Privacy - GMV

Introduction

GMV provides two apps in the Apple App Store and Google Play store, privacy policies for both apps are available below.

The Rider App is white labeled for local transit agencies around the United States and is made available under agency brand names. This app is designed for public use by riders of the transit system for which it is branded.
The Sync App is an enterprise app designed for transit agency staff who are customers of GMV. This app is made available under the app name “GMV Sync” and is used in the context of a user’s job responsibilities.

Rider App Privacy Policy

This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you use the Rider mobile application (the “Rider App”) available on the Apple App Store and Google Play Store. The Rider App is intended for use in the United States only.

Your Consent

By downloading, installing, or using the Rider App, you consent to the collection, use, and processing of information as described in this Privacy Policy. If you do not agree, please do not download, install, or use the Rider App.

Information We Collect

When you use the Rider App, we automatically collect limited information:

Device ID
Diagnostic Information (including crash reports, performance metrics, and related data)
Location Data (if permitted): If you grant permission, the Rider App may access your device’s location to help you view nearby stops and services. This information is used only locally on your device to enhance functionality. We do not transmit, store, or share your location with our servers or third parties. If you do not grant permission, the Rider App will instead center on the agency’s service area, and you may look up stops manually.

We do not knowingly collect personally identifiable information such as names, addresses, or payment details.

How We Collect Information

The Rider App automatically collects diagnostic and device-related information through tracking and reporting tools. Location data is accessed only with your permission and remains on your device.

Information From Children

The Rider App is not directed to children under the age of 13. We do not knowingly collect information from children or allow children under 13 to create accounts. If we obtain actual knowledge that we have collected personal information from a child under the age of 13, we will promptly delete that information, unless we are legally obligated to retain such data. Please contact us at [email protected] if you believe that we have mistakenly or unintentionally collected information from a child under the age of 13.

Purpose of Collection

We collect and process diagnostic, device-related, and (if permitted) location information solely for:

Analytics
Providing core app functionality (such as showing nearby stops if you allow location access)
Improving the app’s performance, stability, security, and user experience
Performing duties as required by law

We do not use this information for targeted advertising, marketing, or tracking users across other apps or services.

Sharing of Information

We do not sell your personal information. We may share collected information only in the following circumstances:

As required by law, such as to comply with a subpoena or similar legal process.
When we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
With trusted third-party service providers who support the operation, hosting, analytics, maintenance, or improvement of the Rider App. These providers are contractually required to safeguard your data and may not use it for their own purposes.
If we are involved in a merger, acquisition, or sale of all or a portion of our assets. In that case, we will notify you via email and/or a prominent notice within the app or on our website.

We do not engage in cross-context behavioral advertising and do not “share” personal information as defined under California law.

Data Storage and Transfers

All collected information is stored securely in the United States. We do not transfer your data outside the United States. Location data is used locally on your device and is never transmitted to our servers.

Data Retention

We retain diagnostic and device-related data for one month from the date of collection. After this period, the data is automatically deleted. Location data remains only on your device and is never retained by us. Some third-party providers (such as analytics tools) may retain aggregated or anonymized data longer in accordance with their own policies.

Your Privacy Rights

Depending on your state of residence, you may have certain privacy rights, including:

The right to know what data we collect and how it is used.
The right to request deletion of your data, subject to legal exceptions.
The right to opt out of sale or sharing of personal information (where applicable).
The right to correct inaccuracies.
The right to access and obtain a copy of your data.
The right to contact us with privacy-related questions or concerns.

You may exercise these rights at any time by contacting us at [email protected]. We will verify and respond to requests within 30 days of our receipt (or within 45 days for California residents, as required by law).

How to Delete Your Data and Opt Out

Contact Us: Request deletion by emailing [email protected].
App Removal: You may delete the Rider App from your device to stop all future data collection.
Revoke Consent: Contact us at [email protected] to revoke your consent to collection and processing. This may limit or disable certain app functionality.

Security

We are concerned about safeguarding the confidentiality of your information. We provide physical, electronic, and procedural safeguards to protect the information we process and maintain. For example, we limit access to this information to authorized employees and contractors who need to know that information in order to operate, develop, or improve the Rider App. Please be aware that, although we endeavor to provide reasonable security for information we process and maintain, no security system can prevent all potential security breaches.

Do Not Track Signals

The Rider App does not respond to “Do Not Track” browser signals, as it does not track users across third-party websites or services.

