Agree the report before enrollment.
Sponsored access is offered with aggregate reporting. Define the permitted purpose, fields, audience, time window, minimum distinct riders, and suppression rules before launch. A reporting specification is not proof that a particular release or operating control has passed review.
Count people carefully
Trips, observations, riders, and households are different units. State the unit, missing coverage, and how withheld values differ from measured zeros.
Review disclosure risk
Small audiences, sparse locations, precise times, and overlapping queries can expose information. Coarsening, rounding, and suppression reduce risk; they do not guarantee anonymity.
Keep reporting scoped
An aggregate reporting offer does not grant a sponsor private message content, continuous location access, or individual movement histories. Confirm recipients and rights in the agreement.
Check the category and the operating process.
The Privacy Policy describes retention terms. A program review must confirm which categories apply, how deletion is requested and executed, and how backups and legal obligations affect the schedule.
Before relying on a specific retention window, obtain evidence for the relevant service, deployment, and job health. This page does not certify production configuration, a completed purge, or an independent security audit.
Be precise about encryption.
Hytch does not promise end-to-end encryption for message content. The Privacy Policy describes MobileFlow and service-provider access. Encryption in transit or storage is a different protection.
Learning from history requires permitted inputs. The group-plan example is a browser-local preview using an explicitly selected saved note. It does not read a private conversation or establish a deployed learning feature.
A record supports a bounded claim.
A check-in, recorded promoter credit, and an estimated causal effect are different claims. A receipt can document an evaluated outcome without guaranteeing physical truth, a safe journey, provider fulfillment, or payment.
Arcus supplies the shared verification and program-control engine. Hytch retains its coordination experience. Read the SafeRide delivery boundaries for provider responsibility, driver self-attestation, and program-specific eligibility.
Privacy questions
A program review must specify the minimum number of distinct riders behind a published cell, any higher threshold for sensitive categories, rounding, and protection against overlapping queries. A row count is not a rider count. The applicable dataset and release must be checked before a buyer relies on a threshold.
The reporting specification must distinguish withheld data from a measured zero and explain the coverage lost to suppression. Review the dashboard and export together. A blank, a zero, and an unavailable observation describe different things.
Location detail should be limited to the agreed purpose. A program review must identify the spatial and time buckets, permitted recipients, and whether a sparse area or overlapping queries could expose a person. Coarsening and minimum audience sizes reduce disclosure risk; neither guarantees anonymity.
The Privacy Policy describes retention by data category. Before a sponsored program starts, confirm its applicable retention schedule, deletion process, backup treatment, and reporting obligations in the agreement and technical review. This page does not certify that a particular production deletion job has run.
Hytch does not promise end-to-end encryption for message content. The Privacy Policy describes MobileFlow and service-provider access. Encryption in transit or storage is a different protection and must not be presented as end-to-end encryption.
No. This page is not an independent audit report, security certification, or compliance attestation. A procurement review should request the evidence applicable to the service and release being evaluated, including any open controls.
The sponsored program offer is for agreed aggregate reporting. It does not grant access to private message content, continuous location feeds, or individual movement histories. The agreement must identify the fields, access rights, privacy controls, and permitted purpose before launch.
Review a program with us.
Bring the purpose, recipients, and reporting requirements. We can scope the data and implementation review before a program is authorized.
Discuss a programGet the app.
Hytch is free on iOS, and your movement history stays yours.
Join the email list for occasional Hytch updates.