Privacy Policy
Privacy Policy
Privacy Policy
Last updated: 8 July 2026
This app is a public-transit map and route planner, published as a family of per-city editions that share the same code and the same third-party components. This policy applies to all of those editions on both Android and iOS. The developer of the app is Softing ("we", "us", "our"). You can reach us at apps@softing.dev for any privacy question or request.
The short version
There is no account and no login. We do not ask for your name, email, phone number, or any other identifying information.
We run no servers of our own. We never receive or store your personal data ourselves. The only data that leaves your device is processed by third-party services described below — chiefly Google AdMob (ads) and the map-tile providers.
Your saved routes, journey history, and settings stay only on your device. We cannot see them.
Location is optional and off until you turn it on; when on, it is used only on your device.
We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising, as those terms are defined under U.S. state privacy laws.
Information collected by the app itself
Essentially none. The app is built to work without collecting personal data.
Stored only on your device (we never receive it):
Saved and favorite routes.
Recent journey history — the stations you routed between (names/IDs) and timestamps.
Your preferences — language, theme, and display/map options.
Downloaded offline map tiles.
This lives in your device's standard app storage (SharedPreferences / NSUserDefaults / DataStore and app-internal files). There is no online database and nothing is synced to us or to a third party. You can erase all of it at any time by clearing the app's data or uninstalling the app. Because this data never leaves your device, it is not "collected" under Google Play's or Apple's definitions and is not listed as collected in our store data-safety and privacy labels.
Location: location access is optional and disabled until you enable it. When enabled, the app uses your location only while the app is in use (foreground) and only on your device — to show nearby stations, show your position on the map, and trigger arrival alerts. The app does not run background location tracking and does not transmit your location to us or to any server we control. Precise location is therefore declared as "not collected" in our store labels.
Information collected by third-party services
The app embeds a small number of third-party services. When they operate, they receive limited technical data (such as your device's IP address) directly, under their own privacy policies — not ours. We do not control and cannot access what these providers do with that data. For each third party named below, we require that, and/or their published terms provide that, any user data is handled with protection equivalent to that described in this policy and required by Google Play and the Apple App Store.
Google AdMob (Google) — advertising
The app shows ads through Google AdMob (banner, interstitial, and rewarded ads, plus an app-open ad on Android). To serve and measure ads, Google's advertising SDK collects, on the device: your IP address, a device advertising identifier (the Android Advertising ID), device and app information, approximate location, app-interaction data (such as ad taps, app launches, and video-ad views), and diagnostic/performance data. The app itself does not read or store these identifiers. Because this data is transmitted to Google, it is treated as both collected and shared under Google Play's Data safety definitions, for the purposes below. The advertising identifier is used only for advertising and analytics and is not linked to any other identifier or to personal data.
Purposes: serving ads, ad measurement and attribution, frequency capping, and fraud prevention / security.
Android: a Google User Messaging Platform (UMP) consent message is shown at launch, before ads load, for users in the EEA, the UK, and Switzerland. You can change your choice later, and you can reset your advertising ID or opt out of ad personalization in your Android settings.
iOS: ads shown on iOS are non-personalized. The app does not request App Tracking Transparency and does not access the advertising identifier (IDFA), so it does not track you across other companies' apps or websites, and no consent form is required. Ad attribution uses Apple's privacy-preserving SKAdNetwork.
Retention & controls: Google retains and manages this data under its own policies. See Google's data-retention information (https://policies.google.com/technologies/retention) and My Ad Center (https://myadcenter.google.com) to review or limit ad personalization.
Google Privacy Policy: https://policies.google.com/privacy
How Google uses data from apps that use its services: https://policies.google.com/technologies/partner-sites
OpenStreetMap and CARTO (CartoDB) — map tiles
The maps are drawn from tiles served by OpenStreetMap and CARTO. Requesting, viewing, or downloading tiles sends your device's IP address and the tile coordinates (z/x/y) of the area you are viewing to those providers. Tile coordinates are an approximate-location signal; no account or identifier is attached. In our store labels we treat the IP address involved in ad and tile requests under "Approximate location" / "Device or other IDs".
Purpose: delivering the map imagery you view or download for offline use.
OpenStreetMap Foundation Privacy Policy: https://wiki.osmfoundation.org/wiki/Privacy_Policy
CARTO Privacy Policy: https://carto.com/privacy/
Apple and Google platform services
The app uses standard platform services: Google Play in-app update and in-app review (Android) and Apple's SKStoreReview (iOS). These involve only the platform vendor's own telemetry; the app sends no app-authored personal data through them.
