Privacy Policy

We collect the following types of information:

Account information (optional — you can use the App without an account)

• Display name, and first and last name if you provide them
• Date of birth, collected at account creation and used to confirm you meet the minimum age requirement (13+)
• Email address
• Password (stored securely via Supabase — never in plain text), or your Apple/Google sign-in identity

Location data

• GPS location while you navigate and while the app is open on screen, processed on your device to show where you are on the map, to provide turn-by-turn directions, and — if "Share Anonymous Usage Data" is on — to match a ride to the mapped paths for the ride summary described below. Routing and map matching happen on your device, your GPS track is never uploaded with a ride summary, and we do not keep a continuous record of your driving.
• Your location leaves your device only for the specific features described in "Location-Based Features" below, each of which you control.
• Two of those features store a location on our servers together with your account: submitting a path report, and submitting an answer in a scavenger hunt. Both are described below. Apart from those, we do not store a location history linked to your account.

Usage data

• Device type and operating system version
• The install identifier. The routing diagnostics below are sent with a random identifier created when you install the app. It is not your name or account. We use it for one thing only — limiting how many diagnostics one installation can send in a day — and we never store it with the diagnostics: it is removed before a diagnostic is saved, so saved diagnostics cannot be linked to each other or to your device. For the daily limit we keep a short one-way code made from it and a count for the day, with no route, place, or time attached, deleted once the day is over. To check our new routing engine on enough devices before turning it on for everyone, we also keep a list of such codes for the devices that have run it, with no route, place, or time attached. Ride summaries and listing counts are sent without it.
• Routing-quality diagnostics, sent only while "Share Anonymous Usage Data" is turned on (Settings → Data & Privacy): the approximate start and end areas of routes you plan (coordinates are rounded to about 1 km before they leave your device) and route summary and comparison statistics, saved without the install identifier. We use these to compare and improve our routing engine.
• Ride summaries, sent under the same toggle at the end of a ride — with or without directions. A ride with directions is summarized whether or not you stay on the suggested route, including any stretch where you leave it before the route is recalculated. A ride without directions is summarized only while the app is open on screen; with the app closed, or your phone locked when you are not navigating, nothing is recorded. Your phone matches its GPS to the mapped paths on the device, and the summary includes the route you actually took — the specific cart-path segments you traveled, how far you covered on each, your travel speed on each, and where you stopped, plus the ride's duration and distance, the time and distance you spent moving (at 1 mph or faster, measured from your phone's GPS speed), and a coarsened start time. A ride with directions also includes the areas where you left the mapped paths. Before the summary leaves your device we trim about 150 m from each end of the ride, so it does not show where you started or finished, and we floor the start time to a 15-minute bucket. Speeds are sent as counts in 4 mph bands rather than a trace, stops as a count and a number of seconds on a path, and an area you left the paths in as a grid square of about 110 m — never one inside the trimmed ends. Your raw GPS positions are never part of a summary. Summaries carry no install identifier and are not tied to your account.
• Counts of how often in-app business listings are shown and tapped, and of which in-app pages are opened, also under the same toggle. These are counts only, reported without your account identifier.

The apps do not include third-party analytics or advertising SDKs. The Android app includes Google's Firebase Cloud Messaging so we can deliver push notifications to it.

Saved content

• Favorites (place names, addresses, and coordinates you save). Stored on your device; synced to your account when you sign in. When you delete a favorite we keep a small record that it was deleted, so the deletion reaches your other devices.
• Your recent searches, kept on your device so you can pick a destination again. These stay on the device and are not uploaded; clear them from the search screen.
• Notification and alert preferences

Scavenger hunts

If you play a scavenger hunt, we store — linked to your account — that you joined, your progress, and, for each answer you submit, where you were when you submitted it, what you answered, whether it was correct, and how far you were from the target. We need the location because reaching the place is how the game is played. Unlike the ride diagnostics above, this is not pseudonymous — it is tied to your account. If you win a prize, we also record that, and we may need your legal name, mailing address, and any taxpayer information required to report the payment.

