On the Roof Studios Inc. built the TTC Time Saver app as a free app. This SERVICE is provided by On the Roof Studios Inc. at no cost and is intended for use as is.
This page informs visitors of our policies regarding the collection, use, and disclosure of information for anyone who uses our Service.
By using our Service, you agree to the collection and use of information in accordance with this policy. We will not use or share your information with anyone except as described in this Privacy Policy.
On the Roof Studios Inc. and TTC Time Saver are not affiliated with the Toronto Transit Commission in any way, and only use publicly accessible TTC alert data.
Information We Collect
TTC Time Saver is built to work without requiring an account, username, email address, or sign-in. Instead, each installation of the app is identified by a device push token issued by our push notification provider, OneSignal. We collect and store the following information tied to that device identifier:
- Device identifier: a OneSignal-issued player ID that identifies your device installation. This is not a username or email address and is not tied to your real-world identity by us.
- Platform: whether the app is running on iOS or Android.
- Notification preferences: the transit lines, routes, and route types (subway, bus, streetcar, elevator/accessibility) you subscribe to; the days of the week and time windows during which you want to receive alerts; whether you've opted in to "minor" severity alerts; and whether you've paused notifications and until when.
- Authentication key: a randomly generated API key used to authorize requests from your device. We store only a one-way cryptographic hash of this key, never the key itself.
- Alert delivery history: a record of which alerts have already been sent to your device. This is used to avoid sending you duplicate notifications and to generate aggregate, non-identifying usage statistics (e.g., how many alerts were sent in the last 24 hours). This history is deleted along with the rest of your data if you delete your data (see "Your Choices" below).
We do not collect your name, email address, contacts, location, or any other personal profile information, and we do not require you to create an account.
Log Data and IP Addresses
When you use our Service, our servers process standard technical information as part of normal request handling, including your device's IP address. IP addresses are used only transiently to detect and rate-limit abusive request patterns (for example, repeated device-registration attempts) and are not stored in our database alongside your notification preferences or history.
In the event of an app error, our infrastructure and push notification provider may generate standard log data (such as timestamps and error details) as part of normal operations.
Service Providers
We use the following third-party service to help operate the Service:
- OneSignal — used to deliver push notifications to your device and to issue the device identifier described above.
We do not use Firebase, Google Analytics, Crashlytics, or any other third-party analytics or crash-reporting service in this version of the app. Any data OneSignal processes on our behalf is subject to their privacy policy and is used only to perform the notification-delivery service on our behalf; they are not permitted to use it for any other purpose.
Cookies
The Service does not use cookies.
Data Retention
We retain your notification preferences and alert delivery history for as long as your device identifier remains active on our system, so that we can continue delivering alerts according to your preferences and avoid duplicate notifications. This data is permanently deleted when you delete your data as described below.
Your Choices
You can change or clear your notification preferences (routes, days, timeframes, minor-alert opt-in, pause settings) at any time from within the app. You can also request permanent deletion of all data associated with your device identifier — including preferences, authentication keys, and alert history — directly from within the app, or by contacting us at the email address below. Deletion is immediate and irreversible.
Security
We value your trust in providing us with your information and strive to use commercially acceptable means of protecting it, including hashing authentication keys and using device-bound, per-installation credentials rather than shared accounts. However, no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee its absolute security.
Children's Privacy
These Services do not address anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13 years of age. In the case we discover that a child under 13 has provided us with personal information, we immediately delete this from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we will be able to do necessary actions.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. You are advised to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page.
This policy is effective as of 2026-07-10.
Contact Us
If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us at info@ontheroofstudios.com.