Privacy policy
Controller
Andrea Abbonizio. For any request about your data: andreaabbonizio01@gmail.com.
No account
The app does not ask for your name, email or an account. Each time you open it, it creates a random session code that changes at every launch and is not stored on the phone.
Location
By default your location is used only while the app is open ("while using the app" permission) to: center the map, show distances, check that you are on site when you send a report, nearby report alerts and recommended places.
Only if you turn on "Alerts when the app is closed" (off by default, can be turned off in Settings) your location is also used in the background, with the "allow all the time" permission: the phone checks whether you are within 200 m of a report and sends you a notification. To do so it asks our server for the reports in an area of about 1 km around a point rounded to about 500 m; your location is not stored. On Android a persistent notification stays visible while alerts are on.
Exact coordinates are not stored on our servers. To check a report your location is used and discarded; for recommendations it is sent rounded to about 1 km; map reports (parties, closed roads…) are stored at a point rounded to about 50 m.
Anonymous contribution (presence)
If enabled (it is by default, you can turn it off in Settings), while you use the app we send every few minutes only the area you are in, a square of about 250 m computed on the phone, together with the session code. It is used to show where people are and to compute the usual crowd levels of areas.
Individual signals are deleted within about one hour and twenty minutes; only aggregated counts per area and hour remain, without codes. An area is shown only when at least 5 people are there.
Reports and suggestions
When you report crowds, queues or events or suggest a place, we store the content of the report, the place or area and the time. To limit abuse we keep for 24 hours the session code and a fingerprint (hash) of your IP address computed with a key that changes every day; after 24 hours they are deleted. For suggested places we also keep the distance, rounded to 50 m, between you and the suggested point.
The anonymous history of reports is used to compute the usual crowd levels of places.
Data stored on the phone
Your preferences and the list of reports already seen or voted (deleted after 24 hours) stay on the phone. They are not sent to us.
Providers
Supabase (database, servers in the European Union) hosts the data described above. Mapbox provides the map: it receives map requests and, if telemetry is on (you can turn it off in Settings), anonymous usage data under its own privacy policy.
Legal basis and retention
We process data to provide the service and on our legitimate interest in showing reliable information and preventing abuse, with the retention times stated above. You can object to the anonymous contribution by turning it off in Settings and revoke the location permission in the phone settings.
Your rights
You can request access, rectification, erasure, restriction and objection (Articles 15-22 GDPR) by writing to andreaabbonizio01@gmail.com. As we do not collect identifying data, we may be unable to link data to you. You can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).