Privacy policy
Updated 06.11.2026
Zupynka shows public transport arrivals on your phone and watch. We collect as little data as we can: without an account the app works fully, and nothing personal is kept on our server.
In short
- Your location and trip history are not stored on the server.
- Habits («home», «work», what you open when) are worked out on your phone only.
- We don’t sell data.
- You can delete your account in the app at any time — together with all its data.
1. Who is responsible for your data
Volodymyr Olehovych Labish, sole proprietor, Ukraine. Write to us: support@zupynka.app.
2. Without an account
- Location. To show nearby stops and work out «leave in», the app sends your coordinates in the request. The server answers and neither stores them nor writes them to its logs.
- Favourites, settings, habits stay on your device and watch.
- Reminders. To send a notification, the server keeps your device’s notification token, a hash of a random device secret and the reminder itself: route, stop, time and days. For «where I am» the app sends only the nearest stop, never coordinates.
3. With an account
Signing in — with Google or Apple — is optional. If you do, we keep:
- in Firebase Authentication (Google) — an ID, your email and how you signed in;
- on our server — favourite stops and routes, reminders and settings (language, theme), so they’re there on a new phone.
If we give you Pro as a gift, we find the account by the exact email you gave us and pass its ID to RevenueCat. We see nothing else about you when doing so.
We don’t have or keep passwords.
4. Purchases
You pay for Pro on Google Play or the App Store; RevenueCat keeps track of the subscription. We never see payment details. RevenueCat receives an anonymous ID, or your account ID if you’re signed in.
5. Analytics and crashes
Firebase Analytics — anonymous events (for example «stop opened»), to understand what works. Firebase Crashlytics — crash reports: device model, system version, where it crashed. No names, emails or coordinates.
6. Who else processes data
| Service | What for |
|---|---|
| Google Firebase | Sign-in, notifications, analytics, crash reports |
| RevenueCat | Pro subscription status |
| OVHcloud | Our server and database, EU |
| Cloudflare | Domain, website, website visit statistics, map, encrypted backups |
| Google Play, App Store | Installing and paying |
Our server gets the weather for the map from MET Norway for the city centre — none of your data goes there. This website uses no cookies and no third-party fonts. Visits are counted by Cloudflare Web Analytics — without cookies or cross-site tracking.
7. How long we keep data and how to delete it
Account data — as long as the account exists. Profile → Delete account and data removes you from Firebase and our database at once, and from backups within 30 days. Without the app — see the instructions. Reminders without an account leave the server as soon as you delete them.
Server logs contain no IP addresses, coordinates or tokens.
8. Your rights
You can ask for a copy of your data, have it corrected or deleted, or object to its processing — write to support@zupynka.app and we’ll reply within 30 days. You can complain to the Ukrainian Parliament Commissioner for Human Rights or, if you live in the EU, to your country’s data protection authority.
9. Children
Zupynka can be used at any age, but it isn’t made specifically for children. An account requires you to be 13 or older (or the age your EU country sets, up to 16). Without an account nothing personal is kept on the server, so a child can use the app that way. If you are a parent and think a child under that age has created an account, write to us and we’ll delete it with its data.
10. Changes
If this policy changes in a meaningful way, we’ll say so in the app. The date at the top is the date of the last change.