Last updated September 11, 2026
When you create an account, we collect your email address and, optionally, your name, company, and business type. When you add locations, routines, tasks, or appointments, we collect the addresses, coordinates, and schedules you enter, along with your notification preferences. We also keep a record of the alerts and suggestions we've matched and sent to you.
If you turn on "Use my location" in Errands settings (it is off by default), CitySignal reads your device's location only while the app is open, to show errands you can complete near where you are. In the iOS app, with your permission, iOS also monitors regions around planned stops to deliver approach alerts while the app is closed. If you also share live location with someone in your Circle, iOS monitors your saved spots the same way, and arriving at or leaving one updates the single line that person sees (for example, "at Work"); nothing between spots is recorded. This does not create a continuous movement trail. When your position is near a known store, we record only the store and the time (for example, "near Corner Pharmacy at 5:12 PM"), so future suggestions can reflect places you actually visit. These visit records older than 90 days are removed when nearby checks run. You can delete them at any time, or turn location use off, in Errands settings. Turning it off stops all location checks. You can also revoke location permission in iOS Settings.
If you separately enable Scout arrival and departure actions, your iPhone monitors saved spots with rules you create. It sends a spot identifier, entry or exit, and time to run your chosen reminder or task-planning action. No continuous GPS trail is sent. Rules run once and then switch off. Crossing and action records are shown for 30 days; older records are removed when the next crossing is processed. Action notifications remain in your notification history until you clear action history or delete your account. You can pause actions or clear their history in Scout actions settings. Offline events older than 15 minutes do not execute. Location detection may be delayed.
If you separately enable live location sharing with a linked Scout in Circle, we store your latest coordinates, time and neighborhood label. Your linked Scout sees the label and its freshness, not your coordinates. New fixes replace the previous fix; this is not a route history. You can pause sharing or turn it off in Circle.
We use your data to match public signals, road closures, outages, events and weather to your places and plans, organize errands, provide briefings, and coordinate with the people you choose to link in Circle. We deliver alerts in the app and by email or push when enabled. We do not sell your data, share it with advertisers, or use it for anything unrelated to the service.
We use a small number of processors to run CitySignal: Resend delivers our emails (they see your email address), and an AI provider (OpenAI) helps write plain-language summaries of public signals. When you use AI planning, the plan text you submit is processed by our AI provider and may contain personal details you choose to include. On supported iPhones, onboarding and weekly planning speech is transcribed on your device; its audio is not sent to OpenAI. With your permission, the finished text is sent to OpenAI to prepare your onboarding draft. For other voice features, if you consent to cloud transcription, your recording is sent to OpenAI to produce text. CitySignal does not save uploaded voice recordings; the resulting plan text can be saved to your account. Separately, AI briefings and errand assistance are off until you explicitly allow them. When enabled, OpenAI receives your first name, relevant saved place names, routes, schedules, errands and matched updates to write and voice briefings, explain updates and organize errands. This includes automatic daily and weekly brief writing. Scout's generated briefing text and audio are cached on our server for replay. Turning this permission off in Notification preferences deletes these cached files and stops future personalized AI assistance. Readable updates and your plans remain available. Map, geocoding and place-search providers receive the location queries needed to return maps, addresses and nearby places. Apple delivers native push notifications using your device token. Our servers are hosted on DigitalOcean in the United States.
CitySignal reads public information published by government agencies, utilities, transit agencies and local newsrooms. The credits their licences ask for are on our sources and credits page.
We use a single signed session cookie to keep you logged in. We use Google Analytics on public website pages, not native app or account screens, to understand aggregate visits. We do not send it your email, your addresses, or any location coordinates. You can block it with any standard content blocker without affecting the app.
We keep your data while your account is active; place-visit records expire after 90 days when nearby checks run. You can permanently delete your account and associated account data in Settings using Delete account, including cached briefing text and audio. For help with deletion or questions about backup retention, email hello@citysignalatl.com .
If this policy changes materially, we'll note it here with a new date. Questions: hello@citysignalatl.com.