Privacy Policy

IndyGo Privacy Policy 

Last updated: October 8, 2026 

Last reviewed: October 8, 2026 

The Indianapolis Public Transportation Corporation (“IndyGo,” “we,” “our,” or “us”) respects your privacy, and we are committed to protecting it through our compliance with this policy. This policy describes how we collect, process, retain, and disclose Personal Information about you when providing services to you through our website, located at www.indygo.net (the “Site”), the MyKey+ application (the “App”), and related services that link to this policy (collectively, with the Site and App, our “Services”) and our practices for using, maintaining, protecting, and disclosing that information. 

This policy applies only to information we collect: 

• through the Services or 

• in communications, including email, text, chat, and other electronic messages, between you and the Services. 

It does not apply to information collected by: 

• us offline or through any other means, including on any other website operated by IndyGo or any third party (including our affiliates and subsidiaries) that does not link to this policy; or 

• any third party (including our affiliates and subsidiaries), including through any application or content (including advertising) that may link to or be accessible from or through the Services. 

Please read this policy carefully to understand our policies and practices regarding your information and how we treat it. By interacting with our Services or providing us with your information, you agree to the collection, use, and sharing of your information as described in this privacy policy. This policy may change from time to time (see Changes to Our Privacy Policy below). Your continued use of the Services after we make changes as described here is deemed to be acceptance of those changes, so please check the policy periodically for updates. 

Children’s Data 

Our Services are not intended for, and we do not knowingly solicit any Personal Information from, collect information directly from, or market to, children under the age of 13. If you are under 13, do not access, use, or provide any information on the Services or on or through any of their features without the help of a parent or guardian. If we learn we have collected or received Personal Information from a child under 13 without verification of parental consent, we will delete that information. If you become aware of any data we have collected from children under age 13 without parental consent, please contact us using our contact information provided below.  

By creating or managing an IndyGo account on behalf of a child, or otherwise providing us with a child’s Personal Information, you represent that you are the child’s parent or legal guardian, that you are authorized to act on the child’s behalf, and that you consent, on the child’s behalf, to IndyGo’s collection, use, and disclosure of the minor’s Personal Information consistent with this Privacy Policy. 

The Personal Information That We Collect or Process 

“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with an identifiable individual or household. Personal Information does not include publicly available information or information that is de-identified, as defined by applicable law. 

The types and categories of Personal Information we collect or process include: 

• Account and contact information, including name, photo, mailing address, email address, phone number, username, and other contact information you provide to us. 

• Payment information, including credit card or debit card information and information about the payment methods and services (such as Apple Pay) you use in connection with the Services. 

• Account history, including information about your account, transactions, purchases, ride history, or discounts. 

• Demographic information, including your age and gender. 

• Location information, including general geographic location such as country, state or province, or city. 

• Device information, including your IP address, device identifiers, operating system and version, preferred language, hardware identifiers, browser type and settings, and other device information. 

• Content and information you elect to provide in any reviews you make through the Services or emails, chats, or other communications sent to us. 

• Health information, such as your status as disabled. 

• Health Insurance information, such as your status as a Medicare beneficiary. 

Some of the information identified above, including financial information, identification document information, health information, and insurance information, may be considered sensitive Personal Information under certain laws. We will collect and process sensitive Personal Information only with your consent. If you choose not to provide or allow us to collect some information, we may not be able to provide you with requested features, services, or information. 

We also collect: 

• Statistical or aggregated data. Statistical or aggregated data does not directly identify a specific person, but we may derive non-personal statistical or aggregated data from Personal Information. For example, we may aggregate Personal Information to calculate the percentage of users accessing a specific feature of the Services. 

• Technical information. Technical information includes information about your internet connection and usage details about your interactions with the Services, such as clickstream information to, through, and from our Services (including date and time), products that you view or search for; page response times, download errors, length of your visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), or methods used to browse away from a page. 

If we combine or connect non-personal statistical or technical data with Personal Information so that it directly or indirectly identifies an individual, we treat the combined information as Personal Information. 

How We Collect Your Personal and Other Data 

You Provide Information to Us 

We collect information about you when you interact with our Services, such as when you create or update an account, make a purchase, or participate in surveys. 

Automatically Through Our Services 

As you navigate through and interact with our Services, we may use automatic data collection technologies to collect information that may include Personal Information. Information collected automatically may include usage details, IP addresses, operating system, and browser type, and information collected through cookies, web beacons, and other tracking technologies including details of your interactions with our Services, such as web traffic data, location data, logs, and other communication data, and which resources and Services features that you access and use. 

We may use these automatic collection technologies to collect information about your online activities over time and across third-party sites or other online services (behavioral tracking). 

Using automatic collection technologies helps us to improve our Services and to deliver a better and more personalized experience. 

The technologies we use for this automatic data collection may include: 

• Cookies. A cookie is a small file placed on your device when you interact with the Services. You may refuse to accept or disable cookies by activating the appropriate setting on your browser or device. However, if you select this setting, you may be unable to access certain features of the Services. 

