Privacy Policy
Effective date: October 13, 2026
Global Metro Map is an unofficial subway map app, with Buenos Aires as the first city. This policy explains what data the app collects, why, who can see it, and how you can delete it.
1. Who we are
Global Metro Map is run by SupafastTech LLC, a company in the United States (Wyoming) ("we", "us"). We decide how your data is used.
- Contact for privacy questions and requests: privacy@globalmetromap.com
2. The short version
- You do not need an account, a name or an email to use the app.
- The first time you open the app, it creates an anonymous guest profile on our server.
- The app can read your location, but only if you tap "Show my location" and allow it. The position stays on your device and is never sent to us.
- There are no ads, no ad tracking, no third-party analytics, no crash reporters, no third-party SDKs and no purchases in this version.
- When you build a route, the app sends our team a short usage note: the two stations, the travel time, the number of transfers, the city and your country. It carries no name, email, guest ID or IP address. Section 3 has the details.
- We do not sell your data.
- You can delete your guest profile and its data in the app, under About, "Delete my data".
3. What we collect
Guest profile (stored on our server). On first launch the app asks our server to create an anonymous guest user. The server stores:
- a random guest ID;
- the platform (iOS or Android);
- the language set in your device system;
- the app version;
- the dates the profile was created and last used;
- a random device ID that the app generates itself (it is not the iOS vendor identifier or the Android ID);
- a hash of a secret that identifies your device (SHA-256), not the secret itself;
- a hash of your session token and its expiry date (90 days).
We do not store your name, email, phone number, contacts, photos or location, and we do not collect the advertising identifier. The language you choose inside the app is not saved on our server.
Stored on your device. The device secret, the device ID and the session token are kept in the iOS Keychain (or Android secure storage) and are not synced to iCloud. The downloaded map data, your language choice and display settings stay on your device too.
Your location. If you tap "Show my location", the app asks your system for permission to use your location while the app is open, reads your position once and compares it with the station list on your phone to show the nearest station. The position is not sent to our server or to anyone else, and it is not stored. The app does not track your location in the background. You can withdraw the permission at any time in the system settings.
Feedback you send. If you use "Send feedback", the app sends your message, the type (bug, idea or other), the email address if you choose to enter one, the platform, the app version, the device model with the OS version, the city shown in the app and your language. The request must carry your guest session. Our server passes this to our team in Telegram and does not keep it in the app database. The country is added from the network request, as described below. If you wrote an email address, we use it only to answer you. Do not put sensitive information in the message. Until the server accepts it, an unsent message waits on your device and is removed when you delete your data.
Country and device details in a team notification. When a new guest profile is created, our team receives a short message in Telegram. It contains the store (App Store or Google Play), the platform, the device model with the OS version, and your country. The country is worked out from the network request: our server looks up the IP address of the request in a country database that runs on the server itself, and keeps only the country name. This is not GPS and not your precise location. The country is not stored in the guest profile in the app database. The message does not contain your IP address, the time, your guest ID, your language or the app version.
Route built note. Each time you build a route between two stations, the app sends our server a short note, and the server passes it to our team in Telegram. It contains: the names of the start and end stations, the travel time in minutes, the number of transfers, the platform (iOS or Android), the city shown in the app, and your country (worked out from the network request, as described above). It does not contain your guest ID, your IP address, the time, your language or your position. The app needs your guest session to send it. The same route from the same guest is reported at most once in 10 minutes, and the server caps the number of such notes per hour; the guest ID used for that check is held in server memory only and is not written to any log. We use these notes to see which cities and routes people use, to decide what to improve. They are statistics for our team, not a history of your trips: we do not build a list of routes per person. Your own search and route history is not sent to us.
Notification log. Our internal notification system keeps a record of each message it sends: the new guest message, feedback and the route built note. A record holds the same fields as the message. For the new guest message and feedback it also holds a random technical key that prevents the same message from being sent twice. The new guest key is also kept next to your guest profile on our server and is deleted with it, so after you delete your data the record can no longer be matched to you. The key is not derived from your guest ID.
Network address and server logs. Every request to our server comes with an IP address. The application uses it in memory only, to limit the number of requests and protect the service from abuse, and does not write it to disk. The application log records only the request method, the path, the response code and the duration, without the IP address, headers or content. Requests reach our server directly, without a proxy or content delivery network in between. Our DNS provider sees lookups for the domain name, but not the content of your requests.
What we do not collect. Your contacts, photos, microphone, camera, payment details, advertising identifier, or anything from other apps. We do not use third-party analytics tools or crash reporters, and the app has no third-party SDKs for tracking. The only usage information we receive is the route built note described above. If that changes, this policy will be updated before the release of the version that does it.
What the app does on the network. The app talks only to our own server (creating the guest profile, downloading map data, sending the route built note, sending feedback, deleting your data). Links to other sites open only when you tap them. If you tap "Open in Apple Maps" or "Open in Google Maps", the coordinates of the chosen station or landmark are passed to that map app, and its own privacy policy applies.
