Legal
Privacy Policy
This Privacy Policy describes how Oscar Manas ("we", "us") collects, uses, and protects information in the World Monitor mobile application. By using the app, you agree to the practices described in this document.
01 Data we collect
World Monitor does not require an account. We do not ask for your name, email address or phone number. The data collected is:
| Data | Description | Retention |
|---|---|---|
| Device identifier | Your device's vendor identifier (IDFV on iOS, Android ID on Android). It works as your account ID: your usage events, alert settings and purchases are linked to it. | Until you request deletion |
| Usage events | In-app events (e.g. "opened signal", "viewed map"), linked to the device identifier. Includes the place names you search for on the map. | 180 days, then auto-deleted |
| Purchase metadata | Subscription status processed by Apple App Store or Google Play, linked to the device identifier through RevenueCat. We do not receive your payment details. | Per Apple / Google policy |
| Push notification token | An Expo push token linked to your device identifier, stored only when you explicitly enable alerts. Includes your notification preferences (countries, alert types, minimum severity). | Until you disable alerts or delete the app |
| Advertising data (free tier only) | Google AdMob, which shows ads to users without a subscription, collects data about the ads you see and tap, your approximate location (derived from your IP address), device identifiers, and app performance and diagnostic data. This data is not linked to our device identifier. | Per Google's policy |
We do not collect email addresses, names, phone numbers or precise location. We do not track you across other companies' apps and websites: on iOS the app never asks for Apple's tracking permission, so the advertising identifier (IDFA) is not accessed. On Android, AdMob may use the Android advertising ID, which you can reset or delete in your device settings.
02 Legal basis for processing (GDPR Art. 6)
| Processing activity | Legal basis |
|---|---|
| Device identifier to provide the service | Performance of a contract (Art. 6.1.b) |
| Usage analytics to improve the app | Legitimate interest (Art. 6.1.f) |
| Subscription management | Performance of a contract (Art. 6.1.b) |
| Push notification token and preferences | Consent (Art. 6.1.a) — only when you explicitly enable alerts |
| Advertising for free-tier users | Consent (Art. 6.1.a) — collected through the ad consent prompt in the EEA, UK and Switzerland |
03 How we use the data
- Provide and maintain app functionality
- Understand aggregate usage patterns to improve the product
- Show ads to free-tier users
- Measure the performance of our advertising campaigns
- Process and manage your subscription
- Detect fraud and abuse
- Comply with legal obligations
04 Third-party data processors
We use the following sub-processors to operate the service. Each operates under its own privacy policy and data processing agreement:
| Processor | Purpose | Location |
|---|---|---|
| Supabase | Database and backend infrastructure | EU (Frankfurt) |
| Apple App Store | Payment processing and subscription management | USA |
| Google Play | Payment processing and subscription management | USA |
| RevenueCat | Subscription and in-app purchase management | USA |
| Google AdMob | In-app advertising (shown only to free-tier users; subject to your ad consent). See how Google uses data from apps. | USA |
| Expo (EAS) | Push notification delivery infrastructure | USA |
| Apple Push Notification service and Google Firebase Cloud Messaging | Final delivery of push notifications to iOS and Android devices | USA |
| Vercel | Website hosting | USA / EU |
Transfers to processors in the USA are covered by Standard Contractual Clauses (SCCs) or adequacy decisions as applicable.
05 Data sharing
We do not sell, rent, or share your data with third parties for marketing purposes. Data may be disclosed only:
- To the processors listed above, for the purposes described
- When required by law, court order, or regulatory authority
- In the event of a merger or acquisition, under equivalent privacy protections
06 Data retention
- Device identifier: retained until you delete the app or request deletion.
- Usage analytics: automatically deleted after 180 days.
- Purchase metadata: retained as required by Apple / Google and applicable tax law.
07 Your rights
Under GDPR and applicable law, you have the right to:
- Access — request a copy of the data we hold about your device
- Erasure — request deletion of your device identifier and associated data
- Restriction — request that we limit processing of your data
- Portability — receive your data in a structured, machine-readable format
- Object — object to processing based on legitimate interest
To exercise any of these rights, contact us at the address below. Since we do not know your name or email, requests are processed using your device identifier. When contacting us, please include the device identifier shown in the app under Settings → App Info, or simply describe your request and we will guide you through the process.
You also have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD) at aepd.es if you believe your rights have been violated.
08 Security
We implement appropriate technical and organisational measures to protect data against unauthorised access, loss, or alteration. All data is transmitted over HTTPS and stored with access controls. However, no system is completely secure.
09 Children's privacy
World Monitor is not intended for users under the age of 13. We do not knowingly collect data from children. If we become aware that a child has used the app, we will delete the associated data promptly.
10 Changes to this policy
We may update this policy periodically. Material changes will be notified via an in-app notice. The "Last updated" date at the top of this page will reflect any revision. Continued use of the app after changes constitutes acceptance.