• Web Beacons. Some parts of the Services and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit IndyGo, for example, to count users who have visited those parts or opened an email and for other related statistics (for example, recording the popularity of certain content and verifying system and server integrity). 

To the extent any of these automated technologies is considered a Personal Information sale, targeted advertising, or profiling under applicable laws, depending on where you live, you may opt out of using these automated technologies for such uses by contacting us as provided below. Please note that some Services features may be unavailable as a result. 

When you interact with the Services, third parties may use automatic collection technologies to collect information about you or your device. These third parties may include: 

• Advertisers, ad networks, and ad servers. 

• Analytics companies. 

• Your device manufacturer. 

• Your internet or mobile service provider. 

• Your domain name service (DNS) provider. 

These third parties may use tracking technologies to collect information about you when you use the Services. The information they collect may be associated with your Personal Information, or they may collect information, including Personal Information, about your online activities over time and across different websites, apps, platforms, and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content. 

We do not control these third parties’ tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly. 

From Business Partners and Service Providers 

We may receive Personal Information about you from other sources and combine that with information we collect directly from you. For example, we may obtain information about you from service providers that we engage to perform services on our behalf, such as email platform providers, payment processors, and analytics services. 

How We Use Your Information 

We use information that we collect about you or that you provide to us, including any Personal Information, to: 

• Provide you with the Services and any content, features, information, or services that we make available through the Services. 

• Fulfill and manage purchases and payments. 

• Fulfill any other purpose for which you provide it. 

• Provide you with notices about your account. 

• Improve our Services, including by analyzing your information and creating aggregated data derived from your information to develop, maintain, analyze, improve, optimize, measure, and report on our Services and their features and how users interact with them. 

• Promote our Services and offerings by publishing information on our own Services and on third parties’ services. 

• Carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection. 

• Notify you when Services updates are available and about changes to any services we offer or provide through them. 

• Determine your eligibility for reduced or free bus fares. 

• In any other way we may describe when you provide the information. 

• For any other purpose with your consent. 

The usage information we collect, whether connected to your Personal Information or not, helps us improve our Services and deliver a better and more personalized experience by enabling us to: 

• Estimate our audience sizes and usage patterns. 

• Store information about your preferences, allowing us to customize the Services according to your individual needs and interests. 

• Speed up your searches. 

• Recognize you when you return to our Services. 

We may also use your information to contact you about services that may be of interest to you. If you do not want us to use your information in this way, you may opt out by contacting us as provided below. For more information, see Your Rights and Choices About Your Information. 

Who We Disclose Your Information To 

We may disclose aggregated information about our users and information that does not identify any individual, without restriction. 

We may also disclose Personal Information that we collect or you provide, as described in this privacy policy: 

• To our affiliated entities. 

• To contractors, service providers, and other third parties we use to support our organization. 

• To a successor entity in the event that IndyGo is dissolved, consolidated with another governmental entity, reorganized, or its functions are transferred to or assumed by another department, agency, or political subdivision of the Consolidated City of Indianapolis, Marion County, or the State of Indiana, in which Personal Information held by IndyGo is among the records or assets transferred to such successor entity. 

• To third-party advertising technology platforms for purposes of cross-context behavioral advertising, unless you have opted out of such sharing. For more information, see Your Rights and Choices About Your Information. 

• To fulfill the purpose for which you provide it. 

• For any other purpose disclosed by us when you provide the information. 

• With your consent. 

We may also disclose your Personal Information: 

• To comply with any court order, law, or legal process, including to respond to any government or regulatory request. 

• To enforce or apply our Terms of Use and other agreements, including for billing and collection purposes. 

• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of our organization, our riders, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction. 

The categories of Personal Information we may disclose include: 

• Account and contact information. 

• Account history, including information about your account, transactions, purchases, or discounts. 

• Location information, including general geographic location. 

• Device information. 

Sensitive Information 

Some of the information we collect about you may constitute sensitive Personal Information under applicable privacy laws. We only collect and use sensitive information you directly provide to us, consistent with applicable law. 

We may collect and use the following sensitive information: 

• Your financial information, including details on payment cards or other forms of payment. 

• Your health information, including your status as disabled. 

• Health insurance information, including your status as a Medicare beneficiary. 

This information may be used in the following ways: 

• To perform services of processing your purchases and allowing you to add funds to your fare medium through our Services. 

• To determine your eligibility for free or reduced fares. 

Your Rights and Choices About Your Information 

This section describes mechanisms you can use to control certain uses and disclosures of your information and rights you may have under state law, depending on where you live. 

