Privacy policy
Nysse app for Android and iOS.
Nysse is a public transit app for Finnish cities, provided free of charge by Hannu Tapanila. This policy explains what the app does with your data. Where Android and iOS differ, it says so.
Data controller: Hannu Tapanila, Finland — contact@nysse.mobi
In short
- There is no account. The app never asks for your name, email address or phone number.
- Your favourites, recent searches and settings stay on your device.
- Location is used only while you are using the app.
- Anonymous usage statistics and crash reports help find and fix problems.
- Nothing is sold, and nothing is used for advertising or for tracking you across other apps.
Data on your device
This is kept in the app on your phone and is never sent anywhere:
- Favourite stops, routes and journeys.
- Recent searches and recent trip plans.
- Your settings: region, language, theme and map preferences.
- The date the app was first installed, used to decide when to ask you to rate it.
Uninstalling the app removes all of it. You can also clear favourites and recent searches inside the app. On iOS, if iCloud Backup is on, this data may be part of your own device backup, which I cannot access.
Location
The app asks to use your location while you are using it. It never asks for background location and does not track your movements. Location is used to:
- show the stops nearest to you;
- show where you are on the map;
- fill in the starting point when you plan a journey;
- pick your region automatically, unless you have chosen one yourself.
Your coordinates go to the Nysse server, which sends back the stops or journeys around that point. They are not linked to any profile and are not shared with advertisers.
Turning coordinates into a street address, and back, is done by the operating system: Google on Android, Apple on iOS, under their own privacy policies.
You can refuse or withdraw the location permission in your device settings at any time. The app still works without it.
Timetable and map requests
When the app shows departures, routes, alerts or live vehicles, it asks the Nysse server. The request says what you are looking at and which region you are in. Like any web server, it keeps access logs with the IP address, the time and the address requested. These are used to run and secure the service, nothing else.
Maps are drawn by Google Maps on Android and Apple Maps on iOS, so Google or Apple sees the map area you are viewing.
Usage statistics
The app uses Google Analytics for Firebase to record which screens you open, plus two settings: whether dark mode is on, and which region you have selected. This is tied to a random ID for your app installation, not to you.
These statistics are not used for advertising, and they do not track you across other apps or websites.
Crash reports
The app uses Firebase Crashlytics. When it crashes or hits an error, it sends the technical details: the stack trace, device model, operating system and app version, the time, and the app's own recent error messages. It carries the same random installation ID.
Crash reports contain no favourites, no searches and no location.
Services used
| Service | Platform | Used for |
|---|---|---|
| Nysse server (run by me) | Android, iOS | Timetables, routes, alerts, live vehicles |
| Google Analytics for Firebase | Android, iOS | Anonymous usage statistics |
| Firebase Crashlytics | Android, iOS | Crash reports |
| Google Play services and Google Maps | Android only | Maps, location, addresses |
| Apple Maps and Location Services | iOS only | Maps, location, addresses |
The transit data itself comes from the open data sources listed on the data sources page.
How long data is kept
- On your device: until you clear it in the app or uninstall the app.
- Usage statistics: individual records are kept by Google for up to 14 months and then deleted automatically. Aggregated totals, which cannot identify a device, are kept longer.
- Crash reports: kept by Google for 90 days, then deleted automatically.
- Server access logs: deleted after 30 days.
Your choices and rights
There is no account, so there is no profile to sign into or delete. In practice:
- Location: refuse or withdraw the permission in your device settings.
- Data on your device: clear it in the app, or uninstall the app to remove all of it.
- Usage statistics and crash reports: uninstalling the app stops all further collection. To have what was already collected deleted, email contact@nysse.mobi.
Under the EU General Data Protection Regulation you can ask to see the data held about you, to have it corrected or deleted, to restrict or object to its use, and to receive it in a portable form. Email contact@nysse.mobi. Since this data is tied only to a random installation ID, I may need that ID from your device to act on the request. You can also complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).
Security
The app talks to the Nysse server, and to the services above, over encrypted HTTPS or TLS connections. No method of transmission or storage is completely secure, so absolute security cannot be guaranteed.
Links to other sites
The app and this site link to sites run by transit authorities and others. I do not run those sites and am not responsible for their content or their privacy practices. Please read their own privacy policies.
Changes to this policy
This policy may change from time to time. Any change is published on this page and takes effect once posted, so it is worth checking back occasionally.
Contact
Questions or requests about this policy: contact@nysse.mobi.