Email preferences

Whether you have opted in or out of marketing email, and the unsubscribe token in your email footer. If an email to you hard-bounces or you mark one as spam, we add your address to a suppression list and keep it there so we do not email you again. See "Marketing Communications" below.

Subscription information

If you subscribe to Cruze Cart Premium, we receive subscription status (product, renewal state, expiration) from the store you bought it in — Apple on iOS, or Google Play on Android — to unlock premium features on your account. On Android we receive this status from Google Play through Real-time Developer Notifications and the Google Play Developer API. In-app payments are processed entirely by Apple or Google as the merchant of record; partner advertising payments and merchandise orders on our website are processed by Stripe. We do not collect, store, or have access to your credit card numbers or other payment credentials. If you redeem a promotional code, we record the code and the grant on your account. See our Data Policy for more detail.

Merchandise order information

If you buy merchandise on our website, checkout is hosted by Stripe. To fulfill and ship your order we collect your name, email address, and shipping address, along with the items ordered and the order's status. We use this only to fulfill the order, to send you order and shipping updates, and to handle returns or replacements. Stripe processes the payment and retains its own record of the order and the transaction under its terms. We do not receive your card number.

Cruze Cart Family

If you join a Family, we share your display name and your join and leave events with the Family's organizer (and any co-organizer), so they can see and manage who is in the Family. The organizer also receives an email when someone joins. Members see each other's display names; a regular member does not see other members' email addresses. Your location, routes, favorites, and ride history are not shared through a Family.

Path reports

When you report a path condition (a hazard or police presence), we store the report's location, its type, when it was submitted, and the account id of the account that submitted it. If you confirm or clear someone else's report, we store that vote with your account id as well. Your account id and identity are never shown to other riders — they see only the report itself, and votes are not visible to riders at all. We keep the submitter's account id so we can let you manage your own reports, apply rate limits, and act on false or abusive reporting. Reports are retained until they expire, are cleared by other riders, or are deleted, and they are removed if you delete your account.

These features send location off your device. Each is optional and under your control:

• Group Cruze (live location sharing): when you start or join a group, your live position, route, and destination are shared with the members of that group through our servers, for the duration you choose (a trip, the day, or until turned off). Sharing stops when you leave the group, stop sharing, or the session expires; live positions are ephemeral and session data is removed when the group ends.
• Weather: your approximate position (rounded to about 1 km) is sent to OpenWeather to check conditions near you — while navigating if weather alerts are on (they are on by default for Premium members; turn them off in the app's notification settings), and also while the map is on screen to show current conditions. It goes from your device to OpenWeather directly and is not sent to our servers.
• Scavenger hunts: submitting an answer sends your location to our servers, where it is stored with your account — see "Scavenger Hunts" below.
• Ride telemetry: at the end of a ride — with directions, or without them while the app is open on screen — a summary of the route you took may be shared with us and with the city to improve path data: the cart-path segments traveled (matched to the map on your device), the distance and travel speed on each, where you stopped, the ride's duration and distance and how much of it was spent moving, and, on rides with directions, the areas where you left the mapped paths. Before it leaves your device, about 150 m is trimmed from each end of the ride so the summary does not show where you started or finished, and the start time is floored to a 15-minute bucket; your raw GPS positions are never part of it. Nothing is recorded with the app closed or your phone locked unless you are navigating. It is not tied to your account. You can turn this off in the app (Settings → Data & Privacy).
• Search: your search text (and approximate area, to rank results) is sent to Google Places when you search for a destination.
• Map tiles: displaying the map requests tiles from MapTiler, which — like any web request — receives your IP address and the map areas requested.

Scavenger hunts are optional in-app games where you solve riddles by traveling to places. Because the game is about being somewhere, playing one collects more location data about you than the rest of the app does — and unlike our ride diagnostics, it is linked to your account.

