Privacy,
plainly stated.

Information stored on your device

Straks stores your rules, favourite stops, Home and Work locations, preferences, and cached transit results locally on your device. We do not receive or keep a copy of this information on our own servers.

Information used for transit queries

To provide journey and departure information, Straks must send the relevant origin, destination, transport modes, and other query details to a transit data provider. Depending on the active rule or feature you use, this may include your current geographic coordinates.

This processing is necessary for the app to find nearby stops, resolve routes, and return useful transit information.

Requests are sent to the transit provider through Straks' own service, so that provider credentials never need to be placed in the app. The service passes each query on and returns the answer. It does not record the query, the stops or coordinates in it, search terms, route choices, your IP address, or the provider's response.

Third-party transit providers

Transit queries are processed by transit data providers such as HERE. Information included in those requests is shared with HERE and is subject to that provider's own privacy policy and data-handling practices.

Straks does not include your name, email address, account identifier, or other directly personally identifiable information in these requests.

What we do not do

We do not save, collect, lease, sell, or otherwise share your rules, saved locations, geographic coordinates, or transit queries with other parties. Transit queries pass through our service without being stored, and we do not keep them or cache them anywhere outside your own device.

Usage data and abuse protection

To run the service, keep its costs under control, and stop it being misused, our service keeps limited operational data. It contains which provider and type of lookup was used, whether it succeeded, the response status, how long it took, the app version, and the platform (Android or iOS). It does not contain the content of any lookup.

Each event is linked only to pseudonyms: a one-way code derived from a random identifier that the app creates for itself (on iOS, from a key generated by Apple's App Attest), and a one-way code derived from your network address. Both codes change every day, so activity cannot be linked from one day to the next, and your network address itself is not stored. This data is kept for up to three months.

To check that requests come from a genuine copy of Straks, the app asks Google Play Integrity (Android) or Apple App Attest (iOS) to vouch for it, and our service verifies the answer. These checks are performed by Google and Apple under their own privacy policies.

If an installation makes unusually many requests, our service can temporarily block it. A block is recorded against a one-way code, not against you, and ends automatically after a few hours or at the end of the day. If you are blocked, the app tells you and shows a reference code you can quote to us if you think it is a mistake. Our legal basis is our legitimate interest in keeping the service available and affordable for everyone.

Our service runs on Cloudflare, which handles network addresses as part of delivering the connection, under its own privacy policy.

Your control

You can edit or remove rules, favourites, Home and Work locations, and other preferences from within the app. Removing the app also removes the data Straks stores locally, subject to your device's own backup and restore settings.