Privacy Policy

Transit League ("the App") is a location-based strategy game for NYC subway riders. This policy explains what data we collect, how we use it, and your rights regarding that data.

Account Information

When you create an account, we collect your email address for authentication purposes. We use a one-time passcode (OTP) login system and do not store passwords.

Display Name

You choose a display name during onboarding. This is visible to other players on station leaderboards.

Location Data

The App uses your device's location to determine which subway station you are nearest when you check in. We store the station association (not your precise GPS coordinates) alongside your game activity. Location access is only used while the App is in the foreground and is required for gameplay.

Gameplay Data

We record your check-ins, scores, station ownership, and leaderboard rankings. This data is necessary to operate the game.

• Authenticate your account via email OTP
• Determine your nearest station for check-ins
• Track scores and maintain leaderboards
• Manage station ownership and weekly game cycles
• Improve and maintain the App

We do not sell your personal data. Your display name and scores are visible to other players on public leaderboards. We may share anonymized, aggregated usage data for analytics purposes.

We use the following third-party services to operate the App:

• Supabase — database and authentication
• Mapbox — map display
• Apple (App Store / TestFlight) — app distribution

Your data is stored securely using Supabase (hosted on AWS). We use row-level security policies to ensure users can only access their own account data. Game data such as leaderboard scores is publicly readable by design.

The App caches game data locally on your device to support gameplay in areas with limited connectivity (such as the subway). This cached data is synced to our servers when connectivity is restored.

We retain your account and gameplay data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days. Anonymized leaderboard history may be retained indefinitely.

You may:

• Request a copy of your data
• Request deletion of your account and data
• Update your display name at any time

To exercise any of these rights, contact us at hello@transitleague.com.

The App is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us.

We may update this privacy policy from time to time. We will notify you of significant changes through the App or by email. Continued use of the App after changes constitutes acceptance of the updated policy.

If you have questions about this privacy policy, contact us at hello@transitleague.com.