Last Updated: August 6, 2026 Effective Date: August 6, 2026
Introduction
This Privacy Policy explains how Innovaiden Inc. ("Innovaiden," "we," "us," or "our") collects, uses, shares, and protects personal information when you use the City Commute iOS application (the "App"). City Commute is a Stockholm public-transit companion that provides live departures, a live map on which every vehicle moves continuously, a trip planner, an AI assistant, AR trains, a parking-sign scanner, saved places, and alarms and widgets.
Innovaiden is the data controller for the personal information processed through the App.
Please read this Privacy Policy carefully. By downloading, installing, or using the App, you agree to the practices described here. If you do not agree, please do not use the App.
This policy applies specifically to the City Commute iOS app. Our general website and platform privacy practices are described in our main Privacy Policy.
1. Personal Information We Collect
We collect only the information needed to operate the App and provide its features. Specifically:
1.1 Account Information
Email address, username, and user ID. When you create an account or sign in, we collect your email address and the username you choose. A user ID identifies your account on every authenticated request. We use AWS Simple Email Service (SES) to send verification and password-reset codes to your address. Your email is linked to your account so you can sign in across devices and so we can secure and support your account.
Name (Sign in with Apple). If you use Sign in with Apple, Apple provides your name (given and family name) on first sign-in, and we store it on your account. Apple may provide a private relay email address rather than your real email; we treat the relay address the same way we treat any account email.
Legal basis (GDPR): Performance of a contract — Article 6(1)(b). We need this information to create and operate the account you have requested.
1.2 Location Information
Precise (GPS) and coarse location. With your permission, the App accesses your device location to power features such as nearby departures, centering the live map, trip planning, location-aware AI assistant requests, and the nearest-stop departures widget.
For these features, your location is sent transiently to our backend only at the moment a feature needs it (for example, to find the stops nearest to you). It is not stored against your account for these uses, and we do not build a movement history or use your location for tracking or advertising.
One exception: parking-sign scans. When you scan a parking sign, the location of the scan is stored with that scan on your account so your scan history is useful to you. Scan locations follow the retention rules in Section 1.3 — kept for 120 days, deletable by you in-app at any time, and deleted with your account.
Legal basis (GDPR): Consent — Article 6(1)(a), captured through the iOS location permission prompt; and our legitimate interest in providing the transit features you request — Article 6(1)(f). You can withdraw consent at any time in the iOS Settings app.
1.3 Parking-Sign Scans (Photos and Scan Location)
When you use the parking-sign scanner, the photo you capture is uploaded to our backend for analysis, and the photo — together with the location where you scanned it — is stored on your account so you can revisit your scans.
- Retention: sign-scan photos and their scan locations are kept for 120 days, after which they are automatically deleted.
- Your control: you can delete any scan in-app at any time before then.
- Account deletion: deleting your account permanently deletes all of your stored scans and scan locations.
Legal basis (GDPR): Performance of a contract — Article 6(1)(b) (providing the scanner and your scan history); and consent — Article 6(1)(a) — captured through the iOS camera and location permission prompts.
1.4 Microphone and Speech
Voice input. If you use the voice features of the AI assistant, the App accesses your microphone to capture your spoken request. Speech is processed to fulfil your request, and on-device speech recognition is used where the device supports it. We do not store your voice recordings or transcripts against your account.
Legal basis (GDPR): Consent — Article 6(1)(a), captured through the iOS microphone and speech-recognition permission prompts.
1.5 Camera
The App accesses your camera, with your permission, for two features:
- Parking-sign scanner. Captured sign photos are uploaded and stored as described in Section 1.3.
- AR trains. The augmented-reality view renders your camera feed on your device only, to overlay approaching trains on the world around you. Nothing from the AR camera view is uploaded or stored.
Legal basis (GDPR): Consent — Article 6(1)(a), captured through the iOS camera permission prompt.
1.6 User Content
To provide the service, we store content you create in the App, linked to your account:
- Saved places (home, work, and other favourites)
- Saved stops and your departures board configuration
- Saved routes and trip templates
- Trip history
Legal basis (GDPR): Performance of a contract — Article 6(1)(b). This content is what makes the App useful to you across sessions and devices.
