Privacy Policy

What the app stores

The app keeps your settings on your device only:

• The stops and the commutes you saved.
• The places you saved for Find a route, such as Home and Work.
• Your language choice.
• The last arrival times, so the app can still show them when the network is away.
• A stop or shared commute kept in the App Clip, until the full app offers to save it.

This data stays in the app's own storage on your iPhone. The widgets, the Apple Watch app, and the App Clip read the same data, so your commutes appear there too. Nothing is sent to the developer. If you delete the app, the data goes with it.

Location

The app asks for your location so it can show the commute nearest to you, sort stops by distance, and find direct routes from where you are.

• Your location is used on your device. The developer never receives it.
• To name the district at the top of the screen, the app sends your location to Apple Maps. It does this again only after you move 300 m. Apple's handling of it follows the Apple Privacy Policy.
• The app does not track you and keeps no history of where you have been.
• The App Clip asks for your location only for a trip link, to find direct routes from where you are. iOS turns this permission off again at 4:00 a.m. the next day.
• You can refuse the permission. The app still works; you then pick the commute or the start place yourself.

Which servers the app contacts

To show live arrival times, the app asks the Hong Kong public transport servers for the stops you chose:

• data.etabus.gov.hk — KMB
• rt.data.gov.hk — Citybus, NLB, MTR, and the Light Rail
• data.etagmb.gov.hk — the green minibus

A request carries the route and the stop. It carries no name, no account, and no location. These servers are run by the Government of the HKSAR and the transport operators, so they receive the request and your IP address, under their own terms.

At most once a day, the app also asks the Wayknown route list server, wayknown-route-data.292x787728.workers.dev, for a newer list of bus and minibus routes, and downloads the list when there is one. This request carries no name, no account, and no location. The developer runs this server on Cloudflare, so Cloudflare receives the request and your IP address. Cloudflare's handling of them follows the Cloudflare Privacy Policy.

When you search for a place, the app uses Apple Maps to find it and to name the district. Apple receives that search text. Apple's handling of it follows the Apple Privacy Policy.

Shared links

Shared links use wayknown.pages.dev. A stop link holds the route and the stop. A trip link holds the place name, address, and position chosen by the sender. A commute link holds a copy of its name, start, destination, and saved stops, including their names and positions. Anyone with a commute link can read that copy, so share it only with people you want to have those places.

A commute link opens a preview in the installed app, or in a browser without an install. It saves a local copy only when the recipient taps Save commute and stops. Later changes to the original commute do not change the shared copy. Stop and trip links can also open the App Clip, which iOS downloads from Apple.

The developer runs this site on Cloudflare, so Cloudflare receives the page request and the IP address. A commute's contents are in the part of the link after #, which the browser does not send to the web server. The site does not store the commute. Stop and trip link details are in the query, which is sent with the request. Cloudflare's handling of requests follows the Cloudflare Privacy Policy.

The feedback page

On the feedback page of this site, you can post a comment or a reply. You do not need an account. When you post, the site keeps:

• The name that you type. It does not need to be your real name.
• Your comment.
• The language of the page, and the time of the post.

Your browser also remembers the name, so you do not type it again. The name stays in your browser until you clear the data of this site.

The site does not keep your IP address or your email address. The developer reads each comment before it shows on the page. After that, everyone can read the comment, with the name and the time.

Before the site takes a comment, Cloudflare Turnstile checks that a person, not a program, sends it. Turnstile reads signals from your browser to do this. Cloudflare's handling of them follows the Cloudflare Privacy Policy.

To remove a comment that you posted, write to the address below. Give the name and the time of the comment.

Children

The app is for everyone. It collects nothing from anybody, so it collects nothing from children.

Changes

If this policy changes, the new text appears on this page with a new date.

Contact

Questions about this policy: ryan@doubleshot.tech