Privacy Policy

Effective April 13, 2026

Overview

Stratus Transit ("Stratus," "we," "our") is operated by CloudPath LLC. We built Stratus with privacy as a core principle. We collect the absolute minimum data needed to show you nearby train departures.

Location Data

Stratus uses your device's location to find nearby CTA L stations and calculate travel times. Here's what's important:

  • Location stays on your device. Your GPS coordinates are never transmitted to our servers or any third party.
  • We only request "When In Use" location permission. Stratus never tracks your location in the background for location purposes.
  • When fetching departure times, we send only the station ID (a public identifier like "40380") to our API — not your coordinates.
  • You can use Stratus without granting location permission, though nearby station detection will be unavailable.

Data We Collect

Stratus does not collect personally identifiable information (PII). We do not collect your name, email address, phone number, or any account information.

All app settings, pinned routes, buffer profiles, and preferences are stored locally on your device and in your iCloud account (via App Group storage). We cannot access this data.

Crash Reporting

We use TelemetryDeck to collect anonymous crash reports and basic usage signals. TelemetryDeck is a privacy-first analytics provider that:

  • Does not collect or store IP addresses
  • Does not use advertising identifiers
  • Does not create user profiles or track individuals
  • Generates anonymous, aggregated statistics only

This data helps us identify and fix crashes. No personal information is included in these reports.

Third-Party Services

Stratus interacts with the following external services:

  • CTA Train Tracker API (via our CloudFront proxy) — to fetch real-time departure data. We send station IDs only; no personal data is transmitted.
  • Apple StoreKit — to process subscription purchases. All payment information is handled entirely by Apple. We never see or store your payment details.
  • TelemetryDeck — anonymous crash reporting as described above.

Subscriptions

Stratus offers optional premium subscriptions managed through the Apple App Store. Payment processing, billing, and subscription management are handled entirely by Apple. CloudPath LLC does not have access to your payment information. You can manage or cancel your subscription at any time through your device's Settings > Subscriptions.

Children's Privacy

Stratus is rated 4+ and does not knowingly collect any personal information from children. Since we do not collect personal information from any user, there is no age-specific data collection concern.

Your Rights (GDPR and International Users)

If you are located in the European Economic Area, United Kingdom, or other jurisdiction with data protection laws, you have the following rights:

  • Right to access: You can request information about what data we process. Since we do not collect PII, there is no personal data to provide.
  • Right to deletion: You can delete all locally stored app data by uninstalling Stratus from your device.
  • Right to opt out: You can disable crash reporting by contacting us at support@ridestratus.com.

Legal basis for processing: We process anonymous crash data under legitimate interest (maintaining app stability). No consent is required for anonymized, non-personal data under GDPR.

Data Security

All communication between Stratus and our servers uses HTTPS encryption. Departure data is cached briefly (15 seconds) on our CDN to improve performance and is not stored permanently.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of Stratus after changes constitutes acceptance of the updated policy.

Contact

If you have questions about this privacy policy, contact us at:
support@ridestratus.com

CloudPath LLC
Chicago, Illinois