Google Privacy Policy: https://policies.google.com/privacy
Apple Privacy Policy: https://www.apple.com/legal/privacy/
Analytics and crash reporting
This release does not include analytics or crash reporting: no analytics events are recorded, and crash reporting is not enabled, so no diagnostic data is sent from the app itself (separate from the advertising SDK described above). If a future release enables crash reporting, this policy and our store labels will be updated to disclose it.
Advertising and your choices
Android (EEA / UK / Switzerland): a Google consent message runs at launch before ads load; you can change your choice later.
All Android users: reset your advertising ID or opt out of ad personalization in Settings › Google › Ads.
iOS users: the app does not track you and does not use the IDFA, so no App Tracking Transparency prompt is shown; you can review ad settings under Settings › Privacy & Security › Tracking and Settings › Privacy & Security › Apple Advertising.
Convenience option (not a consent control): on the route screen you can watch a short rewarded video to hide ads for 6 hours.
No cross-app tracking (iOS)
On iOS the app requests only non-personalized ads. It does not link data from this app with data from other companies' apps or websites for advertising, and it does not access the advertising identifier (IDFA). For that reason no App Tracking Transparency prompt is shown and the "Data Used to Track You" category in our App Store privacy label is empty. Ad attribution uses Apple's SKAdNetwork, which is designed not to track users.
Legal bases (GDPR / UK GDPR)
Where the EU or UK GDPR applies, our legal bases are:
Consent — for advertising that uses personal data (including the advertising identifier) for users in the EEA, the UK, and Switzerland on Android, obtained through the Google consent message before ads load. You may withdraw consent at any time.
Legitimate interests — for delivering the content you request (such as map tiles) and keeping the app free through advertising, balanced against your rights.
Performance of a service — technical data such as your IP address is transmitted to a third party only to the extent needed to deliver the content or ad you have requested.
We operate no servers, so we do not process personal data about you on our side.
How to withdraw consent
Android (EEA/UK/CH): re-open the Google consent choice from your device's ad settings, or change your advertising-ID and personalization settings in Settings › Google › Ads.
iOS: because the app does not track you and collects no consent on iOS, there is no consent to withdraw; you can still manage ad settings under Settings › Privacy & Security › Tracking and Apple Advertising.
Any platform: turning off Location in your device settings, or uninstalling the app, stops the corresponding data flows.
Your privacy rights
If you are in the EEA, the UK, or Switzerland (GDPR): you have the rights to access, rectify, erase, restrict, object to processing, and data portability, and to withdraw consent. Because we hold no personal data about you on any server, most of these rights are exercised directly on your device (by clearing app data or uninstalling) and through the third-party providers' own tools. For a request that requires a third party to act, email apps@softing.dev and we will direct you to the right mechanism or pass the request on. You may also complain to your local data protection authority.
If you are in California or another U.S. state with a privacy law (CCPA/CPRA and similar): you have rights to know, delete, and correct your personal information, and to opt out of its sale or "sharing." We do not sell your personal information and we do not "share" it for cross-context behavioral advertising, as defined under the CCPA (as amended by the CPRA) and comparable laws. To make a request or appeal a decision, email apps@softing.dev; we will not discriminate against you for exercising your rights. Because there are no accounts and we hold no personal data on our side, we may be unable to link a request to any data we control, but we will help you use the on-device and third-party controls described here.
How to delete your data
On-device data (saved routes, history, settings, offline tiles): clear the app's data in your device settings, or uninstall the app. This removes everything the app stores.
Advertising identifier: reset or delete it, or opt out of ad personalization, in your OS settings (Android: Google › Ads; iOS: Privacy & Security › Apple Advertising and Tracking).
Data held by a third party (for example, Google/AdMob): email apps@softing.dev and we will direct your request to the relevant provider or forward it on your behalf.
There are no user accounts; if we ever add accounts, we will provide an in-app way to delete your account and its data.
Data retention
We retain no personal data, because we operate no servers and have no accounts. On-device data stays only on your device until you clear the app's data or uninstall the app. Data received by the third-party services named above is retained by those providers under their own retention policies, linked in each section.
Security
The app has no user accounts and keeps your content only in your device's protected app storage. All network traffic to the third-party services described here is transmitted over encrypted connections (HTTPS/TLS).
Children
This app is a general-audience transit utility. It is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal data from children. If you believe a child has provided personal data through a third-party component, contact us at apps@softing.dev and we will help address it.
International data transfers
We do not transfer or store your personal data ourselves. The third-party services named above (including Google) are global providers and may process the limited technical data they receive on servers outside your country, including in the United States, under their own safeguards (such as standard contractual clauses where applicable).
Changes to this policy
We may update this policy from time to time. When we do, we will revise the "Last updated" date above and post the new version at the same URL. Significant changes will be reflected in the app or store listing where appropriate.
Contact
Questions, requests, or complaints about this policy or your privacy: Softing, apps@softing.dev.