• What we store: that you joined a hunt and your progress; and for each answer you submit, the location you submitted it from, the answer text, whether it was correct, how far you were from the target, and when you submitted it — all recorded against your account.
• Why: to run the game, to judge answers fairly, and to determine winners.
• Who sees it: our team. Other players do not see your submissions or where you were. If you win, we may announce that you won.
• Prizes: to pay a prize we may need your legal name, mailing address, and taxpayer information required for reporting.
• Retention: hunt records are kept while the hunt is running and afterwards as a record of the result. Deleting your account deletes your participation and submissions.

If you would rather not share this, do not join a hunt — nothing else in the app depends on it.

We use the information we collect to:

• Provide, maintain, and improve the Cruze Cart app and services
• Create and manage your account and subscription
• Operate the features you enable (Group Cruze, weather alerts, notifications)
• Run contests and scavenger hunts, judge entries, and award prizes
• Process transactions and send related information
• Send service-related communications (e.g., account confirmations, security alerts)
• Send optional marketing email, and decide when to send it, based on when you created your account and when you last used the app — you can opt out at any time
• Respond to your comments, questions, and support requests
• Monitor and analyze usage trends to improve user experience
• Detect, investigate, and prevent fraudulent or unauthorized activity
• Comply with legal obligations

With your permission, the app shows two different kinds of notifications, and only one of them involves our servers:

• On-device notifications. Weather alerts and Cruze Reminders (the occasional nudge when you haven't ridden in a while) are scheduled and delivered entirely on your device. They are not sent through Apple's or Google's push services, and the activity that triggers them never leaves your phone. Weather alerts are a Premium safety feature and are on by default for Premium members. Cruze Reminders are promotional in nature and are on by default. Turn either off in the app's notification settings.
• Push notifications. Group Cruze activity, Cruze Cart Family activity, premium-expiration notices, and — only if you opt in, for example on the “Stay in the loop” screen when you first open the app — local promotions and product news are delivered through Apple Push Notification service (iOS) and Firebase Cloud Messaging (Android). To address them we store a push token for your device.
• Without an account. You do not need an account to get promotions or product news. If you turn either on while signed out, we store only your device's push token, whether it is an iPhone or Android phone, the city selected in the app, and which of the two you turned on. It is not linked to an account and contains nothing that identifies you. Turning both off in the app removes it right away; after you uninstall the app, it is removed the next time a notification to it fails.
• “Notify me” on a route that is coming soon. If you ask to hear when a route opens, we store your device's push token, whether it is an iPhone or Android phone, and which route you asked about, with or without an account. We send you one notification when that route opens and then delete the request. Tapping the button again, the route's season ending before it opens, or the route being taken down (no longer coming soon and left unchanged for 30 days) deletes it too.

You can turn categories off in the app's notification settings or disable notifications entirely in your device settings. A signed-in device's push token is removed when you sign out or delete your account; if promotions or product news is still on for that device after you sign out, it is kept without an account as described above. Deleting your account also turns both off on the device you delete it from.

Marketing from us is limited, optional, and easy to stop. Here is all of it in one place:

• Email. If you have an account and have not opted out, we may send you a small number of emails: getting-started tips shortly after you sign up, a request to review the app a few weeks in, and a note if you have not opened the app in a while. We decide when to send these from when your account was created and when you last signed in. Every one has an unsubscribe link, and unsubscribing stops all of them.
• Promotional push notifications. Only if you opt in, with or without an account. Local offers and product news, turned on and off in the app's notification settings.
• Cruze Reminders. On-device nudges when you have not ridden recently. On by default; turn them off in the app's notification settings. These never leave your phone.

Service messages — receipts, password resets, security notices, and notices about changes to these documents — are not marketing, and you cannot unsubscribe from them while you have an account.

Suppression list. If an email to you hard-bounces, or you mark one as spam, we add your address to a suppression list and keep it there so that we do not email you again. We retain that record for as long as we operate the mailing system, including after you unsubscribe or delete your account — keeping it is what makes the suppression work.

