Privacy Policy
Last updated October 2, 2026
TTC Status ("we") is an independent iPhone app that shows whether TTC subway and LRT lines, and the stations you care about, are running normally. It isn't affiliated with the Toronto Transit Commission. This policy covers the app, the website at ttc-status.com, and our server at api.ttc-status.com.
The short version: you don't need an account, we never ask for your name, we don't track your location, and the app has no advertising or analytics SDKs.
What we collect and why
An anonymous install ID
The first time you open the app, our server creates a random ID and a secret key for your install. The app keeps them in the iPhone Keychain on that device only. We use them to sync your settings, check Premium, and send pushes. The ID isn't linked to your name, email or Apple ID. We also store the app language you use, so pushes arrive in that language.
Your Saved Stations and Ride windows
The stations you follow, the lines you care about there, and your Ride windows (the days and times you ride) are stored on your iPhone and synced to our server, so we know when a disruption should notify you. Your push preferences are stored the same way. When you remove a station, we keep a small marker saying it was removed, so your other devices remove it too.
Sign in with Apple or Google (optional)
If you sign in, our server stores only the account identifier Apple or Google gives us. We don't store your name. The app may show your email address in Settings, but that copy stays in your iPhone's Keychain and is never sent to our server.
Push tokens
If you allow notifications, Live Activities or widgets, iOS gives the app tokens that let us reach your device through Apple's push service. We store those tokens and a record of the pushes we send to your install. Tokens are deleted when Apple tells us they're no longer valid, and when you delete your account.
Premium purchases
Purchases are made with Apple. RevenueCat handles the subscription for us using a random purchase ID tied to your install, not your name or email. Our server keeps Apple's transaction ID, the product you bought and whether Premium is active, so Premium works on every device you use.
The Waitlist (website)
If you join the Waitlist, we store your email address, the time you joined and the exact consent wording you agreed to. We use your email for two things only: a TestFlight invite to try the beta, and one email when the app is on the App Store. Each email has an unsubscribe link. After the launch email, we delete every Waitlist address. Nothing is emailed when you sign up.
To stop bots, the form uses Cloudflare Turnstile, which checks your browser and IP address with Cloudflare when you submit. Turnstile doesn't set advertising cookies.
Website analytics
The website uses Cloudflare Web Analytics to count page views. It doesn't use cookies or local storage, and it doesn't track you across sites. The app has no analytics.
Server logs
Like any web server, ours records requests (such as the time, the path and your IP address) to keep the service running and to fix problems. Cloudflare keeps these logs for a limited time.
What we don't collect
- Your location. The app never asks for it.
- Your name, contacts, photos or anything else on your iPhone.
- Advertising identifiers. There are no ads.
Who processes it
| Service | What for |
|---|---|
| Cloudflare | Hosting the website and server, our database, Turnstile, Web Analytics, logs, and sending the two Waitlist emails |
| Apple | Sign in with Apple, push notifications, App Store purchases, TestFlight |
| Sign in with Google (only if you choose it) | |
| RevenueCat | Managing Premium subscriptions |
We don't sell your information or share it for advertising. Service status comes from the TTC's public alerts on ttc.ca; we send nothing about you to the TTC.
How long we keep it
- Install ID, settings and push tokens: deleted after a year without the app being opened, unless you're signed in or have bought Premium. Ask us to delete them sooner at any time.
- Premium records and accounts: while you use the app, or until you delete your account.
- Records of pushes we sent: 30 days, or 1 year for Planned closure reminders.
- Purchase notifications from RevenueCat: 30 days.
- Sign-in challenges: a few minutes.
- Waitlist emails: until the launch email is sent, or until you unsubscribe.
Your choices
- Turn off notifications, Live Activities or widgets in the app or in iOS Settings.
- Delete your account in the app (Settings › Delete account). That removes your sign-in, synced settings and push tokens from our server. Cancel a subscription in your Apple ID settings.
- Email support@ttc-status.com to see, correct or delete what we hold about you, including data tied to an install without an account, or to leave the Waitlist.
Children
TTC Status isn't directed at children under 13, and we don't knowingly collect their information.
Changes
If we change this policy, we'll update the date above. For a significant change, we'll also tell you in the app before it takes effect.
Contact
Questions or requests: support@ttc-status.com.