LegalLast updated • 13 October 2026

Privacy Policy

How Shoo. handles your personal information. The English text applies.

On this page

Shoo. is made by Korelda Pty Ltd (ABN 68 702 693 776), New South Wales, Australia (“we”, “us”). Shoo. helps you get around New South Wales on public transport. We collect as little as we can, we never sell your information, and there are no ads, trackers or analytics in the app. This policy explains how we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

What stays on your iPhone

Your location. Used to show nearby stops, plan trips from where you are and guide your walk. It is processed on your iPhone. When you plan a trip from where you are, that starting point passes through our server on its way to Transport for NSW (see below), without being linked to you; we don’t store your location unless you choose to share it with friends during a trip (see Friends below).
Recent searches, reminders and trip progress. Kept on your iPhone only.
Motion. During a trip, the motion sensor on your iPhone tells the app when you’re on board (for example underground). It is read on your iPhone and never leaves it.
Your profile photo, without friends. If you add one and have no friends in Shoo., it stays on your iPhone. With friends, see below.

Your account

You need an account to use Shoo. It’s how we know when your free trial started and whether you have a plan, and it keeps your places on all your devices. When you sign in with Apple, Google or email, we collect:

your email address (with Sign in with Apple this can be a private relay address) and, if you share it, your name;
an account identifier; and
the things you choose to sync: saved places such as Home and Work, favourite stops, commutes, and app preferences such as language and trip options.

We use this only to run your account: signing you in, your free trial and plan, and keeping your places in sync across your devices. We don’t use it for marketing, and we don’t combine it with information from other sources.

Friends

Friends are optional. If you add friends:

Your name and photo. Your friends see your name and, if you add one, your profile photo. The photo is stored privately with our hosting provider and only you and your friends can see it.
Your trips. While you’re on a trip, the friends you share trips with see the service you’re on (line, where it’s heading, stops to go) and when you’ll arrive. The trip you share is deleted when it ends.
Your location, only if you turn it on. It is off by default. For each trip you choose which friends, if any, can see where you are. While that trip lasts, your iPhone sends your position to our server about every 10 seconds, and only those friends can see it. It stops when you arrive or turn it off, at the latest shortly after your expected arrival, and your last position is then deleted or can no longer be seen by anyone.
Their trips on your iPhone. When a friend shares a trip with you, it can appear in your Dynamic Island and on your Lock Screen. To deliver it, we keep a Live Activity token for your iPhone (an anonymous identifier from Apple) and send updates through Apple’s push service. You can stop following any trip, and turn this off for a friend, at any time.

You can stop sharing with one friend, or with everyone, in Friends at any time, and removing a friend stops sharing both ways.

Who else is involved

Transport for NSW. To show live times and plan trips, the app sends stop identifiers and the start and end points of a trip to the Transport for NSW Open Data service, through our server. These requests are not linked to your name or account.
OpenStreetMap. To find station entrances the Trip Planner leaves out, the app asks OpenStreetMap’s public service for the entrances around that station. Only the station’s position is sent, never yours.
Apple Weather. To show the weather where you are, the app sends your approximate location to Apple Weather (WeatherKit), which doesn’t link it to you.
Apple. Maps and walking directions come from Apple Maps. Apple handles those requests under its own privacy policy and doesn’t link them to your Apple Account. Purchases and subscriptions are handled by the App Store; we never see your payment details.
Google. If you choose to sign in with Google, Google confirms your identity and shares your email address with us.
Our account provider. Accounts and synced data are stored with Supabase, our hosting provider, in its Sydney, Australia region. Supabase processes the data only on our instructions.
Apple Push Notification service. Updates for a friend’s trip in your Dynamic Island are sent through Apple’s push service, which receives only the Live Activity token and the trip details shown (your friend’s name, line, stops and arrival time).
Our email provider. Sign-in codes are sent by Resend, from hello@shooshoo.app. Resend receives only your email address and the code, and processes them only on our instructions.

We don’t sell, rent or trade personal information. We only disclose it to others where the law requires or authorises it.

This website

Hosting. shooshoo.app is hosted by Vercel. Its servers receive your IP address, browser type and the pages you ask for, and keep them briefly in logs to run and protect the site.
One cookie. If you choose a language, we set a cookie called lang so the site opens in that language. It lasts a year and holds nothing else. Without it, we use your browser’s language setting.
Maps and code from other services. Some pages load maps from Apple (MapKit JS) or, when Apple Maps isn’t available, MapLibre from jsDelivr with tiles from OpenFreeMap. Your browser connects to them directly, so they receive your IP address under their own privacy policies. We send them nothing about you.
No ads or analytics. The website has no ads, analytics, tracking pixels or social plugins. Links to other sites, such as Ask AI, only take you there when you tap them.
Email. If you email us, we use your address and message only to reply.

Overseas

Some of the providers we use are based in, or may handle data in, the United States, such as Vercel (this website), Apple and Google (sign-in) and our email provider (sign-in codes). Your account data is stored in Sydney.

Storage and security

Data travels over encrypted connections (HTTPS). Your sign-in session is kept in the iPhone Keychain. Each account’s data is locked to that account at the database level. Nothing we store is shared with advertisers.

How long we keep it

We keep account data while your account exists. When you delete your account, we delete the account and everything synced or shared through it (including your photo, friends, shared trips and any shared location) within 30 days, except where the law requires us to keep something.

Your choices and rights

Turn off location at any time in Settings on your iPhone. You can still search for places.
See or correct your information. Your synced places and favourites are visible and editable in the app. For anything else, email us at hello@shooshoo.app.
Delete your account in Settings > Delete account. This deletes it and everything synced to it from our servers. As Shoo. needs an account, you can create a new one at any time.

Terms of UseThe agreement between you and Korelda Pty Ltd for using Shoo.AccessibilityHow Shoo. works with VoiceOver, larger text, step-free trips and more.Data and licencesWhere the data, maps, photos and typeface in Shoo. come from.