Privacy Policy

What the app stores

The app keeps your settings on your device only:

• The stops and the commutes you saved.
• The places you saved for Find a route, such as Home and Work.
• Your language choice.
• The last arrival times, so the app can still show them when the network is away.
• A stop that you saved in the App Clip, until the full app adds it to a commute.

This data stays in the app's own storage on your iPhone. The widgets, the Apple Watch app, and the App Clip read the same data, so your commutes appear there too. Nothing is sent to the developer. If you delete the app, the data goes with it.

Location

The app asks for your location so it can show the commute nearest to you, sort stops by distance, and find direct routes from where you are.

• Your location is used on your device. The developer never receives it.
• To name the district at the top of the screen, the app sends your location to Apple Maps. It does this again only after you move 300 m. Apple's handling of it follows the Apple Privacy Policy.
• The app does not track you and keeps no history of where you have been.
• The App Clip asks for your location only for a trip link, to find direct routes from where you are. iOS turns this permission off again at 4:00 a.m. the next day.
• You can refuse the permission. The app still works; you then pick the commute or the start place yourself.

Which servers the app contacts

To show live arrival times, the app asks the Hong Kong public transport servers for the stops you chose:

• data.etabus.gov.hk — KMB
• rt.data.gov.hk — Citybus, NLB, MTR, and the Light Rail
• data.etagmb.gov.hk — the green minibus

A request carries the route and the stop. It carries no name, no account, and no location. These servers are run by the Government of the HKSAR and the transport operators, so they receive the request and your IP address, under their own terms.

At most once a day, the app also asks the Wayknown route list server, wayknown-route-data.292x787728.workers.dev, for a newer list of bus and minibus routes, and downloads the list when there is one. This request carries no name, no account, and no location. The developer runs this server on Cloudflare, so Cloudflare receives the request and your IP address. Cloudflare's handling of them follows the Cloudflare Privacy Policy.

When you search for a place, the app uses Apple Maps to find it and to name the district. Apple receives that search text. Apple's handling of it follows the Apple Privacy Policy.

Shared links

When you share a stop, the app makes a link to wayknown.pages.dev. A stop link holds only the route and the stop. A trip link holds only the place name, the address, and the position that the sender chose. A link holds nothing about the sender or the receiver.

On an iPhone, the link opens the app, or the App Clip, which iOS downloads from Apple. On other devices, the browser opens a page on wayknown.pages.dev. The developer runs this site on Cloudflare, so Cloudflare receives the request, the link, and the IP address. Cloudflare's handling of them follows the Cloudflare Privacy Policy.

The feedback page

On the feedback page of this site, you can post a comment or a reply. You do not need an account. When you post, the site keeps:

• The name that you type. It does not need to be your real name.
• Your comment.
• The language of the page, and the time of the post.

Your browser also remembers the name, so you do not type it again. The name stays in your browser until you clear the data of this site.

The site does not keep your IP address or your email address. The developer reads each comment before it shows on the page. After that, everyone can read the comment, with the name and the time.

Before the site takes a comment, Cloudflare Turnstile checks that a person, not a program, sends it. Turnstile reads signals from your browser to do this. Cloudflare's handling of them follows the Cloudflare Privacy Policy.

To remove a comment that you posted, write to the address below. Give the name and the time of the comment.

Children

The app is for everyone. It collects nothing from anybody, so it collects nothing from children.

Changes

If this policy changes, the new text appears on this page with a new date.

Contact

Questions about this policy: ryan@doubleshot.tech