Privacy Policy

Crossbuck ("we", "us") makes the Crossbuck app and the crossbuck.app website. This policy explains what we collect, why, and the choices you have. The short version:

• Your GPS trail stays on your phone. We learn about crossings, not where you've been.
• You don't need an account. Signing in with Apple or Google is optional.
• We don't sell your personal information or use it for targeted advertising.
• You can delete your account in the app at any time.

What we collect and why

Your account

When you first open the app, it creates a guest account: a random identifier with no name or email attached. It lets the app keep your settings and credit your help to other drivers.

If you choose to sign in with Google, Google shares your email address and name with our sign-in provider, Firebase Authentication, which stores them with your account. If you sign in with Apple, we don't ask Apple for your name or email. Our own database stores only your account's random identifier.

Location

With your permission, the app uses your phone's precise location, including in the background while you drive, to notice when you approach, wait at, or pass a railroad crossing. That processing happens on your phone, and your GPS trail is not sent to us. What we do receive:

• Crossing events: which crossing you waited at, and when the wait started and ended. This is how Crossbuck detects blocked crossings and warns other drivers.
• Area lookups: to check crossings near you, the app asks for the status of the general area you're in (a map area several miles across), not your exact position.
• Avoided crossings: whether you took a different route after a heads-up, so we can count time saved honestly.

Crossing events are linked to your account identifier so we can prevent abuse and credit your help. You can turn off location access in your phone's settings at any time; Crossbuck's crossing history still works without it.

Notifications

If you allow notifications, we store a push token from Apple or Google so we can send the alerts you've asked for, such as updates about crossings you've saved.

App health and security

• Crash reports (Firebase Crashlytics) and usage statistics (Firebase Analytics), such as which features are used. These never include your location, and advertising-ID collection is turned off.
• Device integrity checks (Apple App Attest and Google Play Integrity) confirm that requests come from the genuine Crossbuck app.

The website

crossbuck.app doesn't use cookies or analytics. Our hosting provider, Cloudflare, processes standard technical information such as your IP address and browser type to deliver and protect the site.

How we use information

• To run Crossbuck: detect likely blockages, warn drivers, show crossing history, and suggest a way around.
• To keep Crossbuck secure and prevent abuse, such as fake reports.
• To improve accuracy and fix problems.
• To publish aggregate statistics, like our public counters. These never identify anyone.
• To comply with the law.

How we share information

• Service providers that run Crossbuck for us, under contracts that limit how they use the data: Google (Firebase and Google Cloud), Cloudflare, and Apple and Google for sign-in and notifications.
• Aggregate, de-identified information about crossings, such as "this crossing is often blocked 5–6 PM". We may publish it or share it with partners such as cities, researchers or navigation services. It cannot be used to identify you.
• When required by law, or to protect the safety and rights of people and of Crossbuck.
• If Crossbuck is sold or merged, in which case this policy continues to apply to your information.

We do not sell your personal information, and we do not share it for targeted advertising.

How long we keep it

• Account information: until you delete your account.
• Crossing events: linked to your account for up to 90 days, then kept only as aggregate statistics.
• Server logs: up to 30 days.
• Crash reports and usage statistics: the shortest retention period our providers offer.

Your choices and rights

• Location and notifications: turn them on or off in your phone's settings.
• Delete your account: in the app, go to Settings, then Delete account. We delete your account and the data linked to it. Deleting the app also removes the data stored on your phone.
• Depending on where you live, including California, Texas, Virginia and Colorado, you may have the right to access, correct or delete your personal information, and to appeal our decision. Email privacy@crossbuck.app. We won't treat you differently for using these rights.

Precise location is considered sensitive information under some state laws. We only use it with your permission, and you can withdraw that permission at any time in your phone's settings.

Children

Crossbuck is for drivers and isn't directed to children under 13. We don't knowingly collect information from them. If you believe a child has given us information, contact us and we'll delete it.

Security

We protect information with encryption in transit and access controls. No system is perfectly secure, but we work to protect your information and collect as little as we can.

Where information is processed

Crossbuck is run from the United States, and your information is processed there.

Changes to this policy

If we make material changes, we'll tell you in the app or on this page before they take effect. The effective date at the top shows when this policy last changed.

Contact

Questions or requests: privacy@crossbuck.app.