Privacy policy

This policy explains what data the Salamanca Bus app for Android (salamanca.bus) handles, what it uses it for and what you can do about it. It applies to the app and to this website.

Summary

• There are no accounts or sign-ups: the app doesn’t know who you are.
• Your location, favourites and settings stay on your phone.
• The app sends crash reports to Google (Firebase Crashlytics) and shows Google AdMob ads, which use device identifiers. In the European Economic Area, the UK and Switzerland we ask for your consent before personalising ads.
• We don’t sell personal data.

Controller

David González Juanes, the app’s developer, based in Spain. Contact: david.gonzalez.juanes@gmail.com.

What data is handled and why

Location

If you grant location permission (approximate or precise), the app uses it to sort stops by distance, centre the maps and point the compass towards the stop. Your location is processed only on your phone: the app doesn’t send it to any server or store it. The permission is optional: without it, the app uses Plaza Mayor as the starting point. You can revoke it at any time in Android settings.

Favourites and settings

Your favourite stops, their names, their order and your preferences (arrival time format, theme and language) are stored on your phone. If Android backup is turned on, the system may include them in your Google backup, encrypted and under your account; we have no access to it.

Arrival times

To show the next arrivals, the app asks Salamanca de Transportes’ information service for the times at the stop you’re looking at. The request only carries the stop number. As with any internet connection, that server receives the IP address it comes from. That service doesn’t support encrypted connections, so the request travels unencrypted; it contains no personal data.

Maps

The maps use the Google Maps SDK for Android. When they’re shown, Google receives technical data such as the IP address, the device model and map usage, under Google’s privacy policy.

Crash reports (Firebase Crashlytics)

When the app crashes, it sends a report to Firebase Crashlytics (Google) so we can find and fix the bug. The report includes the stack trace, the device model and Android version, the app version and a Firebase installation ID, which doesn’t identify you personally. It doesn’t include your location or your favourites. Legal basis: our legitimate interest in the app working properly. Crashlytics keeps reports for 90 days.

Advertising (Google AdMob)

The app is free and funded by Google AdMob ads. To show and measure them, the Google Mobile Ads SDK collects the device’s advertising ID, the IP address, device and app information, and your interactions with ads.

• In the European Economic Area, the UK and Switzerland, the app asks for your consent through Google’s consent tool (UMP) before showing personalised ads. If you don’t give it, ads aren’t personalised. You can change your choice at any time in the app’s settings.
• You can reset or delete your advertising ID in Android settings (Privacy → Ads).
• Google handles this data as described in how Google uses information from sites or apps that use its services.

Legal basis: your consent for personalised ads and our legitimate interest for non-personalised ones.

Feedback by email

If you write to us from Send feedback, the email includes the app and data versions, your phone model and Android version, to help with your request. We also receive your email address. We only use this data to reply and delete it once it’s no longer needed.

This website

This site is hosted on GitHub Pages and served through Cloudflare. Like any web server, they log technical data about visits (such as the IP address) for security and operation. The site uses no cookies, analytics, or third-party fonts or services.

Who it’s shared with

Only with the providers above, for the purposes described: Google (Firebase Crashlytics, Google Maps and AdMob) and, to serve this site, GitHub and Cloudflare. Google may process data outside the European Economic Area under the EU-US Data Privacy Framework and the European Commission’s standard contractual clauses.

Your rights

You can ask for access to, rectification, erasure, restriction or portability of your data, and object to its processing, by writing to david.gonzalez.juanes@gmail.com. As the app has no accounts, we may not be able to link any data to you. You can also lodge a complaint with the Spanish Data Protection Agency (AEPD).

To delete all of the app’s data on your phone, uninstall it or clear its data in Android settings.

Children

The app isn’t specifically aimed at children and doesn’t knowingly collect data from children under 14.

Changes

If this policy changes, we’ll publish the new version on this page with its update date.