Privacy
The Apple apps require no account. This page explains how location, saved stops and departure requests are handled, as well as the data used by our website and business service.
Location
Location access is optional. Mac and Apple TV use it during setup to find nearby stops. On iPhone, nearby departures use your location while active, including a Live Activity that can continue for up to 45 minutes after you leave the app. You can choose a shorter duration in Settings. Saved stations do not require location access. Positions are rounded to about eleven metres and sent to our server to find nearby stops; coordinates are not retained or written to logs. Saved stops stay on your devices and sync through your iCloud account when enabled. Apple Watch does not request location. While nearby departures are active on your iPhone, the phone can share its current stop with the paired watch.
What reaches our server
The app asks our server for departures at your stops, with a key that names the surface (Mac, widget, watch, Apple TV). The server keeps aggregate logs: surface, route, status, cache outcome and latency. It writes no IP addresses, request bodies or coordinates to its logs.
On the Mac
Stops, walking times and settings live in the app's own container and in the App Group the widgets read. The app carries no analytics SDK and no crash reporter of ours. Departure and nearby-stop requests go to our server as described above.
The board page
board.zuruckbleiben.app sets no cookies and loads nothing from third parties. The screen's key stays in that browser's storage. Each refresh tells our server that the board is alive; we keep the board and the time, nothing about the venue's network.
Business customers
A board has a name, a logo, stops and one contact email, used for the offline alerts. When a board is billed, Stripe handles the payment: they hold the card details, we hold the subscription state. Signed in at business.zuruckbleiben.app, we measure how the app is used with PostHog, on servers in the EU: which pages open and what is clicked, and a replay of the layout as you use it, under your account's id rather than your address. Every word on the page is masked in that replay, the fields you type into, your logo, your address, a board's link and its QR code are left out of it, and addresses and board links are scrubbed from everything else before it leaves your browser. That is the admin app only: the board on the wall sends nothing to anyone.
This website
zuruckbleiben.app counts page views and clicks on the download buttons with PostHog, on servers in the EU, in cookieless mode: no cookie, nothing in your browser's storage, no identifier that follows you between visits.
Who
GoldenBerry Software OÜ, Estonia. Questions to hello@zuruckbleiben.app.