Privacy Policy
Effective: September 14, 2026
1. Who we are
This Policy explains how TERRANOVA SOFTWARE LTDA, CNPJ 46.648.741/0001-84 ("TerraNova", "we"), the data controller, handles information when you use the Próxima Estação app ("App") and the proximaestacao.app website ("Site"), under Brazil's General Data Protection Law (Law 13,709/2018, "LGPD"). Privacy contact: support@tnova.dev.
2. Summary
- The App has no account and no login. We don't ask for your name, email or phone.
- Your location never leaves your device for our servers.
- Your routines stay on your device.
- Crowding reports are anonymous and deleted automatically after 90 days.
- We don't sell personal data.
3. Data we process and why
3.1 Location. With your permission ("While Using the App"), the App uses your approximate location (about 100 meters of precision) to find the nearest station and to confirm you're near a station when you submit a report. This is computed on your device. To estimate the walking distance to the station, the App queries Apple Maps, which receives the origin and destination coordinates under Apple's privacy policy. We don't send your location to our servers. You can revoke the permission anytime in iPhone Settings.
3.2 Crowding reports. When you submit a report, our servers receive: the station, the line, the crowding level, whether the report was made near the station, the time, and a random device identifier. The App creates that identifier and keeps it in the device Keychain (not synced to iCloud), and it persists if you reinstall the App. It isn't linked to your name, your Apple Account or any identifying data, and only serves to limit abuse (such as repeated reports). Reports are combined to show live crowding to other users (only in aggregated form, with no identifiers) and are deleted automatically after 90 days. The App also keeps your report history and any reports waiting to be sent on your device.
3.3 Notifications. If you allow notifications, the App registers the device with Firebase Cloud Messaging (Google), which issues a delivery token, and subscribes the device to the topics for the lines you chose, to receive status-change alerts. Routine reminders are local notifications scheduled on the device. You can turn notifications off in the App or in iPhone Settings.
3.4 Routines. The routines you create (stations, lines, days and times) are stored only on your device and are deleted if you remove the App.
3.5 Usage statistics. We use Google Analytics for Firebase to understand how the App is used and to improve it. It records events such as screens viewed, route searches (origin and destination stations), reports submitted, use of routines and notifications, Pro screen views and purchases (product identifier), plus properties such as the current plan (free or Pro) and notification preferences. Firebase also collects technical data such as an App installation identifier, device model, OS version, language and approximate location (country/city) derived from the IP address. This data doesn't include your name or contact details.
3.6 Service security. We use Firebase App Check with Apple App Attest to verify that requests to our servers come from the genuine App, protecting the service from abuse. This doesn't identify you.
3.7 Purchases. Subscriptions, Lifetime and tips are processed by Apple. We never receive or store payment details. On your device, the App asks the App Store which purchases are active in order to unlock Pro, and stores your current plan locally so it works offline. The purchase event in Analytics contains only the product identifier.
3.8 Ads. The free version shows ads from Google AdMob. Pro subscribers don't see ads, and the ad service isn't even started for them. Ads are non-personalized: we don't use your history for targeting, and the App doesn't ask for tracking permission (App Tracking Transparency). Google still processes technical data to serve ads, cap frequency, measure performance and prevent fraud, such as IP address, device model, OS, language and ad interactions. Where the law requires, the App will ask for your consent through Google's consent tool. Learn more at https://policies.google.com/technologies/ads. If we ever offer personalized ads, we'll ask your permission first and update this Policy.
3.9 Translation and incident report. Status descriptions may be translated by Apple's on-device translation feature. The incident report is generated on your device from public status data and is only shared if you choose to share it.
3.10 Support. If you contact us by email or on Discord, we use what you send only to reply.
3.11 Site. The Site uses Vercel Analytics, which collects anonymous, aggregated usage data.
4. Legal bases (LGPD)
- Legitimate interest: crowding reports and abuse limits, usage statistics, service security and non-personalized ads.
- Consent: location and notifications (iOS permissions, revocable anytime) and, where required, ads.
- Performance of a contract: unlocking and restoring Pro purchases.
- Legal obligation: where the law requires.
5. Who we share data with
We don't sell personal data. Data is processed by providers that run the service on our behalf or provide services built into the App:
- Google: Firebase (Analytics, Cloud Messaging, App Check, Firestore, Cloud Functions) and AdMob. https://firebase.google.com/support/privacy and https://policies.google.com/privacy
- Apple: App Store (purchases), Apple Maps, App Attest and translation. https://www.apple.com/legal/privacy/
- Vercel: Site hosting and statistics.
We may also share data when required by law or court order.
6. International transfers
Our application servers are in São Paulo (Google Cloud, southamerica-east1 region), but Google, Apple and Vercel may process data in other countries, with the safeguards provided by the LGPD.
7. How long we keep data
| Data | Where | Retention |
|---|---|---|
| Crowding reports | Our servers (Firestore) | Deleted automatically after 90 days |
| Routines, report history, preferences, current plan | Your device | Until you delete the App (the report identifier stays in the Keychain until the device is erased) |
| Notification token and topics | Firebase Cloud Messaging | While notifications are on |
| Usage statistics | Google Analytics | Per the retention period set in Google Analytics (14 months) |
| Ad data | Per Google's policy | |
| Support messages | Our email | As long as needed to help you |
8. Your rights
Under the LGPD, you can request confirmation of processing, access, correction, anonymization, blocking or deletion, portability, information about sharing, and withdraw consent. Write to support@tnova.dev. Because the App has no account, reports aren't linked to your identity; to locate them, we may need your device's report identifier. You can also file a complaint with Brazil's National Data Protection Authority (ANPD).
Many controls are on your device: location and notification permissions in iPhone Settings, and deleting the App removes routines and preferences.
9. Children
The App isn't directed at children under 13 and doesn't knowingly collect children's data. Ads are non-personalized. If you believe a child has sent us data, contact us.
10. Security
We use encrypted connections (HTTPS), App verification (App Check) and restricted server access. No system is completely secure. Keep your device's OS up to date; jailbroken devices are more exposed and may not work correctly with the App.
11. Changes to this Policy
We may update this Policy. The current version is on this page with its effective date. Material changes will be announced in the App. Where versions in other languages exist, the Portuguese version prevails.