Skip to content
Contact Us

 CITY METRO — PRIVACY POLICY

Effective Date: September 23, 2026
Operating Authority: Lego City County Metropolitan Transportation Authority

At City Metro, we are committed to protecting the privacy and security of our riders. This Privacy Policy explains how the City Metro Transit Administration collects, uses, shares, and safeguards your personal data when you ride our transit network, use our smart cards, access our mobile applications, or browse our website.

1. Information We Collect

City Metro collects information to provide efficient transit services and improve system operations. This data falls into three categories:

  • Account and Payment Information: Your name, email address, phone number, billing address, and payment method details when you register for a digital transit account or purchase fares.
  • Transit Usage and Location Data: Tap-in and tap-out times, station locations, route history, and real-time GPS location data if you enable location services on the City Metro mobile app.
  • Security Footage and Automated Data: Closed-Circuit Television (CCTV) video recordings captured at stations, platforms, and inside transit vehicles, as well as automated license plate data collected at City Metro commuter parking facilities.

2. How We Use Your Information

We use the collected data strictly for operational, safety, and administrative purposes, including:

  • Processing fare payments and managing transit accounts.
  • Monitoring rider volume to optimize bus and train schedules.
  • Ensuring public safety and investigating security incidents or fare evasion.
  • Sending critical service alerts, schedule updates, or system announcements.

3. Data Sharing and Disclosure

City Metro does not sell or rent your personal information to third-party advertisers. We only disclose your data under the following limited circumstances:

  • Service Providers: With trusted vendors who manage our automated ticketing systems, mobile app infrastructure, or payment processing networks under strict confidentiality agreements.
  • Public Safety and Legal Process: With law enforcement or emergency services when required by law, subpoena, or to protect the immediate safety of riders and staff.
  • Aggregated Data: We may share anonymous, aggregated ridership statistics with urban planners or regional government bodies to secure transit funding and improve infrastructure.

4. Data Security and Retention

  • Protection Measures: City Metro implements industry-standard technical and physical security measures—including data encryption—to guard against unauthorized access, loss, or alteration of your personal data.
  • Retention Periods: Transit tap history and digital account records are kept only as long as necessary for administrative audit requirements. Surveillance video footage is automatically overwritten after a standard period (e.g., 30 days) unless flagged for an active security investigation.

5. Your Privacy Choices and Rights

Depending on your regional jurisdiction, you may have the following rights regarding your data:

  • Access and Correction: You can review and update your account information at any time through the City Metro mobile app or online customer portal.
  • Location Controls: You can opt out of real-time location tracking by disabling location permissions in your smartphone's settings.
  • Account Deletion: You may request the permanent deletion of your digital transit account, which will remove your associated personal files from our active marketing and operational databases.

6. Updates to This Policy

City Metro reserves the right to modify this Privacy Policy to reflect changes in our technological infrastructure or legal obligations. Any updates will be published on our digital platforms with a revised effective date.