Legal

Eagle One Privacy Policy

Last updated: August 21, 2026

Eagle One is an independent app for Boston College students, published by Charlie Bieger (“we”, “us”). This policy explains what the app collects, where it is stored, who can see it, and how to remove it. It covers the Eagle One iOS app and the Eagle One website.

Eagle One has no analytics, no advertising, no tracking SDKs and no third-party trackers of any kind. We do not sell or share your personal information, and we do not track you across other apps or websites.

Signing in

Eagle One requires Sign in with Apple. Your account protects a private workspace containing your courses, assignments, reminder settings, dining favorites, dietary preferences, appearance and private iCloud backup, and it is what makes account deletion possible.

When you sign in, Apple gives the app an app-specific identifier for you, and — only if you choose to share them — your name and email address. What happens to each:

• Apple identifier. Stored in the iOS Keychain on your device, marked so it cannot be restored onto a different device. It is never uploaded to us or to anyone else.
• One-way hash of that identifier. The app computes a SHA-256 hash on your device and stores that hash in your private iCloud database, and alongside any support message you choose to send. The hash is what lets a submission be matched to your account so it can be deleted. The original identifier cannot be recovered from it.
• Name and email. If Apple provides them, they are saved on your device to pre-fill your profile and the support form. They are not uploaded unless you submit a support message.

What is stored, and where

Courses and assignments are kept on your device and in your private iCloud database. Your profile name, class year, campus and profile photo stay on your device; the photo is never uploaded. Dining favorites, pinned halls, allergen and dietary preferences and appearance are kept on your device and in your private iCloud database. Notification and calendar preferences, permission choices and announcement state stay on your device.

Location is used in memory and the most recent position is cached on your device. It is never transmitted to us, to Boston College or to TransLoc.

Homework calendar events are written to a dedicated “Eagle One Homework” calendar in your own Calendar app. Reminders are scheduled locally: Eagle One does not use push notifications and never receives a device token.

Dining, shuttle and route caches, learned shuttle arrival history and the ETA accuracy log all stay on your device. The shuttle history and accuracy log contain routes, stops and times only — no personal information and no location.

Support messages you send are stored in Apple’s CloudKit, in the app’s shared database rather than your private one, so that we can read and answer them. Each record carries permissions that allow only its creator and us to read it — other Eagle One users cannot read or list your submissions. This is the only place your typed name, email address and message leave your device, and nothing is sent unless you submit the form.

Synced items go to your own private iCloud database inside Apple’s CloudKit, under your Apple Account. We cannot read it. If iCloud is unavailable, previously loaded data stays usable offline on your device.

Permissions, all optional

After you sign in, every additional permission is optional and the app remains usable if you decline. You can change any of them at any time in iOS Settings.

• Location (While Using the App). Shows you on the shuttle map, orders nearby dining halls and estimates walking time. Processed on your device and by Apple MapKit. Not sent to us.
• Calendar (Full Access). Creates, updates and removes events only in a dedicated “Eagle One Homework” calendar. Full access is required by iOS because the app must also delete the events it created. Eagle One does not read your other calendars for any other purpose, and calendar contents are never uploaded to us.
• Notifications. Local reminders for assignments, dining favorites and campus alerts.
• Photos. Only when you choose a profile photo. The image stays on your device.

Information sent over the network

Eagle One makes requests to the services below. As with any web request, the operator of each service can see your device’s IP address and standard connection information.

• Boston College Dining (web.bc.edu) — to load menus and hours. No personal information is sent.
• TransLoc (bc.transloc.com) — to load shuttle routes, vehicle positions, arrival estimates and service alerts. No personal information is sent, and your location is not included.
• Apple — Sign in with Apple, CloudKit, MapKit and the App Store version check.
• Eagle One’s own service — a minimum-supported-version check that sends nothing about you, and, only when you tap Delete Account, a short-lived Apple authorization code used once to revoke Eagle One’s Sign in with Apple access. That code is not retained, and neither are the tokens exchanged with Apple.

Keeping and deleting your information

Information is kept only as long as it is needed to run the app or to answer a support message. On-device caches expire on their own: dining and shuttle caches within days, learned shuttle history after eight weeks, and the ETA accuracy log after thirty days.

Settings › Sign Out first tries to back up your work to your private iCloud database, warns you if anything has not been saved, and then removes this device’s local copy of your account so a different Apple Account cannot inherit it. Data already synced remains available when the same account signs in again.

Settings › Delete Account asks you to confirm again with Apple, then deletes your private iCloud courses, assignments and app state, deletes support messages linked to your account, revokes Eagle One’s Sign in with Apple authorization, and removes local data from the device — homework, profile and preferences, dining favorites and dietary preferences, cached location, appearance, announcement state, shuttle caches and learned history, and pending and delivered notifications. When Calendar access is available it also removes the dedicated Eagle One Homework calendar.

If a required service is unavailable, the app does not report the account as deleted: it explains what remains, leaves your account intact where it can, pauses synchronization, and lets you try again. If cleanup is interrupted after Apple authorization has been revoked, the app finishes it the next time you open it.

Deleting the app without using Delete Account may leave private iCloud records and calendar events in Apple-managed services, because those live in your Apple Account rather than on the device.

Your rights

Most of your information is already under your direct control: it is on your device or in your own Apple Account, and Delete Account removes it. For anything we hold — in practice, support messages — you may ask us to access, correct, delete or export it, or to restrict or object to its use, by emailing charlie@charliebieger.com. We will respond within 30 days and will not treat you differently for asking.

If you are in California: we do not sell or share personal information as those terms are used in the CCPA/CPRA, and we have not done so in the preceding twelve months. If you are in the UK, the EEA or Switzerland: we process this information to perform the service you requested and on the basis of our legitimate interest in operating and supporting the app, and you may lodge a complaint with your local supervisory authority. Information we hold is processed in the United States.

Children

Eagle One is intended for university students and others aged 13 and over, and is not directed to children under 13. We do not knowingly collect personal information from a child under 13. If you believe a child under 13 has provided personal information, email us and we will delete it.

Eagle One is not a school-operated service, is not provided under contract to any school, and does not receive student records from any institution. Everything in the app is entered by you or drawn from publicly available dining and transit feeds.

Security

All network requests use HTTPS. The Apple identifier is held in the iOS Keychain and cannot be restored onto another device. Private data is protected by Apple’s CloudKit private database, which is scoped to your Apple Account. No system is perfectly secure, and we cannot guarantee absolute security.

Changes to this policy

If this policy changes, the date above changes with it and the current version is available in the app under Settings › Privacy Policy and on the Eagle One website. Material changes will be highlighted in the app.

Important limits

Eagle One is an informational student utility. Shuttle times, dining information and alerts can be delayed, incomplete or wrong. Do not rely on the app for emergencies or for any decision where incorrect information could cause harm.

Contact

Charlie Bieger — charlie@charliebieger.com

Eagle One is an independent, unofficial app. It is not affiliated with, endorsed by or sponsored by Boston College, TransLoc or Apple.