Advertising, marketing, cookies, and other tracking technologies choices: 

• Cookies and Other Tracking Technologies. You can set your browser to refuse all or some browser cookies or other tracking technology files, or to alert you when these files are being sent. You can choose whether to allow the Services to collect information through other tracking technologies by contacting us as provided below. If you disable or refuse cookies or similar tracking files, some Services features may be inaccessible or not function properly. Some browsers include a “Do Not Track” (DNT) setting that can send a signal to the online services you visit indicating you do not wish to be tracked. Because there is not a common understanding of how to interpret the DNT signal, our Services may not respond to all browser DNT signals. Instead, you can use the range of other tools to control data collection and use described in this Privacy Policy. 

• Promotions by IndyGo. If you do not wish us to use your information to promote our own services, you can opt out by contacting us at the contact information provided in the Contact Us section below. 

• Targeted Advertising by IndyGo. If you do not want us to use information that we collect or that you provide to us to deliver advertisements according to our advertisers’ target audience preferences, you can opt out by contacting us at the contact information provided in the Contact Us section below. 

• Disclosure of Your Information for Third-Party Advertising. If you do not want us to share your Personal Information with unaffiliated or non-agent third parties for advertising and marketing purposes, you can opt out by contacting us at the contact information provided in the Contact Us section below. We do not control third parties’ collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. To learn more about opting out of receiving targeted ads from members of the Network Advertising Initiative (“NAI”), including how to add the NAI Global Privacy Control (GPC) extension to your Chrome web browser, see NAI: How to Opt Out. 

Your State Privacy Rights 

Depending on your state of residency, you may have certain rights related to your Personal Information, including: 

• Access and Data Portability. You may confirm whether we process your Personal Information and access a copy of the Personal Information we process. To the extent feasible and required by state law, depending on your state, data will be provided in a portable format. Depending on your state, you may have the right to receive additional information, and it will be included in the response to your access request. 

• Correction. You may request that we correct inaccuracies in your Personal Information that we maintain, considering the information’s nature and processing purpose. 

• Deletion. You may request that we delete Personal Information about you that we maintain, subject to certain exceptions under applicable law. 

• Opt Out of Using Personal Information for Sales, Targeted Advertising, and Profiling for Certain Legal or Similarly Significant Decisions. You may request that we do not use your Personal Information for these purposes. Some states may also grant you the ability to learn more about or challenge those automated decisions. 

Important: The exact scope of these rights vary by state. There are also several exceptions where we may not have an obligation to fulfill your request. 

To exercise any of these rights, please contact us at the contact information provided in the Contact Us section below. You may appeal a decision regarding a consumer rights request using the same contact information. 

Some browsers and browser extensions support the Global Privacy Control (“GPC”) that can send a signal to process your request to opt out from certain types of data processing, including data “sales” as defined under certain laws. When we detect such a signal, we will make reasonable efforts to respect your choices indicated by a GPC setting as required by applicable law. 

How We Protect Your Personal Information 

We use commercially reasonable administrative, physical, and technical measures designed to protect your Personal Information from accidental loss or destruction and from unauthorized access, use, alteration, and disclosure. However, no website, mobile application, system, electronic storage, or online service is completely secure, and we cannot guarantee the security of your Personal Information transmitted to, through, using, or in connection with the Services. In particular, email, texts, and chats sent to or from the Services may not be secure, and you should carefully decide what information you send to us via such communications channels. Any transmission of Personal Information is at your own risk. 

The safety and security of your information also depends on you. You are responsible for taking steps to protect your Personal Information against unauthorized use, disclosure, and access. 

How We Retain Your Personal Information 

We keep the categories of Personal Information described in this policy for as long as reasonably necessary to fulfill the purposes described or for as otherwise legally permitted or required, such as maintaining the Services, operating our organization, complying with our legal obligations, resolving disputes, and for safety, security, and fraud prevention. This means that we consider our legal and business obligations, potential risks of harm, and nature of the information when deciding how long to retain Personal Information. At the end of the retention period, Personal Information will be deleted, destroyed, or de-identified. 

Indiana Access to Public Records Act 

As a public municipal corporation organized under the laws of the State of Indiana, IndyGo is subject to the Indiana Access to Public Records Act (“APRA”), Ind. Code § 5 14 3. Under APRA, IndyGo is required to make available for inspection and copying any public record that is not confidential or otherwise exempt from disclosure under applicable State or Federal law. Information submitted to IndyGo in connection with the Services may be considered a public record and may be subject to disclosure in response to an APRA request. IndyGo will not disclose information that is confidential or exempt under APRA or other applicable law. 

Changes to Our Privacy Policy 

We may update this policy from time to time, and we will provide notice of any such changes to the policy as required by law. The date the privacy policy was last updated is identified at the top of the page. We will notify you of changes to this policy by updating the “last updated” date and posting the updated policy on the Services. You should check our Services periodically to see the current policy and any changes we have made to it. 

Contact Information 

To exercise your rights or ask questions or comment about this privacy policy or our privacy practices, you can e-mail IndyGo through this website or call the Customer Service Center at 317.635.3344.