1.7 Subscriptions and Purchase State
If you subscribe to City Commute Premium, the purchase is made through Apple and processed by Apple. The App sends the signed App Store transaction to our backend to verify it, and we store your subscription and entitlement state (whether your account has premium, and until when) on your account. We never receive or store your payment-card details — Apple handles all payment processing.
Legal basis (GDPR): Performance of a contract — Article 6(1)(b).
1.8 Beta Bug Reports (TestFlight Builds Only)
If you use a pre-release TestFlight build of the App, it includes an in-app bug reporting feature. When you choose to submit a report, we collect the report you write together with basic app and device context needed to reproduce the issue. This feature exists only in TestFlight beta builds — App Store builds of the App do not include it.
Legal basis (GDPR): Consent — Article 6(1)(a) (you choose to submit each report); and our legitimate interest in fixing defects in the beta — Article 6(1)(f).
1.9 No Tracking
City Commute does not track you. Specifically, the App:
- Does not use the Advertising Identifier (IDFA)
- Does not present an App Tracking Transparency (ATT) prompt, because we do not track
- Does not include third-party advertising or third-party analytics SDKs
- Does not sell or share your personal information for advertising
1.10 AI Assistant and Sign Scanner Processing
The App offers an AI assistant and an AI parking-sign scanner.
- Cloud AI (default). Your assistant questions and scanned sign photos — and your location, if you have shared it — are sent to our AI provider, AWS Bedrock (Anthropic Claude models), to generate the answer. This data is used only to answer your request and is not used to train AI models. Assistant questions are not stored against your account; sign-scan photos and locations are stored as described in Section 1.3.
- On-device AI (optional). Where your device supports Apple Intelligence, you may enable on-device assistant processing in Settings. In that mode your request is processed on your device and is not sent to our servers or to a third-party AI provider.
Legal basis (GDPR): Performance of a contract — Article 6(1)(b) (to provide the AI features you request); and consent — Article 6(1)(a) — for any location you choose to share.
2. How We Use Personal Information
We use the information described above only to:
- Create, secure, and manage your account, and verify your email address
- Provide the App's features: live departures, the live map, trip planning, the parking-sign scanner and your scan history, the AI assistant, AR trains, saved places and stops, saved routes, trip history, and alarms and widgets
- Respond to your AI assistant, voice, and camera requests
- Verify your App Store purchases and apply your premium entitlement
- Investigate and fix issues you report through the TestFlight beta bug reporter
- Maintain the security and integrity of the App and prevent abuse
- Comply with our legal obligations
We do not use your information for advertising or for cross-app or cross-site tracking.
3. How We Share Personal Information
We do not sell, rent, or lease your personal information. We share information only with the processors needed to run the App, and only as necessary to provide the service:
3.1 Service Providers (Processors)
- Amazon Web Services (AWS) — cloud hosting and infrastructure that runs the App's backend, in the European Union and the United States. This includes Amazon S3 (storage of sign-scan photos), AWS Simple Email Service (SES) (account verification and transactional email), and AWS Bedrock (Anthropic Claude models) (the AI provider that powers the cloud assistant and the parking-sign scanner; see Section 1.10 — your requests are not used to train AI models).
- Apple — Sign in with Apple (authentication) and App Store subscriptions (payment processing and subscription management). Apple processes this data under its own privacy policy.
- Trafiklab / SL (Storstockholms Lokaltrafik) — the public-transit data services we query for departures, vehicle positions, and journey planning. These queries contain only what is needed to answer them (such as stop identifiers or map coordinates) — no account data is shared with Trafiklab or SL.
Our processors are contractually bound to protect your information and to process it only on our instructions.
3.2 Legal Requirements
We may disclose personal information where required by law, such as in response to valid legal process, to comply with regulatory requirements, or to protect the rights, property, or safety of Innovaiden, our users, or the public.
