1. Introduction
This Privacy Policy describes how we collect, use, share and protect personal data in the Lá vem o ônibus app, available for Android and iOS. By using the app, you agree to the practices described here and to our Terms of Service.
2. Data we collect
We collect the following categories of data, either directly from you or automatically while you use the app:
| Category | Examples | Source |
|---|---|---|
| Location | Approximate or precise geographic position (GPS) | Device sensor, with your permission |
| Device identifiers | Advertising ID / IDFA, Firebase instance identifier, device model and operating system | Automatic |
| Usage and session | Screens visited, session duration, interaction events | Google Analytics for Firebase |
| Diagnostics | Crash and performance reports | Firebase Crashlytics |
| Notifications | Device push token | Firebase Cloud Messaging |
| Subscription | Premium subscription status and history (we do not include card data) | Google Play Billing / Apple StoreKit |
3. How we use your data
- To show your position on the map and calculate bus proximity and arrival predictions;
- To send relevant notifications (e.g. bus arriving, next trip);
- To understand app usage and improve features and performance;
- To diagnose and fix technical issues;
- To display and measure ads, including frequency and relevance, for users without a premium subscription;
- To process and validate premium subscriptions and prevent fraud;
- To comply with legal and regulatory obligations.
4. Legal basis (LGPD)
We process personal data based on one or more of the following legal grounds provided by the LGPD:
- Consent — for location and notifications, requested explicitly in the app;
- Performance of a contract — to process your premium subscription;
- Legitimate interest — for analytics, diagnostics and service improvement, always in a proportionate and minimally invasive way;
- Compliance with a legal obligation — when required by law or a competent authority.
5. Sharing with third parties
We share data only with vendors that help us operate the app, each subject to its own privacy policy:
- Google Firebase — analytics, stability, messaging, remote configuration;
- Google AdMob and mediation partners — ad serving;
- Google Maps Platform — map display;
- Google Play Billing / Apple StoreKit — subscription processing.
We do not sell your personal data. We may disclose data when required by law, court order, or to protect the rights, safety and property of the developers and of third parties.
6. International transfer
Some of the vendors listed above process data on servers located outside Brazil, including in the United States. In those cases, we require the processing to follow adequate data protection safeguards, as provided by the LGPD.
7. Data retention
We keep data for as long as necessary to fulfill the purposes described in this policy: data tied to a contract (e.g. subscription) until the relationship ends; legitimate-interest data (e.g. analytics, diagnostics) for a period proportionate to its purpose; and for longer periods when required by law. You can request early deletion as described in the Your rights section.
8. Information security
We adopt reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration or destruction, including encrypted transmission (HTTPS/TLS) and access control to the systems that store data. No system is 100% secure; if we identify an incident affecting your data, we will take the appropriate measures and, when required, notify the authorities and the affected data subjects.
9. Your rights
Under article 18 of the LGPD, you may, at any time:
- Confirm the existence of processing and access your data;
- Correct incomplete, inaccurate or outdated data;
- Request anonymization, blocking or deletion of unnecessary data or data processed in violation of the law;
- Request portability of your data to another provider;
- Withdraw your consent (e.g. by disabling the location permission in your device settings) and request deletion of data processed based on it;
- Obtain information about whom we share your data with;
- File a complaint against us with the Brazilian National Data Protection Authority (ANPD).
To exercise any of these rights, contact us at the e-mail address provided in the Contact section. We will respond within the applicable legal deadline.
10. Children's privacy
The app is not directed at children under 13 and we do not knowingly collect personal data from this audience. If a legal guardian identifies that a child has provided us with personal data, please contact us immediately at the support e-mail so the data can be removed.
11. "Do Not Track" signals
Like most mobile apps, we currently do not respond to "Do Not Track" signals from the browser or operating system, as there is still no uniform technical standard for this functionality outside the web.
12. Changes to this policy
We may update this Privacy Policy from time to time. Relevant changes will be communicated through a notice in the app or by updating the date at the top of this page. We recommend revisiting this page regularly.
13. Contact and data protection officer
For questions about this policy or to exercise your rights as a data subject, contact our data protection officer at suporte@lavemoonibus.com.br. See also our support page.