Short version
- No account, no sign-up, no analytics, no tracking.
- If you turn on notifications, our server keeps an anonymous device ID and the lines you follow, nothing more.
- Your settings and cached alerts are stored only on your phone.
- Translation of alerts runs on your phone.
- Your location is used only on your phone, and only if you add an area “around my location”.
Who is responsible
City Transport Alerts (“the app”) is an independent project. The data controller is:
Şükrü Ilgay Yarımoğlu
Podolské nábřeží 1125
Prague 4, Czech Republic
support@citytransportalerts.com
Data stored on your device
- Lines, districts and custom areas you follow; language and notification settings.
- A cache of recent alerts, which alerts you have read, and translations you requested.
- An optional Golemio API key you enter yourself, kept in the device’s secure keychain/keystore.
This data stays on your device, except what is described under Notifications. Deleting the app deletes it.
Connections the app makes
To work, the app downloads public data. Like any internet request, these servers receive your device’s IP address and basic technical information, which they handle under their own privacy policies:
- pid.cz (ROPID): public transport disruption feeds.
- api.golemio.cz (Operátor ICT, a.s.): only if you enter a Golemio API key.
- Google ML Kit: a one-time download of translation language packs if you use translation. The translation itself happens on your phone; alert texts are not sent to Google.
- citytransportalerts.com (hosted by Cloudflare): sponsored content shown in the app.
Location
If you add an area “around my location”, the app asks for permission, reads your position once, and saves it on your phone. It is used only to match alerts to that area and is not sent anywhere.
Notifications
When notifications are on, the app registers with our notification server so that alerts reach you within minutes. The server stores only:
- a random device ID and a secret created by the app (not linked to your name, email or phone number),
- the push token issued by Apple or Google through Expo, used only to deliver notifications,
- the city, lines and districts you follow, your alert type and severity preferences, and your language.
Custom areas “around my location” are converted on your phone into the districts they cover; your coordinates are never sent. Notifications are delivered through Expo (650 Industries, Inc.) and Apple Push Notification service or Google Firebase Cloud Messaging. Notification titles may be translated with DeepL (DeepL SE, Germany); only the public alert text is sent there, never data about you.
The legal basis is your request to receive notifications (Art. 6(1)(b) GDPR). Turning notifications off in the app deletes your registration from our server. Registrations of uninstalled apps are deleted automatically.
On devices where server notifications are unavailable, the app checks for new alerts itself and nothing is sent to our server.
Sponsored content
Sponsored cards are clearly labelled. Showing them does not involve tracking or personal profiles. If you tap one, the advertiser’s website opens in your browser and their privacy policy applies.
Your rights
Under the GDPR you have the right to access, correct and delete your personal data, to object to or restrict processing, and to lodge a complaint with a supervisory authority (in the Czech Republic: Úřad pro ochranu osobních údajů, uoou.gov.cz). Turning notifications off deletes everything our server holds about your device; for anything else, contact us.
Children
The app is not directed at children under 13 and does not knowingly collect data from them.
Changes
We will post updates on this page and change the date above. Significant changes will also be announced in the app.