Privacy
Last updated: 25 October 2026 · Santiago Bus app for Android (and its iOS version, once released)
In one sentence: the app has no accounts and no servers of its own, it never asks for personal details, and it sells nothing. Everything you save stays on your phone. The only things leaving the device are what's needed to fetch bus data, show ads and report a crash.
Who is responsible
Santiago Bus is an independent app made by buhhoapps (Adrián, an individual developer). It is not affiliated with TUSSA or the City Council of Santiago de Compostela. For any privacy question or request: [email protected].
What the app does with your data
Your location
If you grant location permission, the app uses it on the phone only to sort nearby stops, tell you how far they are and centre the map. It is never stored or sent anywhere: not into the app database, not to TUSSA, not to us, not to ads.
The permission is optional and can be revoked at any time in your phone settings. Without it you can still search stops by name, line number or code, and use the map by hand.
What is stored on your phone
So it keeps working without a network, the app stores this in the device's internal storage:
- The stops you save: stop code, any nickname you give it, its colour, its order and the lines you picked.
- The line, route and stop catalogue, plus TUSSA service alerts.
- Recent searches and the stops you opened most recently.
- Your preferences: theme, language, and the language the catalogue was downloaded in.
None of this is uploaded anywhere. It is deleted when you uninstall the app (or clear its data in Android settings).
Bus data (TUSSA)
To show times, routes and alerts, the app requests data from TUSSA's public API
(app.tussa.org) over HTTPS. Like any internet request, TUSSA's server sees the IP address the
request came from and the time. We do not sit in between: the app talks to TUSSA directly and we keep
nothing from those requests.
Ads (Google AdMob)
The app is free and funded by native ads from Google AdMob. To serve them, Google's SDK may collect data such as the device's advertising ID, IP address, device model, language and OS version, plus ad usage data. Google handles that processing as an independent controller; its policy is at policies.google.com/technologies/ads.
- Consent: where the law requires it, the app asks first (Google's UMP form). If you decline, only non-personalised ads are shown.
- Changing your mind: Settings → "Ad privacy" (only shown where consent is mandatory).
- iOS: it also asks for App Tracking Transparency permission; if you decline, ads are not personalised.
- No consent, no ads: until consent is given, the app loads none.
Crash reports (Firebase Crashlytics)
If the app closes because of a crash, the store build sends a report to Firebase Crashlytics (Google) with the error stack trace, phone model, OS version and app version, plus an installation identifier. It is used only to fix the bug: it does not include your saved stops, your searches or your location. You can avoid any report by uninstalling the app or restricting network access.
Links and email
The app may open the Google Play listing, a system settings screen, or your email app (with the address already filled in) when you tap "Send feedback". In that case you send the message yourself from your own mail account.
What the app does not do
- No sign-up, accounts or passwords.
- No analytics of our own and no trackers beyond the ads and crash reports described above.
- No selling or sharing of data with anyone.
- No access to contacts, camera, microphone, photos, or background location.
- No cross-session location tracking.
Service summary
| Service | Purpose | What it receives |
|---|---|---|
TUSSA (app.tussa.org) | Times, lines, stops and alerts | Request IP and time; the stop code queried |
| Google AdMob | Ads that fund the app | Advertising ID, IP, model, language, ad usage |
| Firebase Crashlytics | Crash reporting | Stack trace, model, versions, installation ID |
| Your phone | Saved stops, catalogue, preferences and location | Nothing: it stays on the device |
Children
The app is not directed at children under 13 and does not knowingly collect personal data from children. There is no user-generated content and no person-to-person messaging.
Retention and your rights
What the app stores lives on your phone and you control it: clear the app's data in system settings or uninstall the app to remove it. For data processed by Google (ads and crash reports), you can exercise your rights with Google, or write to us and we will help you find the right route.
If you are in the European Union, you have the right to access, rectify, erase and object to the processing of your data, and to lodge a complaint with the Spanish Data Protection Agency (aepd.es). Write to us first if you would like help: [email protected].
Changes to this policy
If the app changes what it does with data, we will update this page and the date above. Significant changes will also be noted on the store listing.