on this page with a new "last updated" date.

Questions about this policy? Email us at privacy@rainbowtransit.app.