MSF Mobility, a division of MSF Global Solutions, LLC ("MSF Mobility," "we," "us," or "our"), provides the myGoMobilemobile application, the myGoMobile web experience, and related services (together, the "Services"). myGoMobile is atransit passenger platform that lets riders view schedules and real-time vehicle information, receive service alerts,plan trips, and — where offered — purchase and use transit fares.
This Privacy Statement explains what information we collect through the Services, why we collect it, how we use andshare it, and the choices and rights available to you. Please read it together with Section 2, which explains animportant distinction that determines who is responsible for your information.
myGoMobile is offered in two editions, and which one you use determines what information is collected and who is legally responsible for it.
Agency Edition. A public transit agency (a "Transit Agency") licenses myGoMobile, applies its own branding, and configures it for its transit network. This edition can include fare purchase, account-based ticketing, fare validation,and reduced-fare programs, alongside schedules, real-time information, and service alerts. You are using the Agency Edition if the app shows a transit agency's name or branding, or if you signed in using credentials issued or recognized by a transit agency.
For the Agency Edition, your Transit Agency decides why and how your rider information is used. Under Europen data protection law the Transit Agency is the "controller" and MSF Mobility is a "processor"; under US state privacylaws the Transit Agency is the "business" or "controller" and MSF Mobility is a "service provider." We process thatinformation only on the agency's documented instructions, under a written data processing agreement. Your Transit Agency's own privacy notice also applies, and controls if it conflicts with this Statement for that information.
Standard Edition. Anyone can download myGoMobile and use it in an unbranded, unconfigured form with a limited set of features — schedules, real-time vehicle information, maps, nearby stops, trip planning, and general service alerts drawn from publicly available transit data. The Standard Edition is provided directly by MSF Mobility, which isthe controller for it, and it is not operated on behalf of any transit agency.
In both editions, MSF Mobility acts as a controller in its own right for a narrow set of processing: operating, securing,and troubleshooting the platform; detecting and preventing fraud and abuse; producing aggregated and de-identified statistics to improve the Services; and managing our own business relationships.
This structure follows the same approach used across the mobile ticketing industry, where the platform provider is aprocessor for agency-branded deployments and a controller for its own direct-to-rider product
The Standard Edition collects a narrower set of information than the Agency Edition. Items below marked *(AgencyEdition)* are not collected in the Standard Edition
Information you provide:
Information collected automatically:
Information from others:
What we do not collect. We do not collect biometric identifiers. myGoMobile's visual verification feature is a visual,human-inspected anti-fraud display and does not perform facial recognition or biometric matching. We do not collectinformation from your contacts, photos (other than a file you deliberately upload), microphone, calendar, ormessages. We do not use your information for third-party advertising.
Some Transit Agencies offer discounted fares to eligible riders, such as seniors, students, riders with disabilities, and
veterans. Where a program requires proof of eligibility, verification is performed by an independent identityverification partner under its own privacy notice. MSF Mobility does not receive the documents you submit to that
partner — we receive only an indication of whether you were verified, which we pass to your Transit Agency for its
records. Because reduced-fare categories can reveal sensitive characteristics, we treat this information with
additional care and use it only to determine and apply fare eligibility.
Location is optional, and myGoMobile is usable without it — you can search stops and routes manually and, in the Agency Edition, purchase and use fares normally
What we use it for: showing nearby stops and routes, centering the map, defaulting a trip-planning origin, delivering location-relevant service alerts, and — in the Agency Edition — supporting fraud checks at the moment of fare validation. We also derive de-identified, aggregated ridership statistics
Background location. myGoMobile does not collect your location when the app is closed or not in use, and does not request background-location permission. [CONFIRM before publishing — if any feature uses background location, this sentence must change and a separate in-app disclosure is required.]
Your controls. You can grant, restrict to approximate, limit to "while using the app," or revoke location permission atany time in your device settings (iOS: Settings › Privacy & Security › Location Services › myGoMobile; Android: Settings› Apps › myGoMobile › Permissions › Location).
We do not sell precise location, disclose it to data brokers, or use it for advertising
We use information to: provide the Services and sync your profile across devices; process fare transactions and passes*(Agency Edition)*; prevent fraud and misuse; send service alerts, receipts, and account and security notices; respondto support requests; improve reliability and design through aggregated analysis; and, in the Agency Edition, give yourTransit Agency the ridership and fare reporting it needs, in aggregated or de-identified form where feasible. We alsouse information to comply with law and protect the rights and safety of riders, operators, and the public
We do not sell your personal information, do not share it for cross-context behavioral or targeted advertising, and donot use it to train third-party AI models.
Automated decisions. We do not make decisions with legal or similarly significant effects about you based solely onautomated processing. Fraud signals may flag a transaction or account, but a person reviews the matter before anysuspension, fare denial, or eligibility revocation, and you may contact us to contest it.
