Privacy policy

Who is responsible

The controller of your data is José María Márquez Crespo, the developer of Carbia, in Spain. For anything about your data, write to support@carbia.app.

Your location and searches

If you allow it, the app reads your iPhone’s location while you use it, to find stations near you, show how far they are and plan routes. You can use Carbia without it by searching for a place.

To search, the app sends Carbia’s server a position rounded to about 10 metres, with your fuel and filters. A route search sends the route’s line instead, and the favourites screen sends the numbers of your saved stations to get their current prices. None of this carries a name, account or device identifier.

Carbia doesn’t store these positions in its database. The server’s hosting provider keeps technical logs of each request, which include the address asked for (with the position) and your IP address, for security and troubleshooting; they are deleted automatically after one day.

Place search, maps and directions

• Place search. What you type in the search field is sent to Google Places, which suggests places in Spain, Portugal and France and gives the chosen place’s position. Your own location isn’t sent with it.
• Maps and routes. The map, driving routes and street addresses come from Apple Maps (MapKit): your iPhone asks Apple for the map area you look at, the route between the points you choose and the address of a station.
• Directions. When you ask for directions, Carbia opens Apple Maps, Google Maps or Waze, which receive the station’s position.

Google and Apple handle these requests under their own privacy policies: Google, Apple.

Crash reports

When the app crashes, it sends a report to Firebase Crashlytics, a Google service: where in the code the crash happened, your iPhone model, iOS version, app version, free memory and disk space, and a random installation number that isn’t linked to you. We use these reports only to fix bugs, and Crashlytics deletes them after 90 days.

Usage statistics, only if you say yes

The app asks once whether you want to share usage data (“Help improve Carbia”). Until you say yes, nothing is sent. If you do, it sends Firebase Analytics, a Google service, anonymous events about how the app is used: onboarding steps, the kind of search (around you, a place or a route), how many stations were found, a route’s length, the country of the stations found, your fuel, opening a station, and adding or removing a favourite.

These events never include your location, the places you search, which station you looked at or who you are. Firebase adds a random number for this installation, your iPhone model, iOS version and app version, and an approximate region worked out from your IP address, which Google Analytics doesn’t store. Advertising features are off, and the app doesn’t use your iPhone’s advertising identifier. The statistics are kept for 2 months.

You can change your answer at any time in Profile, under “Share usage data”.

What stays on your iPhone

Your fuel, favourite stations, filters, recent place searches, your last search results and the stations you’ve opened (to show them offline, forgotten after 30 days unused), your reminder setting and your answer about usage statistics are stored only on your iPhone. We never receive them, except the station numbers described above. Deleting the app deletes them.

The daily price reminder is scheduled on your iPhone. No notification token is sent anywhere.

If you write to us

If you email us, we use your address and message only to answer you, and keep them while the conversation lasts and for up to a year after it.

This website

carbia.app sets no cookies, has no analytics and loads nothing from other websites. Cloudflare, which hosts it, handles your IP address to deliver the pages and protect the site from attacks.

What Carbia doesn’t do

• No accounts: you never give us your name, email or phone to use the app.
• No ads, and no tracking across other companies’ apps and websites.
• We don’t sell or rent your data, or share it for advertising.
• We don’t keep a history of where you’ve been.

Who handles data for us

• Supabase: hosts Carbia’s server and database, in the European Union (Ireland).
• Google: Google Places, Firebase Crashlytics and Firebase Analytics.
• Cloudflare: hosts this website.

Some of these companies are based in the United States and may process data there. Those transfers rely on the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.

Why we may use your data

• To give you the service you ask for (Article 6(1)(b) GDPR): searches with your location, place search, maps and routes.
• Our legitimate interest in keeping Carbia working and secure, and in answering you (Article 6(1)(f)): crash reports, server logs and emails.
• Your consent (Article 6(1)(a)): usage statistics. You can withdraw it at any time; that doesn’t affect what was sent before.

Your rights

You can ask to access, correct or delete your data, to restrict or object to its use, to receive it in a portable format, and you can withdraw your consent. Write to support@carbia.app. Since Carbia has no accounts, we usually can’t tell which data is yours; tell us what you need and we’ll help.

If you think we haven’t handled your data properly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, aepd.es) or the authority where you live.

Children

Carbia isn’t meant for children under 14, and we don’t knowingly handle their data.

Changes to this policy

If Carbia starts using data in a new way, we’ll update this page and its date first, and tell you in the app when the change matters to you.