4. Why we use it, and the legal basis
| Purpose | Data | Legal basis (GDPR and similar laws) |
|---|---|---|
| Keep your guest profile between launches and make the app work | Guest profile data in section 3 | Performing the service you asked for |
| Download and update the map data | Server requests | Performing the service; our legitimate interest in running it |
| Limit requests and prevent abuse | IP address (in memory) | Our legitimate interest in keeping the service secure |
| Show the nearest station | Your position, on your device only | Your permission, which you can withdraw in the system settings |
| Read and answer your feedback | Feedback data in section 3 | Our legitimate interest in fixing mistakes and answering you; for the email address, your choice to give it |
| Tell our team that a new guest arrived | Store, platform, device model and OS version, country | Our legitimate interest in knowing where and on what the app is used |
| Understand which cities and routes are used, to improve the app | Route built note: start and end station, travel time, transfers, platform, city, country | Our legitimate interest in improving the app. You can object by writing to us (section 9) |
We do not make automated decisions that affect your rights, and we do not use your data for advertising.
5. Who receives your data
We do not sell personal data and do not share it for advertising. These parties handle data for us:
- Hosting. The server that runs the app's backend and serves map data is operated by Supafast on a dedicated server that we rent.
- DNS. Our DNS provider hosts the records of our domain and sees lookups for it. It does not handle the requests to the app.
- Team notifications. The new guest, route built and feedback messages described in section 3 are delivered through our internal notification system to a private Telegram chat that only our team can read. Telegram processes them for us as a messaging service. They contain no guest ID.
We require service providers to protect data to the standard this policy describes. We may disclose data if the law requires it, to protect our rights, or if the company is sold or reorganized.
6. Map data and sources
Map data is © OpenStreetMap contributors and available under the Open Database License (ODbL): openstreetmap.org/copyright. The part of our database made from OpenStreetMap data is published as an open copy at github.com/supafast-tech/global-metro-map-data. Names and links come in part from Wikidata (CC0).
Ride times and gaps between trains come from the Gobierno de la Ciudad de Buenos Aires, BA Data (data.buenosaires.gob.ar), licensed CC BY 2.5 AR, and are adjusted by us. Landmark photos come from Wikimedia Commons. Each photo is shown with its author and licence, and the credit opens the source page. Country flags are from country-flag-icons (MIT). A link to Wikipedia or another site takes you to that site, and its own privacy policy applies. Global Metro Map is not affiliated with any metro operator.
7. International transfers
Our company is in the United States, and our providers run servers in several countries. If you use the app from the EU, the UK, Argentina or another country with data transfer rules, your data is processed outside your country. Where the law requires safeguards for such a transfer, we put them in place. You can write to us to ask which.
8. How long we keep data
- Guest profile data (section 3): until you delete it with "Delete my data". We do not delete inactive guest profiles automatically at this time.
- Session token hash: until its expiry date (90 days), or until you delete your data.
- Feedback: it is not kept in the app database. The message stays in the Telegram chat and in the notification log for as long as we need it to answer you and fix the issue. To have your feedback removed, write to privacy@globalmetromap.com.
- Route built notes and the notification log (new guest, route built and feedback records, section 3): there is no automatic deletion period yet. The records do not contain your guest ID. Telegram keeps chat messages under its own rules. Route built notes are not linked to you, so we cannot find and delete the notes of one person; they hold no name, email or ID.
- Application server logs (method, path, response code, duration, no IP address): we have not set a fixed period.
When we no longer need data, we delete it or remove everything that could identify you.
9. Your rights and how to delete your data
Delete in the app. Open About and choose "Delete my data". Our server checks your device secret and deletes your guest profile, the link to your device and your sessions. After the server confirms, the app erases the secret, the device ID, the token and any unsent feedback from your device. If you open the app again, it creates a new guest profile. Deleting needs an internet connection.
What remains after deletion. Server logs (section 3), records in the notification log, route built notes and messages in our Telegram chat (they do not contain your guest ID), and the map data you downloaded, which is not personal data and stays on your device until you delete the app.
Other requests. You can also write to privacy@globalmetromap.com to see, correct, export or delete your data, to object to processing, or to withdraw consent where we asked for it. We may ask you to show that the profile is yours, for example from the app. We reply within the time your local law requires, and no later than 30 days where the law sets no shorter time.
Complaints. You can complain to your data protection authority: in the EU, the authority of your country; in the UK, the ICO; in Argentina, the Agencia de Acceso a la Información Pública.
California and other US states. You can ask what personal information we hold and ask us to delete or correct it. We do not sell personal information and do not share it for cross-context advertising. We will not treat you worse for using these rights.
10. Security
We use encrypted connections (HTTPS), keep the device secret and the session token on our server only as hashes, keep the secret on your phone in protected storage, and limit access to the data to the people who need it. No system is completely secure. If a breach affects your data, we will tell you and the authorities as the law requires.
11. Children
Global Metro Map is not directed to children under 13. We do not knowingly collect their data. If you think a child has a guest profile, write to us and we will delete it.
12. Changes
If we change this policy, we will update the date above and, for significant changes, tell you in the app. Accounts with an email, third-party analytics, ads or purchases would need a new version of this policy before they ship.
13. Contact
SupafastTech LLC, Global Metro Map
privacy@globalmetromap.com