Transit is a public-transit trip-planning app operated by 9280-0366 Québec Inc. (doing business as Transit App, Inc.), a private, Montreal-headquartered company with a publicly named leadership team and roughly 100 employees. Its privacy policy states a design principle of collecting only what is necessary, gates location collection on consent, and does not record location when the app is not active, while also disclosing a fuller account-data set (name, email, billing/payment details, date of birth, phone) and a roster of third-party service providers (Amplitude, Sentry, Firebase, nGrow, Intercom, Mailchimp) used for analytics, crash reporting and marketing. The policy states the company never shares data with advertisers or data brokers, though it does share account- and location-linked data with functional partners (Masabi, Token Transit, Lyft, Communauto, transit agencies) to deliver ticketing and bikeshare features, and shares privacy-truncated pseudonymous datasets with transit agencies and researchers. The company names an EU Article 27 representative and a third-party Data Protection Officer (GoSecure Inc.), and its App Store privacy label declares no 'Data Used to Track You' category, consistent with the no-ad-network-sharing claim. No breach, regulator action, named-firm security audit or transparency report was found in this research.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
11 ON FILE
COLLECTION
The Transit iOS App Store listing's developer-declared privacy label states that Location, User Content, Identifiers, Usage Data and Diagnostics may be collected and linked to the user's identity, corroborating the categories described in the operator's own privacy policy.
Transit's privacy policy states that location data (longitude and latitude) is only collected with the user's consent, is tracked only while the user is riding a public transit vehicle, and is not recorded when the app is not active; the same policy discloses a broader account-data set collected and stored with the account, including name, email address, billing/shipping addresses, payment card number, date of birth and phone number.
Transit's own team page publicly names its co-founders — Sam Vermette (CEO) and Guillaume Campagna (CTO) — along with a full leadership and staff roster, describing a Montreal-headquartered team of 100+ employees; no parent company or external ownership stake is disclosed on the page.
Transit's privacy policy identifies the legal operator of the app as 9280-0366 Québec Inc., a company based in Montréal, and states this entity is the Data Controller for EU/UK/Swiss users, naming an EU Article 27 representative (Impact Lawyers) and a contracted Data Protection Officer (GoSecure Inc.).
Transit's privacy policy states as a core principle that, unlike other navigation apps, it never shares user data with advertisers or data brokers; the same policy discloses that it does share personal information with named functional partners (Masabi, Token Transit, Bicycle Transit Systems, Lyft and its subsidiaries, Communauto, Public Transit Providers) to deliver fare-payment, bikeshare and carshare features, and shares pseudonymous, city-block-truncated location datasets with transit agencies and researchers for planning purposes.
Transit's privacy policy states that personal information from user accounts is always encrypted and that the company segregates duties so that no single employee can decrypt personal information, an internal-controls claim; no independent audit of this claim, breach disclosure, or regulator action was found in this research.
The Transit iOS App Store privacy label states that Identifiers, User ID, Device ID, Usage Data and Product Interaction data linked to identity may be used for the developer's own advertising/marketing, analytics and product personalization purposes; the label does not declare a 'Data Used to Track You' category (the App Store category reserved for cross-app/cross-website tracking), unlike labels that disclose third-party ad-network tracking.
Transit's privacy policy discloses a list of third-party service providers used to host and process data, including Amplitude for product analysis of application usage, Sentry for analysis of application crashes and issues, Firebase for storage of user preferences/favourite locations and sending push notifications, and nGrow described as a 'customer marketing platform'.