The cruzecart.com website does not use advertising, analytics, or cross-site tracking cookies. The Site uses your browser's local storage for functional purposes only:

• Your sign-in session for the Partner Portal (so you stay signed in between visits)
• Your theme preference (light or dark mode)
• Short-lived flags that make pages behave correctly during a visit

Some pages hand you off to a third party that sets its own cookies on its own domain under its own policy — Supabase for sign-in, and Stripe for checkout. We do not control those.

You can clear site data at any time through your browser settings; doing so signs you out and resets your preferences.

Cruze Cart, LLC does not sell, rent, or trade your personal information to third parties for their marketing purposes.

The App shows paid placements from local business partners (labeled "Promoted" or similar), but partners do not receive your personal information — no personal browsing or interaction profile is shared with them. Your data is used only to operate and improve the Cruze Cart service.

We may share your information only in the following limited circumstances:

• Group members you choose: your live location, route, destination, display name, and arrival status are shared with members of a Group Cruze group while you participate in it.
• Your Cruze Cart Family: if you join a Family, your display name and your join and leave events are shared with the Family's organizer and co-organizer, and your display name is visible to the other members. The organizer is emailed when you join.
• Service providers: we share data with the providers that operate parts of the service (listed in the Data Policy) solely to run the app. These providers are contractually obligated to protect your data and may not use it for their own purposes.
• Cities and public agencies: de-identified ride and path-usage data, containing no account identifiers or names, is made available to the city so it can maintain and plan the cart-path network. It is more detailed than a simple total — see "Data Shared with Cities" below for exactly what they see.
• Legal requirements: we may disclose your information if required by law, court order, or governmental authority.
• Business transfers: in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
• With your consent: we may share information for any other purpose with your explicit consent.

Cruze Cart exists because of a cart-path network a city built and maintains. We give the city usage data so it can look after it — where paths are busy, where they are not, and when. This section describes exactly what that includes, because "shared with the city" on its own is too vague to be a real disclosure.

A city dashboard can show:

• Ride counts and totals, how ride length and duration are distributed, and typical moving speed (speed while carts are moving, leaving out time spent stopped)
• When riding happens — by hour of day and day of week
• How much each individual path segment is used, and a heat map of usage built from points at roughly street-level resolution
• Travel speed on each path — the average, the 85th-percentile speed traffic engineers use in a speed study, how much of it is above a posted limit where the map records one, and which paths have got slower than they were. A path is only shown once enough separate rides have contributed to it; paths below that floor are withheld, and the dashboard says so rather than pretending the map is complete.
• Where carts stop — how often and for how long riders sit stationary on each path, which is how a city finds the crossing or gate that holds people up
• Areas where riders following directions leave the mapped paths, counted inside grid squares of about 110 m. These point at paths the map is missing. Nothing is recorded inside the trimmed 150 m at either end of a ride, so this cannot give back the start or finish the trim removed, and a square with only a handful of events is withheld from the city entirely.
• The same usage figures re-cut the way a maintenance team asks for them: how many rides a day pass each live hazard, and use of tunnels, bridges and each kind of path surface
• Spreadsheet exports of daily ride counts, per-path usage, per-path speeds, and tunnel and bridge use

What it does not include: your name, your account, your email, your device's install identifier, or any individual ride that could be picked out and followed. The underlying summaries already had about 150 m trimmed from each end and their start times rounded, on your device, before they ever reached us.

This data comes only from riders who leave "Share Anonymous Usage Data" on. Turning it off in Settings → Data & Privacy stops your rides contributing.

Agencies agree to use it only for maintaining and planning the path network, not to attempt to identify anyone, and not to redistribute it (see "Government and Municipal Users" in the Terms of Service). Note that a public agency may itself be subject to open-records laws that require it to disclose records it holds.

