privacy policy

when you sign up, shotgun!'s sign-in service (amazon cognito) stores your email address, your username and, if you use email sign-up, a hashed password. if you sign in with apple, google or microsoft, that provider confirms who you are and shares your email address; their own privacy policies apply to that step.

sign-up only accepts email addresses from us colleges and universities (almost always ending in .edu), so shotgun! uses your email to confirm you're a student and to send a confirmation code.

if your school isn't recognized yet and you join the waitlist, shotgun! keeps that email address and your school's domain so it can tell you when your school is added. it's deleted once you've been told, or on request.

your profile: first and last name, username, profile photo, a colour, your driving preferences (conversation style and entertainment) and, if you add it, your instagram handle.

the routes you post: where you're leaving from and going to (as places on the map and the town names), the departure time, seats, price and any note.

your reservations, and the messages you send in chats.

a push notification token for your phone, so shotgun! can tell you about new messages and reservations.

this is stored on servers run on amazon web services in the united states, and a copy is kept on your phone so the app works quickly and offline.

other signed-in students can see your profile (name, username, photo, school, driving preferences and instagram handle) and the routes you post. they see your email's school domain, never the full address.

messages are only visible to the people in that chat. reservations are visible to you and the driver.

the developer can access this data to run, fix and secure the service, and to respond to reports or legal requests. it isn't shared with anyone else.

if you allow location access, shotgun! uses it on your phone to show where you are on the map and, when you ask, to fill in where you're leaving from. your live location isn't sent to shotgun!'s servers or shared with other users. only the start and end points of a route you choose to post are.

amazon web services hosts shotgun!'s accounts, database, photos and realtime messaging.

expo's push notification service delivers notifications to your phone through apple. a notification contains the sender's name and the start of the message, or that someone reserved a seat on your route.

expo's update service: each time shotgun! opens, it checks for a newer version of the app. the request includes a random id for this install, and no account details.

apple maps draws the map and turns map points into town names.

sign in with apple, google and microsoft, if you use them.

shotgun! contains no analytics, advertising or tracking code, and doesn't use cookies.

shotgun.gusfl.us is a static website. it sets no cookies and runs no analytics. like any website, the hosting provider (amazon web services) may keep standard request logs.

your account, routes, reservations and messages are kept for as long as your account exists, so your history and chats are there when you come back. they're deleted when your account is.

to delete your account, email shotgun@gusfl.us from the address on your account. your profile, photo, routes, reservations and messages are deleted from shotgun!'s servers and your sign-in is removed.

deleting the app removes the copy on your phone but doesn't delete your account.

shotgun! is for college students and isn't directed to children under 13.

if this policy changes, the new version will be posted on this page with a new date at the top.

questions about this policy: shotgun@gusfl.us