Privacy policy · metroinfogo

metroinfogo needs an account so your journeys follow you between devices. It never asks for your location, and it never sells your data.

Draft for legal review. This policy describes how the metroinfogo app works today. Still to be filled in before launch: legal name, address, phone, privacy contact.

Who we are

metroinfogo is operated by [Legal business name], [Registered business address] (“we”, “us”). For anything in this policy, email support@metroinfogo.com.

What we collect, and why

Data	What it is	Why
Your account	Name, email address and a password stored only as a secure hash (Argon2id). If you continue with Google, we receive your name and email from Google, never your Google password or picture.	To create and secure your account and sign you in.
Journeys and settings	Your chosen city, route preference, appearance, saved journeys and up to 100 recently planned routes.	To sync them to every device you sign in on. You can pause or clear history in Settings.
App activity	Journeys planned, saved and reopened, cities chosen, trips started, reminders set and Plus page views, recorded with stations and cities only.	To understand which features help riders. Turn it off any time in Settings → Share app activity.
Notifications	Trip alerts and leave reminders are created on your phone and never sent to us. For service updates and new sign-in alerts by push, we keep your device's push token, encrypted.	To send updates and security alerts you can switch off. The token is deleted when you sign out.
Security records	Sign-ins, failed attempts, password changes and role changes, without IP addresses. Emails we send are logged by type and recipient, never their codes or text.	To protect accounts and investigate abuse.
Purchases	If you buy Plus: the transaction record from the App Store or Razorpay (plan, dates, status, amount).	To switch Plus on across your devices and keep accounting records. We never receive your card or UPI details.

What we don't collect

Your location. The app never asks for it; trip mode moves on when you tap “Next stop”.
Contacts, photos, or advertising identifiers. There are no ads and no ad tracking.
Anything we would sell. We don't sell or rent personal data.

This website

metroinfogo.com sets no cookies. If you join the launch list or email us, we use your email address only to reply or to tell you about the launch. If we turn on website analytics, it will be a privacy-friendly, cookie-free service that counts visits without identifying you.

Who can see your data

A small team, limited by role. Support staff can see accounts, app activity, plans and store payments; only senior staff can see email and security logs or change plans. Every administrative action is recorded in an audit log.

We use service providers who process data on our behalf, only as needed to run metroinfogo: cloud hosting for our servers and database; an email delivery service for sign-in codes; Google, when you choose to sign in with Google; Apple (App Store) and Razorpay for payments; and Expo for delivering push notifications.

How we protect it

Connections to our servers are encrypted (HTTPS), and the database accepts encrypted connections only.
Sensitive fields, such as sign-in tokens, push tokens and email logs, are encrypted at rest (AES-256-GCM). Passwords are stored as Argon2id hashes.
Backups are encrypted, and access to production systems is restricted by role.

How long we keep it

Account, journeys and settings: while your account exists.
Trip history: your 100 most recent planned routes; clear it any time.
Purchase records: kept for accounting and tax as the law requires, separated from your account after deletion.
Backups: overwritten on a rolling basis, within 14 days.

Deleting your account

Delete your account any time in the app (Settings → Delete account), or see how to request deletion. Your personal data is erased; store receipts are kept without your account for accounting.

Your rights

Under India's Digital Personal Data Protection Act, 2023, and, where it applies, the EU and UK GDPR, you can ask to access, correct or erase your personal data, withdraw consent, and raise a grievance. Most of this you can do in the app; for anything else email support@metroinfogo.com. We respond within 2 working days and resolve requests within the time the law allows.

Grievance officer: [Privacy / grievance officer name], support@metroinfogo.com.

Children

metroinfogo is a general-audience travel app. If you are under 18, please use it with the consent of a parent or guardian.

Links to operators

Official map links open transit operators' websites, which have their own privacy practices.

Changes

If we change this policy in a way that matters, we'll tell you in the app or by email before it takes effect.