We retain your personal information for as long as your account is active or as needed to provide services. Group Cruze live positions are ephemeral; group session data is removed when a group ends or expires. Path reports you submit stay until they expire, are cleared by other riders, or are removed.

You can permanently delete your account at any time from the App's settings (Settings → Account → Delete Account). Deletion is immediate. This section is the controlling description of what deletion does — where the apps or our other documents describe it more loosely, this is what actually happens.

Deleted with your account: your profile and sign-in credentials, date of birth, display name, favorites, preferences, push tokens, subscription records, Family membership, your path reports and votes, and your scavenger-hunt participation and answer submissions.

Not deleted, and why:

• Records of legal acceptance — kept as evidence of a contract, as described below.
• Diagnostics and counts — ride summaries, routing diagnostics, and listing counts were never linked to your account and are saved without any identifier for your device, so there is nothing connecting them to you for us to find and delete. They remain in our aggregates. This is a real limit of de-identified data, not an exception we are carving out.
• Some records are detached, not removed — for example, if you suggested a search keyword as a partner, the keyword stays and your id is removed from it.
• Records held by payment providers — Apple, Google, and Stripe keep their own transaction records under their own policies.

You can also email support@cruzecart.com and we will fulfill the request within 30 days.

Records of consent. When you accept these documents — for example the Terms at signup, or the advertising disclaimers at checkout — we keep a record of that acceptance: which document and version you accepted, the date and time, the email address used, and the IP address the acceptance came from. These records are evidence that a contract was entered into, so we retain them after your account is deleted; the record is unlinked from your deleted account and kept against the email address used at the time.

We take reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission (TLS), secure authentication via Supabase, row-level access controls on stored data, and restricted access to personal data within our team. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

The Cruze Cart app is not directed to children under the age of 13, and account creation requires a date of birth confirming the user is at least 13 (consistent with the Children's Online Privacy Protection Act). We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe we have inadvertently collected information from a child under 13, please contact us immediately at support@cruzecart.com and we will delete it promptly.

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data
• Object to or restrict certain types of processing
• Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at support@cruzecart.com.

Several US states (including California, Colorado, Connecticut, Texas, and Virginia) give their residents specific rights over personal information. Depending on your state of residence, you may have the right to:

• Know and access the personal information we have collected about you
• Correct inaccurate personal information
• Delete your personal information
• Receive a portable copy of your personal information
• Not receive discriminatory treatment for exercising these rights

Cruze Cart does not sell personal information, does not share it for cross-context behavioral advertising, and does not use sensitive personal information beyond what is necessary to provide the service — so there is nothing to opt out of under those provisions. To exercise any right, email support@cruzecart.com from the address associated with your account (or provide information sufficient for us to verify your identity). You may use an authorized agent where your state's law provides for one; we will verify the agent's authorization. We respond within the time required by your state's law, and you may appeal a refusal by replying to our response.

Cruze Cart is operated from the United States and is designed for use in the United States; your information is processed and stored on servers in the United States. If you use Cruze Cart from the European Economic Area, the United Kingdom, or another region with data protection laws such as the GDPR, we process your personal data on these legal bases: performance of our contract with you (providing the app and your account), our legitimate interests (service improvement, security, and fraud prevention), your consent (optional features such as Group Cruze sharing, diagnostics, and marketing email — each of which you can withdraw at any time in the app or via the unsubscribe link), and compliance with legal obligations.

You have the rights described in "Your Rights" above, and you may also lodge a complaint with your local supervisory authority. To exercise any right, contact support@cruzecart.com.

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you via email or in-app notification. Your continued use of Cruze Cart after any changes constitutes your acceptance of the updated policy.

This Privacy Policy is provided by Cruze Cart, LLC, a Georgia limited liability company. If you have questions or concerns about this Privacy Policy or our data practices, please contact us at support@cruzecart.com or by mail at Cruze Cart, LLC, PO Box 202, Peachtree City, GA 30269.