Privacy statement
Draft. This text will still be reviewed by a lawyer before the apps are in the stores.
Who we are
Wissel OV is a travel app for public transport in the Netherlands, made by Mats Hazebroek and Joost Hagendoorn. Questions about privacy: [email address].
What the app stores on your device
- Your places on the start screen (for example Home and Work) with their address and coordinates.
- Your last five destinations.
- Your settings.
This is stored only on your device and in your device's backup (iCloud or Google). On Android, only these settings are included in the backup. If you delete the app, it is gone from your device.
What goes to our server
| Data | What for | For how long |
|---|---|---|
| Your location, rounded to about 10 metres | The journeys from where you are. As long as there are addresses on your start screen, about every minute. | Not saved: only used to calculate the journey. |
| Departure point and destination of a journey you plan | The journey advice | Not saved. A walking route to it stays briefly in the server's memory. |
| A journey you have started, with your device's push token and, on iOS, the Live Activity token | Notifications for delays, cancellations and a different platform, and the departure reminder. On iOS also updating the journey on the lock screen and in the Dynamic Island when the app is closed | In the server's memory, until one hour after arrival. Then deleted; also after a server restart. |
The server keeps no history, builds no profile and links nothing to an account: there are no accounts. Traffic between the app and the server is encrypted (HTTPS).
The server uses your IP address only in memory, to limit how many requests one address can make per minute. The server does not write addresses or searches to its log, with one exception: if fetching a walking route fails, the request with coordinates may end up in the log.
Who else is involved
- Apple (APNs) and Google (Firebase Cloud Messaging) deliver the push notifications. They receive the push token and the text of the notification. For the Live Activity, Apple receives its token and the state of the journey: the next step, the times and any delay.
- PDOK (Kadaster): when you search for an address, your search goes via our server to PDOK's Locatieserver. Your location does not go there.
- The routing service of the OpenStreetMap community (FOSSGIS): for walking and cycling routes our server sends the coordinates of the start and end of that stretch there. That can be your location or an address from your start screen. It comes from our server's address, not from your device.
- OpenFreeMap and OpenStreetMap (Android) and Apple Maps (iOS) provide the map. They can see which map area is being loaded.
We do not sell data and we use no ads or tracking.
Permissions
- Location is needed by the app to plan from where you are. The app asks for it during setup or afterwards on a screen of its own, and only uses it while you are using the app. If you refuse, the app stays open and Start shows how to turn it on after all.
- Notifications are requested when you turn them on. You can turn both off at any time in your device's settings.
Your rights
You have the right to access, correct and delete your data. Because the server stores nothing beyond a journey in progress, there is usually nothing to request. If you stop a journey or turn off notifications, the app removes the registration immediately. You can lodge a complaint with the Autoriteit Persoonsgegevens (the Dutch Data Protection Authority).