Legal
Privacy Policy
Last updated: September 11, 2026
Corral is a hands-free dock finder for docked bikeshare. This page says what the app does with data, who is responsible for it, and what you can do about it. The short version: Corral has no accounts and no server, nothing about you reaches the developer, and nothing leaves your phone except the requests listed below.
1. Who is responsible
Corral is published by Shug Studio LLC, New York, New York, reachable at syd@shugstudio.com. That is the developer named on Corral’s App Store page and, under data protection law in the EU and the UK, the controller. No one else receives data from Corral on the developer’s behalf.
2. What Corral sends
Bikeshare feed requests. Every 60 seconds during a ride, and once when the map opens, Corral downloads the public GBFS station feed of the system you chose (Citi Bike by default). The request carries no identifier and no location. The feed operator sees your IP address, as with any web request, and handles it under its own privacy policy. Corral sends the operator nothing else.
Map, search and directions requests. What you type in the search field, the map area you are looking at, and, for cycling directions, your location and the target station go to Apple Maps. Apple handles these under its privacy policy at https://www.apple.com/legal/privacy/. Corral does not see or keep them.
Purchases. Corral Plus is sold through the App Store. Apple handles payment and keeps the receipt. Corral reads only the entitlement on your Apple ID: which plan you have and when it renews.
Siri and Shortcuts. If you start a ride by voice, Apple processes the phrase. Corral receives only which recent destination you named.
3. What Corral keeps on your phone, and for how long
Everything below lives inside the app’s own storage on your phone. None of it is sent anywhere, and deleting the app removes all of it.
Your last ten destinations, each with its name and coordinates, the weekday and time of day you last rode there, where you started from, and how many times you have chosen it. Corral uses these to offer your usual dock before you search. The oldest is dropped as you choose newer ones.
A home address: name and coordinates, if you set one in search. Kept until you change or clear it.
Your settings: voice on or off, which voice, voice speed, turn prompts on or off, meters or feet, minimum docks, the bikeshare system or feed URL, and which system suggestions you dismissed. Kept until you change them.
A count of rides watched, which decides whether your three free rides have been used, and whether Corral has already asked you about Plus after a reroute, so it asks once.
The date you tapped “I understand” on the riding notice, and whether the welcome screen has played, so each is shown only once.
A ride log (events.jsonl) in Corral’s folder in the Files app, for your own debugging. It holds one line per spoken decision: station names, dock counts, the distance from you to the station at that moment, and the time. It has no coordinates and no name. It grows until you delete it in Files or delete the app. It leaves the phone only if you share it from Settings, and then it goes wherever you send it.
If you back up your phone to iCloud or a computer, these files are part of that backup, under Apple’s terms.
4. Location
Corral asks for “When In Use” location when you open the app, and takes one position fix once you allow it, to bias search results and offer “Dock near me”. When you start your first ride it asks for “Always”, with the reason shown on screen first, so it can keep following your ride while the phone is locked and in your pocket. During a ride, your position is used to compute your distance and heading to stations and to request cycling directions from Apple Maps. Corral does not store your location history; the ride log records the distance to a station at each alert, not where you were. iOS shows a blue indicator while background location is on, and you can withdraw the permission at any time in Settings, Privacy & Security, Location Services.
5. On the lock screen
While you ride, the Live Activity and notifications show the target station’s name and dock count, on the lock screen, in the Dynamic Island, and on a paired Apple Watch. Anyone who can see those screens can see them. Turn them off in iOS Settings, Notifications, Corral.
6. Children
Corral is not directed at children under 13, is rated 4+, and collects no personal data from anyone.
7. Your rights
The developer holds no data about you, so there is nothing for the developer to access, correct, export, or delete: every record listed above is on your phone, under your control, and deleting the app removes all of it. If you live in the EU, the UK, California, or another place with a data protection law, you still have the right to ask, and in the EU and UK to complain to your data protection authority. Write to syd@shugstudio.com and you will get an answer within 30 days. Corral does not sell or share personal information, and does not use it for advertising or profiling.
8. What Corral does not do
No accounts. No analytics. No crash reporting. No advertising. No third-party SDKs. No correlation of station data with rider identity, which the bikeshare operators’ data licenses forbid.
9. Changes
If this policy changes, the new version is posted at this address with a new effective date. The app links here from Settings and from the paywall.
10. Contact
Email syd@shugstudio.com. Post: New York, New York.