TransitEase Privacy Policy

Effective Date: February 19, 2025
Last Updated: March 13, 2025

1. Introduction

TransitEase, owned and operated by Selhurst LLC ("we," "us," or "our"), is committed to protecting the privacy and security of all users ("you" or "your"). This Privacy Policy outlines how we collect, use, protect, and share data in connection with our mobile application ("App") designed for transit operators, specifically in partnership with King County Metro. By using our App, you agree to the terms and conditions described in this Privacy Policy.

2. Information We Collect

2.1 Location Data

We collect location data only in two specific scenarios:a) When users submit an incident report to enhance transit security.b) To display the nearest comfort station (bathrooms) for user convenience.

Location data used to display comfort station locations is not stored unless users report an issue with a specific comfort station. In such cases, the reported data is anonymized using industry-standard techniques and stored securely to address the issue.

2.2 Incident Details

Anonymous details such as coach number, route, run, date, and time may be included in incident reports. These details are shared with appropriate transit security teams to address safety concerns.

2.3 User Account Information

We collect minimal account information necessary for app functionality, such as username and password. This information is encrypted and stored securely.

2.4 Device Information

We collect device-specific information such as device type, operating system version, and app version to ensure proper functionality and troubleshooting.

3. How We Use Data

3.1 Primary Purposes

a) To enhance transit security by enabling incident reporting.b) To provide users with the nearest comfort station (bathroom) location.c) To anonymously share aggregated data for improving transit services and addressing sanitation issues.

3.2 Data Anonymization

All reported data is anonymized using industry-standard techniques such as data hashing and aggregation. No personally identifiable information is collected, stored, or shared under any circumstances.

3.3 Compliance

Data collected through the App is not used for marketing or advertising purposes. We comply with applicable data protection laws, including but not limited to GDPR and CCPA.

3.4 Verification

Badge ID information consists of a unique identifier assigned to county employees. This information is used solely to verify employment status against the Union database. The verification process is automated and only confirms whether the ID exists in the database. No personal information beyond the ID verification status is processed or stored. This process ensures compliance with applicable data protection laws, including but not limited to GDPR and CCPA.

4. Data Sharing and Transfer

4.1 Third-Party Sharing

We do not share data with any third parties for commercial purposes. Anonymous incident reports may be shared exclusively with King County Metro or authorized transit authorities (as defined in our contract with King County Metro) for security and operational improvements.

4.2 Legal Compliance

We may disclose anonymized data when required by law, to comply with legal processes such as a court order or subpoena, or to protect our legal rights.

5. User Rights and Choices

5.1 Account Management

Users can access, update, or delete their account information directly through the app on both iOS and Android platforms.

5.2 Account Deletion

Upon account deletion request, all personal data associated with the account will be permanently removed from our active servers within 30 days, except for data required to comply with legal or regulatory obligations.

5.3 Operator Data

Pay, tracking information (routes, runs, accruals), and other operator-related data are only viewable by the user. TransitEase and Selhurst LLC have no access to this information. Users may delete this data at their discretion.

5.4 Data Access and Consent

Users have the right to:a) Request access to the data collected about them.b) Withdraw consent for data collection (where applicable).c) Object to any future data processing practices that may arise.d) Request data portability where technically feasible.

To exercise these rights, please contact us using the information provided in Section 10.

6. Data Retention and Security

6.1 Retention Period

Anonymous incident data will be stored for a period of 5 years to comply with operational and legal requirements. After this period, the data will be securely deleted or further anonymized for statistical purposes.

6.2 Security Measures

We implement and maintain robust technical and organizational security measures to protect your data, including:

• Fully isolated deployment in air-gapped environments for maximum security and compliance
• End-to-end encryption for all data
• Encrypted data storage on Google Cloud with strict access controls
• Data encryption in transit and at rest using industry-standard protocols
• 24/7 security monitoring and automated threat detection
• Regular security audits and penetration testing
• Compliance with SOC 2, HIPAA, GDPR, and other regulatory requirements

6.3 Data Breach Notification

In the unlikely event of a data breach affecting your personal information, we will notify all affected users via email within 72 hours of discovering the breach. The notification will include information about the nature of the breach, the potential impact, and steps we're taking to address the situation. We maintain comprehensive safeguards and monitoring to prevent such incidents.

7. Government and Agency Role

The TransitEase App is provided under a contract between King County Metro and Selhurst LLC. The data collected through this App is used solely for improving transit security and deploying resources, such as security guards or transit police, as authorized by King County Metro.

Aggregated statistics may be provided to King County Metro for review, as outlined in the agreement with Selhurst LLC. King County Metro ensures all transit operators have free access to the App.

In the event of a government or law enforcement request for data, we will carefully review each request and only provide data when legally required to do so, after ensuring the request's validity and scope.

8. Children's Privacy

The TransitEase App is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under the age of 18, we will take steps to delete that information as soon as possible.

9. Policy Updates

We may update this Privacy Policy from time to time. Any changes will be communicated via app notifications and by updating the "Last Updated" date at the top of this policy. We encourage you to review this policy periodically.

10. Contact Us

For questions, concerns, or to exercise your data rights regarding this Privacy Policy, please contact us at:

Email: privacy@transitease.app
Address: 13110 ne 177th pl #1134 Woodinville WA 98072

We will respond to your request within 30 days.

11. Disclaimer of Liability

By using the TransitEase App, users agree to the terms and conditions of this Privacy Policy. TransitEase is a supplementary tool to aid transit operators. It is the responsibility of users to adhere to their employer's policies, local traffic laws, and safety regulations.

TransitEase and Selhurst LLC disclaim liability for any misuse of the app, including but not limited to false reporting, failure to maintain accurate records, or reliance on the app for critical decisions without proper verification. However, this disclaimer does not exempt us from liability in cases of gross negligence, willful misconduct, or any other liability that cannot be excluded under applicable law.