Privacy policy

This policy explains what data the Ávila Bus app for Android (dev.davidjuanes.avilabus) handles, what it uses it for and what you can do about it. It applies to the app and to this website.

Summary

• There are no accounts or sign-ups: the app doesn’t know who you are.
• Your location, favourites and settings stay on your phone.
• The app sends crash reports to Google (Firebase Crashlytics) and shows Google AdMob ads, which use device identifiers. In the European Economic Area, the UK and Switzerland we ask for your consent before personalising ads.
• We don’t sell personal data.

Controller

David González Juanes, the app’s developer, based in Spain. Contact: david.gonzalez.juanes@gmail.com.

What data is handled and why

Location

If you grant location permission (approximate or precise), the app uses it to sort stops by distance, centre the maps and point the compass towards the stop. Your location is processed only on your phone: the app doesn’t send it to any server or store it. The permission is optional: without it, the app uses Plaza de Santa Teresa as the starting point. You can revoke it at any time in Android settings.

Favourites and settings

Your favourite stops, their names, their order and your preferences (arrival time format, theme and language) are stored on your phone. If Android backup is turned on, the system may include them in your Google backup, encrypted and under your account; we have no access to it.

Arrival times

To show the next arrivals, the app asks the information service of Ávila’s city buses (run by Avanza) for the times at the stop you’re looking at. The request is encrypted and only carries the stop number. As with any internet connection, that server receives the IP address it comes from.

Maps

The maps use the Google Maps SDK for Android. When they’re shown, Google receives technical data such as the IP address, the device model and map usage, under Google’s privacy policy.

Crash reports (Firebase Crashlytics)

When the app crashes, it sends a report to Firebase Crashlytics (Google) so we can find and fix the bug. The report includes the stack trace, the device model and Android version, the app version and a Firebase installation ID, which doesn’t identify you personally. It doesn’t include your location or your favourites. Legal basis: our legitimate interest in the app working properly. Crashlytics keeps reports for 90 days.

Advertising (Google AdMob)

The app is free and funded by Google AdMob ads, which appear in some lists and at the bottom of some screens, never on the maps or full screen. To show and measure them and to prevent fraud, the Google Mobile Ads SDK collects and shares with Google:

• device identifiers: the advertising ID, the app set ID and, if any, identifiers of the accounts signed in on the device;
• the IP address, which may be used to estimate the device’s approximate location (not your GPS location, which never leaves your phone);
• your interactions with the app and the ads, such as opening the app, taps and video views;

• diagnostic data about the app and the SDK, such as launch time, hangs and energy use.

• In the European Economic Area, the UK and Switzerland, the app asks for your consent through Google’s consent tool (UMP) before showing personalised ads. If you don’t give it, ads aren’t personalised. You can change your choice at any time in the app’s settings (More → Settings → Ad privacy options).
• You can reset or delete your advertising ID in Android settings (Privacy → Ads).
• Google handles this data as described in how Google uses information from sites or apps that use its services.

Legal basis: your consent for personalised ads and our legitimate interest for non-personalised ones.

Feedback by email

If you write to us from Send feedback, the email includes the app and data versions, your phone model and Android version, to help with your request. We also receive your email address. We only use this data to reply and delete it once it’s no longer needed.

This website

This site is hosted on GitHub Pages and served through Cloudflare. Like any web server, they log technical data about visits (such as the IP address) for security and operation. The site uses no cookies, analytics, or third-party fonts or services.

Who it’s shared with

Only with the providers above, for the purposes described: Google (Firebase Crashlytics, Google Maps and AdMob) and, to serve this site, GitHub and Cloudflare. Google may process data outside the European Economic Area under the EU-US Data Privacy Framework and the European Commission’s standard contractual clauses.

Your rights

You can ask for access to, rectification, erasure, restriction or portability of your data, and object to its processing, by writing to david.gonzalez.juanes@gmail.com. As the app has no accounts, we may not be able to link any data to you. You can also lodge a complaint with the Spanish Data Protection Agency (AEPD).

To delete all of the app’s data on your phone, uninstall it or clear its data in Android settings.

Children

The app isn’t specifically aimed at children and doesn’t knowingly collect data from children under 14.

Changes

If this policy changes, we’ll publish the new version on this page with its update date.