Privacy Policy

Corral is a hands-free dock finder for docked bikeshare. This page says what the app does with data, who is responsible for it, and what you can do about it. The short version: Corral has no accounts and no server, nothing about you reaches the developer, and nothing leaves your phone except the requests listed below.

1. Who is responsible

Corral is published by Shug Studio LLC, New York, New York, reachable at syd@shugstudio.com. That is the developer named on Corral’s App Store page and, under data protection law in the EU and the UK, the controller. No one else receives data from Corral on the developer’s behalf.

2. What Corral sends

• Bikeshare feed requests. Every 60 seconds during a ride, and once when the map opens, Corral downloads the public GBFS station feed of the system you chose (Citi Bike by default). The request carries no identifier and no location. The feed operator sees your IP address, as with any web request, and handles it under its own privacy policy. Corral sends the operator nothing else.

• Map, search and directions requests. What you type in the search field, the map area you are looking at, and, for cycling directions, your location and the target station go to Apple Maps. Apple handles these under its privacy policy at https://www.apple.com/legal/privacy/. Corral does not see or keep them.

• Purchases. Corral Plus is sold through the App Store. Apple handles payment and keeps the receipt. Corral reads only the entitlement on your Apple ID: which plan you have and when it renews.

• Siri and Shortcuts. If you start a ride by voice, Apple processes the phrase. Corral receives only which recent destination you named.

3. What Corral keeps on your phone, and for how long

Everything below lives inside the app’s own storage on your phone. None of it is sent anywhere, and deleting the app removes all of it.

• Your last three destinations, name and coordinates, so you can pick them again. Each is replaced as you choose newer ones.

• Your settings: voice on or off, voice speed, meters or feet, minimum docks, and the bikeshare system or feed URL. Kept until you change them.

• A count of rides watched, and whether Corral has ever sent you a reroute alert, which together decide whether your free rides have been used.

• The date you tapped “I understand” on the riding notice, so it is shown only once.

• A ride log (events.jsonl) in Corral’s folder in the Files app, for your own debugging. It holds one line per spoken decision: station names, dock counts, the distance from you to the station at that moment, and the time. It has no coordinates and no name. It grows until you delete it in Files or delete the app. It leaves the phone only if you share it from Settings, and then it goes wherever you send it.

If you back up your phone to iCloud or a computer, these files are part of that backup, under Apple’s terms.

4. Location

Corral asks for “When In Use” location when you open the app, and takes one position fix once you allow it, to bias search results and offer “Dock near me”. When you start your first ride it asks for “Always”, with the reason shown on screen first, so it can keep following your ride while the phone is locked and in your pocket. During a ride, your position is used to compute your distance and heading to stations and to request cycling directions from Apple Maps. Corral does not store your location history; the ride log records the distance to a station at each alert, not where you were. iOS shows a blue indicator while background location is on, and you can withdraw the permission at any time in Settings, Privacy & Security, Location Services.

5. On the lock screen

While you ride, the Live Activity and notifications show the target station’s name and dock count. Anyone who can see your lock screen can see them. Turn them off in iOS Settings, Notifications, Corral.

6. Children

Corral is not directed at children under 13, is rated 4+, and collects no personal data from anyone.

7. Your rights

The developer holds no data about you, so there is nothing for the developer to access, correct, export, or delete: every record listed above is on your phone, under your control, and deleting the app removes all of it. If you live in the EU, the UK, California, or another place with a data protection law, you still have the right to ask, and in the EU and UK to complain to your data protection authority. Write to syd@shugstudio.com and you will get an answer within 30 days. Corral does not sell or share personal information, and does not use it for advertising or profiling.

8. What Corral does not do

No accounts. No analytics. No crash reporting. No advertising. No third-party SDKs. No correlation of station data with rider identity, which the bikeshare operators’ data licenses forbid.

9. Changes

If this policy changes, the new version is posted at this address with a new effective date. The app links here from Settings and from the paywall.

10. Contact

Email syd@shugstudio.com. Post: New York, New York.