Puente pilot privacy
Fieldkh Labs · Effective September 12, 2026
Trip destinations, Home and current location
The trip planner requests a one-time location only when you tap Use current location. It does not start crossing recording or background tracking. Starting points and unsaved destinations stay in page memory; location fixes expire after five minutes for route handoffs. Opening a road route in Google Maps sends your starting point, destination and selected bridge to Google through the Maps link; its privacy terms apply. Automatic full-trip ranking is not connected in this release.
Saved Home privacy and deletion
Only when you choose Save destination as Home, Puente receives the entered address, destination country and optional default over HTTPS. These are stored on our server under a hashed installation credential, not displayed publicly and not synced across devices. No nationality or residency profile is created. The app/browser stores an access key, not the Home address. Saved Home remains until you choose Remove in the Home controls for each direction. Remove it before uninstalling or clearing app/browser data: those actions erase the access key but do not delete the server address. Android uses the existing private installation credential; this is not an account with password recovery.
Private walking timer and student selection
Driving and walking are separate. The walking stopwatch does not use GPS or upload measurements. It stores only your latest timer, selected bridge, direction and pedestrian category in this app or browser’s local storage. The student category is a per-crossing choice, not a verified student profile. No school, student ID or age is requested. Delete this result or Discard timer removes it. Starting another replaces the previous result. Unfinished timers expire after 8 hours and completed results after 7 days, with cleanup when the walking screen next reads them. Clearing app or browser data removes this local timer.
Optional location recording
You can view official reports and cameras without sharing location. In the Android pilot, you start each recording and grant precise-location permission. A foreground service can access location while the app is minimized or the screen is off. Only points within the pilot corridor are saved on your phone. Recording stops when exit is confirmed, when you stop it, after 8 hours, or after 10 minutes without usable corridor locations.
Published route boundaries
The Android tester downloads public route definitions without sending your location. It keeps them privately on the phone for up to seven days for starting new recordings; an active recording retains the version it started with. The owner-only web portal edits route shapes, schedules and private review notes, not live user locations. Public statistics keep route versions and lanes separate. A geofence never starts location recording or grants permission by itself.
What is sent and stored
When you tap Send recording, your route points, timestamps, accuracy, selected lane, trip ID and consent version are sent over HTTPS to Puente for validation. Raw coordinates are processed in memory and are not stored in the trip database. We store the resulting duration, quality checks, completion time and a pseudonymous installation identifier. A location trace is sensitive and is not inherently anonymous. No individual route or location is displayed publicly.
Retention and deletion
Unsent recordings remain in this installation’s private storage, with Android backup disabled. They expire after 7 days and are removed when the recorder next reads them. Uploading successfully or choosing Discard removes the local points. Server trip records expire after 30 days and are cleaned up on the next trip or community request. Public pilot results use only the last 2 hours and require at least 5 distinct installations. Use Delete my submitted trips in the recorder to delete this installation’s server records. Do this before uninstalling or clearing app data, which removes the deletion credential.
Other providers and local preferences
CBP supplies official wait reports. City of El Paso supplies camera streams. OpenStreetMap supplies map data and tiles. These services and our hosting provider may process ordinary connection information such as IP addresses and request times. Puente stores your language and on-screen watch preferences locally. This pilot has no advertising, vendor location sharing, payments, photo uploads, or chat.