Effective: 2026-07-25 · Applies to Shuttle Roster, published by goonobu.
Nothing beyond what your subscription requires Apple to process. Shuttle Roster itself does not use advertising or analytics SDKs, and does not contain an external AI or backend service. No usage data, device identifiers, or personal information is transmitted anywhere by the app.
All records you create — routes, stops, riders, assignments, and runs, including boarding, absence, and correction history — are stored only in the app's local database on your device (SwiftData). Nothing syncs to iCloud or any server operated by us or a third party.
Shuttle Roster has no photo field anywhere in the app. It does not connect to GPS tracking, telematics, or any external dispatch system, and does not record device location.
The Daily Shuttle Manifest PDF is generated on-device and exported through the standard iOS share sheet. Guardian contacts are left out of the PDF by default. You choose the export destination, and we never receive a copy of the exported file.
Shuttle Roster offers a monthly ($4.99) and a yearly ($39.99) auto-renewing subscription, each with a 7-day free trial. After the trial, the selected plan is charged to the Apple Account used at purchase. The subscription automatically renews for the same period and price unless canceled at least 24 hours before the current period ends. Payment is charged to your Apple Account at confirmation of purchase and again at renewal.
To cancel or manage your subscription, open iOS Settings, tap your Apple Account, then Subscriptions, and select Shuttle Roster. Deleting the app does not cancel the subscription. Use Restore Purchases in the app to restore an active entitlement on the same Apple Account.
All subscription payments are processed entirely by Apple through StoreKit. We do not receive your payment details. Apple's own privacy policy and Terms of Use govern that transaction.
Shuttle Roster is used by adult staff at schools, camps, and activity programs to record rosters of minors' rides. Riders' information — a display name, group, and optional guardian contact — is entered by staff, stays only on the operating staff member's device, and is never transmitted anywhere.
If this policy changes, the new version will be posted at this same URL with an updated effective date.
Questions about privacy: goonobu@gmail.com