4. Data Retention
| Data | How long we keep it |
|---|---|
| Account data (email, username, name, user ID) | Until you delete your account |
| Saved places, saved stops, departures board, saved routes, trip templates, trip history | Until you delete the item or delete your account |
| Parking-sign scans (photo + scan location) | 120 days, or sooner if you delete the scan in-app; deleted with your account |
| Location used for departures, the live map, trip planning, the assistant, and widgets | Transient — processed in the moment, not stored |
| Voice input | Processed to fulfil the request — not stored |
| Subscription / purchase state | While your account exists; Apple retains its own transaction records under Apple's policies |
| Beta bug reports (TestFlight builds only) | For the duration of the beta programme while we investigate; deleted on request |
When you delete your account, the associated account data — including your saved content and your stored sign scans — is permanently deleted as described in Section 7.
5. International Data Transfers
The App's backend runs on AWS infrastructure in the European Union and the United States. If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, some of your personal information will be transferred to and processed in the United States.
We rely on the following safeguards for these transfers:
- EU Standard Contractual Clauses (SCCs), as incorporated into the AWS GDPR Data Processing Addendum.
- AWS's certification under the EU-U.S. Data Privacy Framework (and the UK and Swiss extensions, where applicable).
These measures are intended to provide an adequate level of protection for your personal information when it is transferred outside the EEA, the United Kingdom, or Switzerland.
6. Security
We implement technical and organizational measures to protect your personal information, including:
- Encryption in transit using TLS for all communication between the App and our backend
- Encryption at rest for stored data, using AWS Key Management Service (KMS)
- Authentication using signed JSON Web Tokens (JWT) to secure access to your account
- Access controls and monitoring to limit and detect unauthorized access
No system is completely secure, but we take reasonable measures to protect your information. Please keep your account credentials confidential and contact us if you suspect unauthorized access.
7. Your Privacy Rights (GDPR)
If you are located in the EEA, the United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR) and UK GDPR (Articles 15–22):
- Right of access (Art. 15) — confirm whether we process your personal data and receive a copy.
- Right to rectification (Art. 16) — correct inaccurate or incomplete data.
- Right to erasure (Art. 17) — request deletion of your data. The App includes an in-app Delete Account function (Settings → Delete Account) that permanently deletes your account, including your saved places, stops, routes, trip history, and stored sign scans.
- Right to restriction (Art. 18) — limit how we process your data in certain situations.
- Right to data portability (Art. 20) — receive your data in a structured, commonly used, machine-readable format.
- Right to object (Art. 21) — object to processing based on legitimate interests.
- Right to withdraw consent — where processing is based on consent (such as location, microphone, or camera), withdraw it at any time without affecting prior processing. You can withdraw permissions in the iOS Settings app.
Right to lodge a complaint. You have the right to lodge a complaint with a supervisory authority. In Sweden, this is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, "IMY") — https://www.imy.se. You may also contact the supervisory authority in your country of residence.
To exercise any of these rights, contact us at support@innovaiden.com. We may request information to verify your identity before acting on a request, and we will respond within the timeframe required by applicable law.
8. Subscriptions
City Commute Premium is billed through your Apple ID. To manage or cancel your subscription, use your device's Settings → your name → Subscriptions (or the App Store's subscription management). Cancellation and refunds are handled by Apple; refund requests go through Apple at reportaproblem.apple.com. When your subscription lapses, your account simply returns to the free tier — your data is unaffected.
9. Account Deletion
You can permanently delete your account at any time from inside the App: Settings → Delete Account. This removes your account and all associated data — email, username, name, saved places and stops, saved routes and templates, trip history, and your stored parking-sign scans and their locations. If you cannot reach the in-app control, email support@innovaiden.com and we will process the deletion for you.
10. Children's Privacy
The App is not directed to individuals under the age of 16, and we do not knowingly collect personal information from children under 16. If we learn that we have collected such information, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at support@innovaiden.com.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the App, or legal requirements. When we make material changes, we will update the "Last Updated" and "Effective Date" above and, where appropriate, provide notice within the App. Your continued use of the App after changes become effective constitutes acceptance of the updated Privacy Policy.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices for the City Commute iOS app, please contact us:
Innovaiden Inc.
Email: support@innovaiden.com
For data subject rights requests, please use the email address above and provide sufficient detail to verify your identity and process your request.
This Privacy Policy is effective as of August 6, 2026.