1. Location data
**What we access:** approximate and precise location, including in the background while the app is closed — this is the core function of the app.
**Why:** to compare your position against your chosen station and decide when to ring, and (if "wake me early" is on) to estimate your speed and arrival time from recent readings.
**How it's handled:**
- Processed entirely on-device, in memory. Recent readings are kept for a short rolling window (~5 minutes), then discarded.
- Never saved to storage, never transmitted to us or anyone else.
- Background location only runs while you have an active alarm; a permanent Android notification shows whenever it's in use.
You can revoke location permission anytime in Android Settings → Apps → My Station Alarm → Permissions, though the app can't work without it.
2. Data stored on your device
Saved locally, never uploaded: your alarms (station, coordinates, distance, tone, vibration/flashlight choices), app settings (theme, language, haptics), a random installation ID (see §3), and the built-in station list.
All of it is deleted on uninstall, or earlier via in-app delete or Android Settings → Storage → Clear data.
3. Feedback messages
Only if you send a message via **Settings → Feedback & Requests**, we receive: your message text, device model/manufacturer/name, app version, and a random installation ID (not your ad ID, phone number, or an account — used only to match our reply to your message, reset on data clear/reinstall).
Used only to respond to and fix your report. Stored via Google Apps Script/Sheets (§4). Not used for advertising, not sold. Please don't include sensitive information in feedback.
4. Third-party services
No ads or analytics SDKs. Outside services are contacted only when:
| Service | When | Receives |
|---|---|---|
| **OpenFreeMap** | A map is shown | Your IP and the displayed map area |
| **Google Apps Script/Sheets** | You send/read feedback | Data listed in §3 |
| **Google Play** | You tap "Leave a review" | Nothing (handled by Play Store) |
| **Phone dialler** | You tap an emergency number | Nothing (we don't place or log the call) |
| **Android share sheet** | You tap "Share This App" | Nothing |
If you never open a map or send feedback, the app makes no network requests at all.
5. What we don't do
No ads, analytics, crash reporting, or ad identifiers. No account, email, phone number, or name required. No access to contacts, photos, files, microphone, camera, call log, or SMS. No selling/renting data, no cross-app tracking.
6. Permissions
| Permission | Why |
|---|---|
| Location (precise/background) | Measure distance to your station; keep working with the screen off or app closed |
| Foreground service (location) | Keep the journey-watching service running, with a visible notification |
| Notifications / full-screen alert | Show the journey notification and alarm, including over the lock screen |
| Exact alarms | Snooze rings at the exact time set |
| Ignore battery optimisation | Optional — prevents aggressive phones from killing the background service |
| Wake lock / vibration | Wake the screen and vibrate when the alarm rings |
| Camera flash (feature, not permission) | Flashlight alert, if enabled — no camera permission requested |
7. Retention, children & security
- **On-device data:** kept until deleted or the app is uninstalled. **Location:** never retained. **Feedback:** kept while handling your request; email us to request deletion within 30 days.
- Not directed at children under 13; we don't knowingly collect their data.
8. Changes & contact
Updates to this policy change the "Last updated" date above; significant changes are also noted in release notes.