Where European data protection law applies, we rely on: performance of a contract (creating your account, deliveringfares); legitimate interests (fraud prevention, security, and service improvement); consent (precise location, pushnotifications, non-essential cookies, and, where required, special-category eligibility data); legal obligation (retainingtransaction and tax records, responding to lawful requests); and, for Agency Edition deployments where the agencyrelies on it, the performance of a task in the public interest. In the Standard Edition, MSF Mobility is the controller andrelies on contract, legitimate interests, and consent rather than the public-interest basis. You may withdraw consentat any time without affecting prior processing.
The myGoMobile web experience uses strictly necessary cookies and, where you consent, functional and analyticscookies; in regions that require it we present a consent banner and honor Global Privacy Control signals. The app usescrash-reporting and product-analytics tools configured to limit advertising identifiers. myGoMobile contains no thirdparty advertising and does not track you across other companies' apps and websites.
We do not sell personal information and have not shared it for cross-context behavioral advertising.
MSF Mobility is based in the United States, and information is processed in the United States and other countries. Fortransfers from the EEA, UK, or Switzerland we rely on the European Commission's Standard Contractual Clauses, theUK International Data Transfer Addendum, and the Swiss addendum, together with supplementary safeguardsincluding encryption. A copy of the relevant mechanism is available on request.
We keep personal information only as long as needed for the purposes in this Statement or as required by law. In theAgency Edition, retention is set by your Transit Agency's records-retention schedule, and we delete or return data atthe end of our contract with the agency. In the Standard Edition, MSF Mobility sets retention. Aggregated and deidentified information, which is no longer personal information, may be kept indefinitely
We maintain administrative, technical, and physical safeguards, including encryption in transit and at rest, role-basedaccess with multi-factor authentication for administrators, tokenization of payment credentials (we do not store fullcard numbers), logging and monitoring, vulnerability management, vendor security review, and documented incidentresponse. Our security program is independently assessed under SOC 2. [CONFIRM certification status beforepublishing.] No system is perfectly secure; if a breach affecting your information occurs, we will notify you and therelevant authorities as required by law, including within 72 hours to the competent supervisory authority underEuropean law. Please keep your credentials confidential and notify us at [SECURITY EMAIL] if you suspect youraccount has been compromised.
Everyone can access and download account information, correct their profile, delete their account, manage locationand notification permissions, and unsubscribe from non-essential messages.
EEA, UK, and Switzerland. You have rights of access, rectification, erasure, restriction, portability, objection, andwithdrawal of consent, and the right not to be subject to solely automated significant decisions. In the StandardEdition we respond directly; in the Agency Edition we forward your request to your Transit Agency, the controller, andassist it. We, or the agency, respond within one month, extendable by two months for complex requests. You mayalso complain to your local supervisory authority (in the UK, the Information Commissioner's Office).
United States. Depending on your state, you may have rights to know, access, correct, delete, and obtain a portablecopy of your information, to opt out of sale, sharing, targeted advertising, and certain profiling, and to limit use ofsensitive information, plus a right to appeal and freedom from discrimination for exercising these rights. We do notsell personal information or share it for cross-context behavioral advertising, and we use sensitive information —precise location and, where collected, eligibility information — only for the permitted purposes described here, so no"Do Not Sell or Share" or "Limit Use of Sensitive Information" link is required; we will add those if this ever changes.
To exercise any right, contact us at privacy@msfglobal.net or call 1.844.872.0641. We verify your identity beforeresponding, typically by confirming control of your account. Authorized agents may submit requests with proof ofauthorization.
Account deletion. You can delete your account in the app (Settings › Account › Delete Account), on the web a thttps://mygomobile.io/delete-account or by emailing privacy@msfglobal.net. In the Agency Edition, deletion issubject to your Transit Agency's records-retention schedule, and any unused fare balance or passes are handledunder the agency's fare policy and our Terms of Use — review those before deleting, as unused value may beforfeited. We may retain limited information where necessary to complete a transaction, comply with law, preventfraud, or defend legal claims.
myGoMobile is not directed to children under 13, and we do not knowingly collect their information withoutverifiable parental consent, consistent with the Children's Online Privacy Protection Act. Where a Transit Agency runsa youth or student program, accounts for riders under 13 are created and managed by a parent, guardian, school, orthe agency under its own consent framework. For riders aged 13–17 we do not sell or share personal information oruse it for targeted advertising, and we apply the additional protections required by US state laws and by Europeanrules on children's consent. If you believe a child has provided information without appropriate consent, contact us at privacy@msfglobal.net
We may update this Statement and will post the new version with a revised "Last Updated" date. For materialchanges we will provide notice through the app, by email, or by other appropriate means, and obtain consent wherethe law requires it
MSF Mobility / MSF Global Solutions, LLC 1712 Oretha Castle Haley Blvd, Ste 302, New Orleans, LA 70113 Mailing:P.O. Box 741883, New Orleans, LA 70174 Privacy: privacy@msfglobal.net · General: info@msfglobal.net · Phone:1.844.872.0641
For questions about how a Transit Agency uses your information in the Agency Edition, contact the agency directly