Changes to This Policy

We may update this Privacy Policy from time to time in response to changing legal, regulatory, or operational requirements. If we make material changes, we will notify users by updating the Effective Date above and, where required, through the App Store/Google Play listing. Your continued use of the Rider App after any such updates take effect constitutes acknowledgement and acceptance of the changes. If you do not accept any updates to this Privacy Policy, you may delete the Rider App from your device.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us at [email protected].

California Privacy Notice

This section applies only to California residents and supplements the information provided above.

Categories of Information Collected:

Device ID
Diagnostic and crash report information
Location data (used locally on the device only; not transmitted to or stored on the server)

Purposes of Collection:

Analytics
Providing app functionality (e.g., showing nearby stops if permission is granted)
Improving app performance, stability, security, and user experience
Performing duties as required by law

Categories of Information Sold or Shared:
We do not sell your personal information. We may disclose information only as described in Section 6 above. We do not engage in cross-context behavioral advertising and do not “share” personal information as defined under California law.

Retention:
Information is retained for one month from the date of collection and then automatically deleted. Location data is not retained by us. Some third-party providers may retain anonymized or aggregated data in accordance with their own policies.

Your Rights Under the California Consumer Privacy Act (CCPA/CPRA):
If you are a California resident, you have the right to:

Access the information we’ve collected about you.
Know what categories of information we collect and how it is used.
Request deletion of your personal information, subject to exceptions.
Request correction of inaccurate information.
Obtain information about disclosures of personal information.
Opt out of sale or sharing of personal information.
Not be discriminated against for exercising your privacy rights.

To exercise these rights, please contact us at [email protected]. We will verify and respond to requests within 45 days as required by California law.

U.S. State Privacy Rights

Residents of certain states (including Colorado, Connecticut, Utah, and Virginia) may have rights similar to those described above, including rights to access, correct, delete, or obtain a copy of your personal information, and to opt out of certain types of processing. You may exercise these rights by contacting us at [email protected].

Sync App Privacy Policy

This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you use the Sync mobile application (the “Sync App”) available on the Apple App Store and Google Play Store. The Sync App is intended for use in the United States only.

Your Consent

By downloading, installing, or using the Sync App, you consent to the collection, use, and processing of information as described in this Privacy Policy. If you do not agree, please do not download, install, or use the Sync App.

Information We Collect

When you use the Sync App, we collect the following information:

Device ID
Diagnostic Information (such as crash reports, performance metrics, and related data)
Account Information: Email address and password for login authentication. Your username is already associated with your account in our system; the Sync App does not collect it directly but links it to your login credentials.
Communications Data: Text messages and voice calls initiated or received through the Sync App.
Location Data (if permitted): If you grant permission, the Sync App may access your device’s location to help you view nearby stops and services. This information is used only locally on your device to enhance functionality. We do not transmit, store, or share your location with our servers or third parties. If you do not grant permission, the Sync App will instead center on the agency’s service area, and you may look up stops manually.

We do not knowingly collect payment details or sensitive identifiers such as Social Security numbers.

How We Collect Information

We collect information in the following ways:

Automatic Collection: Device ID and diagnostic information are automatically collected through tracking and reporting tools.
User Login: Account access requires an email and password.
User-Initiated Actions: Text messages, voice calls, and other communications created by users are processed and stored.

Information From Children

The Sync App is not directed to children under the age of 13. We do not knowingly collect information from children or allow children under 13 to create accounts. If we obtain actual knowledge that we have collected personal information from a child under the age of 13, we will promptly delete that information and close the account, unless we are legally obligated to retain such data. Please contact us at [email protected] if you believe that we have mistakenly or unintentionally collected information from a child under the age of 13.

Purpose of Collection

We collect and process information for the following purposes:

Analytics
Providing core app functionality (such as account login, text messaging, and voice calling)
Improving the app’s performance, stability, security, and user experience
Performing duties as required by law

We do not use this information for targeted advertising, marketing, or tracking users across other apps or services.

Sharing of Information

We do not sell your personal information. We may share collected information only in the following circumstances:

As required by law, such as to comply with a subpoena or similar legal process.
When we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
With trusted third-party service providers who support the operation, hosting, analytics, maintenance, messaging infrastructure, or improvement of the Sync App. These providers are contractually required to safeguard your data and may not use it for their own purposes.
If we are involved in a merger, acquisition, or sale of all or a portion of our assets. In that case, we will notify you via email and/or a prominent notice within the app or on our website.

