HoplnHoplnGet the App

Legal

Privacy Policy

Last updated: June 2025 ยท Applies to Hopln iOS and Android apps and hopln.app

Hopln ("we", "our", "us") is a transit navigation app built for Nairobi's matatu and bus network. This policy explains what data we collect when you use the app, how we use it, and the choices you have. We believe in plain language โ€” if anything here is unclear, email us.

Information we collect

Location data

When you use navigation features, Hopln accesses your device's GPS to calculate routes and provide turn-by-turn directions. Location is processed on-device and through our API for routing purposes only. We do not store your precise location history.

Usage data

We collect anonymised information about how you interact with the app โ€” screens visited, searches performed, routes requested โ€” to improve the service. This data is not tied to your identity.

Contributions

When you submit a delay report, stop review, photo, or route correction, that contribution is stored and associated with your account. Approved contributions become part of the public dataset that all riders benefit from.

Account information

If you create an account, we store your display name, email address, and Safiri Points balance. Your password is hashed and never stored in plain text.

Device information

We collect your device type, operating system version, and app version to diagnose bugs and ensure compatibility.

How we use your information

Providing the service

Your location is used solely to calculate routes and display your position on the navigation map. Search queries are sent to our API to find matching stops and routes.

AI route planning

When you use natural language or voice input to plan a trip, your query is sent to Google Gemini to extract destination information. Queries are processed transiently and are not used to train models on your personal data.

Improving the network

Anonymised journey patterns help us identify gaps in coverage, poorly-mapped stops, and routes that need verification. No individual's journeys are exposed.

Safiri Points & gamification

Your contribution history is used to calculate your Safiri Points balance, tier level, and badge unlocks, and to populate the community leaderboard.

Third-party services

Mapbox

Maps, route tiles, and geocoding are provided by Mapbox. Your map interactions and search queries may be processed by Mapbox under their own Privacy Policy (mapbox.com/legal/privacy).

Google Gemini

AI-powered trip planning queries are processed by Google's Gemini API. Queries are sent when you use the voice or natural language input feature.

OpenTripPlanner

Route calculations are performed by our self-hosted OpenTripPlanner instance running Nairobi GTFS data. No data leaves our infrastructure for this purpose.

Data retention

Contributions

Approved contributions are retained indefinitely as part of the public dataset. Pending or rejected contributions are deleted after 90 days.

Account data

Your account data is retained for as long as your account is active. You may request deletion at any time by contacting privacy@hopln.app.

Location data

Precise GPS coordinates are not stored beyond the active navigation session. Anonymised origin-destination pairs may be retained for up to 12 months for network analysis.

Your rights

Access and portability

You may request a copy of all personal data we hold about you. We will respond within 14 days.

Correction

If any data we hold is inaccurate, you may request a correction at any time.

Deletion

You may request deletion of your account and all associated personal data. Contributions already approved and incorporated into the public dataset may remain in anonymised form.

Withdraw consent

You may withdraw consent for location access at any time through your device settings. This will disable navigation features.

Contact us

Privacy queries

For any privacy-related questions, requests, or concerns, contact us at privacy@hopln.app. We aim to respond within 5 business days.

Governing law

This Privacy Policy is governed by the laws of Kenya, including the Data Protection Act, 2019.

This policy may be updated periodically. Continued use of the app after changes constitutes acceptance. Previous versions are available on request.