We do not engage in cross-context behavioral advertising and do not “share” personal information as defined under California law.

Data Storage and Transfers

All collected information is stored securely in the United States. We do not transfer your data outside the United States.Location data is used locally on your device and is never transmitted to our servers.

Data Retention

Because the Sync App is provided under contract with your employer or contracting agency (a transit agency), most data collected through the app, including communications, assignments, and related information, is considered customer-owned data. We retain this data for as long as required under our contract with your employer or contracting agency and for as long as necessary to comply with legal, regulatory, or operational obligations.

We may also retain certain account and diagnostic information to improve service reliability and for recordkeeping purposes. Historical data may be exported and provided to your employer or contracting agency at their request, even after your account is no longer active.

Your Privacy Rights

Depending on your state of residence, you may have certain privacy rights (such as access, correction, or deletion). Because we process data on behalf of your employer or contracting agency, most requests to exercise privacy rights, including requests to delete or export your information, must be directed to your employer or contracting agency (the transit agency).

We will assist your employer or contracting agency in responding to such requests as required by law and our contract. If you contact us directly, we may refer your request to your employer or contracting agency for handling.

How to Delete Your Data and Opt Out

Employer-Controlled Data: Because the Sync App is provided under contract with your employer or contracting agency, we cannot delete or alter customer-owned data in response to individual requests. Please contact your employer or contracting agency if you wish to exercise rights over your account data.
App Removal: You may delete the Sync App from your device at any time to stop future collection of device-based data (such as diagnostics and location, if enabled).
Revoke Consent: If you revoke consent to processing by contacting us at [email protected], this may limit or disable your ability to use the Sync App. However, your employer or contracting agency may still retain and control your data under its contract with us.

Security

We are concerned about safeguarding the confidentiality of your information. We provide physical, electronic, and procedural safeguards to protect the information we process and maintain. For example, data is encrypted while in transit and access to this information is limited to authorized employees and contractors who need to know such information in order to operate, develop, or improve the Sync App. Please be aware that, although we endeavor to provide reasonable security for information we process and maintain, no security system can prevent all potential security breaches.

Do Not Track Signals

The Sync App does not respond to “Do Not Track” browser signals, as it does not track users across third-party websites or services.

Changes to This Policy

We may update this Privacy Policy from time to time in response to changing legal, regulatory, or operational requirements. If we make material changes, we will notify users by updating the Effective Date above and, where required, through the App Store/Google Play listing. Your continued use of the Sync App after any such updates take effect constitutes acknowledgement and acceptance of the changes. If you do not accept any updates to this Privacy Policy, you may delete the Sync App from your device.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us at [email protected].

California Privacy Notice

This section applies only to California residents and supplements the information provided above.

Categories of Information Collected:

Device ID
Diagnostic and crash report information
Account information (e.g., email, password, associated user name)
Communications data (messages and calls)

Location data (used locally on the device only; not transmitted to or stored on the server)

Purposes of Collection:

Analytics
Providing app functionality (e.g., login, messaging, calling)
Improving app performance, stability, security, and user experience
Performing duties as required by law

Retention:

Because the Sync App is provided under contract with your employer or contracting agency (a transit agency), data is retained as required by that contract and for compliance with legal obligations. Historical records may be exported and provided to your employer or contracting agency at their request, even after your employment or contract ends.

Your Rights Under the California Consumer Privacy Act (CCPA/CPRA):

If you are a California resident, you have the right to:

Access the information we’ve collected about you.
Know what categories of information we collect and how it is used.
Request correction of inaccurate information.
Obtain information about disclosures of personal information.
Opt out of sale or sharing of personal information.
Not be discriminated against for exercising your privacy rights.

Deletion Requests: Because most Sync App data is processed on behalf of your employer or contracting agency, requests to delete personal information must be directed to your employer or contracting agency. We will assist your employer or contracting agency in responding to such requests as required by law and our contract.

To exercise these rights, please contact your employer or contracting agency or email us at [email protected]. If you contact us directly, we may refer your request to your employer or contracting agency for handling. We will verify and respond to requests within 45 days as required by California law.

U.S. State Privacy Rights

Because the Sync App is provided under contract with a transit agency (your employer or contracting agency), most requests to exercise privacy rights, including requests to delete or export your information, must be directed to the transit agency that manages your account relationship. We will assist the agency in responding to such requests as required by law and our contract.

If you contact us directly, we may refer your request to the transit agency for handling. You may also reach us at [email protected] for additional guidance.