Mapway Privacy Policy (to Nov 2022) Here at Mapway, we believe that you should always know what data we collect from you and how we use it, and that you should have meaningful control over both. We want to empower you to make the best decisions, for you, about the information you share with us…. that is the purpose of this Privacy Policy. You should read this Policy in full, but here are a few key points that we’d like you to take away:
  • Unlike other services, we do not require that you register with us or provide personal information such as your name, email address or phone number to use our services, they are offered to you free of charge and we will never collect this data unless you choose to provide them either by contacting us or creating an account with us.
  • Mapway is a private company which offers users free apps. To pay for the maintenance and enhancement of these free apps we need to be able to monetise use of our apps. This means we collect and share location and advertising IDs, to help power ads, analytics, attribution and even research about traffic and crowds.
  • As an alternative you can, depending upon which of our apps you are using, subscribe or make In-App Purchases (IAPs) in our Free apps, or where available, pay for our Pro versions. This removes advertising and significantly reduce the amount of data we collect from your use of our apps (see the full Policy below).
  • In addition to subscriptions and IAPs your device also gives you control to limit the data we collect from you and how we use it. Ultimately you can also choose to delete and stop using the app at which point any data collection will cease.
By using our apps, our website or contacting us you agree to the collection and use of certain data as described in this Policy. We are the data controller, which means that we will determine the purposes for processing your personal data and the manner in which processing is carried out. This Privacy Policy describes how we will use your personal data. If you have any queries on how we use your personal data please contact us at privacyteam@mapway.com. This Privacy Policy was last updated 14th February 2020. We reserve the right to make changes to it and publish the latest version which shall then apply. Information you share with us We do not require you to directly provide any personal information to us to start using our services. It is not necessary for you to have created an account (although you may choose to do so), nor will we ever make your use of our apps public, other than occasionally quoting user reviews posted in app stores on our website or in other publicity. If you do choose to create an account with us (where available), you must provide us with some personal data so that we can provide the additional services linked to registration to you. This includes an email address and password. We use this information to authenticate your account only and will keep it secure. In addition, should you contact us directly (either via the app, website or a direct email) you will be providing your name, email address and (when contacting us from the app) an app ID. We will keep the content of your message and contact information to enable us to respond to your request. If using our myTrains service you will need to provide us with payment information, including your debit or credit card number, card expiration date, CVV code and billing address, in order to purchase train tickets. We will never require that you provide payment information for any other services, all IAPs or the purchase of Pro versions of our apps is transacted via the appropriate app store and we never receive payment information about you from them. Additional information we receive about you – all users Location information: We require information about your current location to effectively offer you our services. Subject to your settings, we may collect, use and store additional information about your location to operate or personalise our services such as nearest transit stops, transport disruption, etc. You control whether we collect this data at all times or only when you are using the app, or even if we can collect this data at all. If you choose not to share location, we will be unable to offer you our full level of intended service which relies on this data. Cookies: Our website uses cookies and similar technologies to collect additional website usage data and to improve our Services. A cookie is a small data file that is transferred to your computer or mobile device. We may use both session cookies and persistent cookies to better understand how you interact with our Services, to monitor aggregate usage by our users and web traffic routing on our Services, and to customize and improve our Services. Although most web browsers automatically accept cookies, some browsers’ settings can be modified to decline cookies or alert you when a website is attempting to place a cookie on your computer. Analytic Data: We receive information when you interact with our apps and website, which we refer to as “Analytic Data,” even if you have not created an account. For example, when you open the app we record this as a session so we can monitor which of our apps are being used most often, at what times of the day, etc; if the app crashes we log the screen you were viewing and other data such as if you have mobile reception to help us identify the cause of such crashes and fix them. This information is collected by third-party SDKs (as identified later in this Policy) and we receive anonymised reports from this data to help us enhance our services. Apple music services: The Playlists feature in our Bus Times London app makes use of MusicKit on iOS 11 and above. This feature requires access to Apple Music, your music and video activity and your media library so that we can provide you with personalised playlists to listen to on your journey. Granting this permission is necessary for the Playlists feature to work. We will never access your music for any other reason and will never access your non-music media (such as video or photos). In addition, we will never analyse or store your music preferences. This permission can be revoked at any time through your device settings. Additional information we receive about you – certain users The additional information we receive about you depends on whether you have purchased a Pro version or the “remove ads” (or equivalent) IAP. If you have made these purchases, then this section does not apply to you. Location information: As well as offering our full service if you have not purchased our Pro or relevant IAP we may share location data with other third-party partners (as identified in this Policy) for activities such as the personalisation of adverts so these may be more relevant and useful for you. Links: If you click on an ad in our apps, that advertiser may know that you came from a Mapway app, along with other information associated with the ad you clicked such as characteristics of the audience it was intended to reach. Advertisers and Other Ad Partners: Advertising revenue allows us to support and improve our services. We use the information described in this Privacy Policy to help make our advertising more relevant to you, to measure its effectiveness, and to help recognize your devices to serve you ads within the app and outside of it. Our ad and data partners and affiliates collect information such as advertising IDs and location. In some instances, we collect this ourselves and provide it to our partners but in many cases, especially with our ad partners, they collect the data via SDKs and this is not shared with us. Information we share and disclose Payment information: If using myTrains we share your payment information with payment services providers to process payments; prevent, detect, and investigate fraud or other prohibited activities; facilitate dispute resolution; and for other purposes associated with the acceptance of credit and debit cards. Service providers: We engage service providers to perform functions and provide services to us. For example, we use a variety of third-party services to help us understand the use of our services, such as Flurry Analytics and Google Analytics. We may share your personal data with such service providers subject to obligations consistent with this Privacy Policy and any other appropriate confidentiality and security measures, and on the condition that the third parties use your personal data only on our behalf and pursuant to our instructions. Law, Harm, and the Public Interest: Notwithstanding anything to the contrary in this Privacy Policy or controls we may otherwise offer to you, we may preserve, use, or disclose your personal data if we believe that it is necessary to comply with a law, regulation, legal process, or governmental request; to protect the safety of any person; to protect the safety or integrity of our platforms; to address fraud, security, or technical issues; or to protect our rights or property or the rights or property of those who use our services. However, nothing in this Privacy Policy is intended to limit any legal defences or objections that you may have to a third party’s, including a government’s request to disclose your personal data. Change of Ownership: In the event that we are involved in a bankruptcy, merger, acquisition, reorganization, or sale of assets, your personal data may be sold or transferred as part of that transaction. This Privacy Policy will apply to your personal data as transferred to the new entity. Non-Personal Information: We share or disclose non-personal data, such as aggregated information like the total number of downloads, monthly active users or sessions, or reports to advertisers about how many people saw or clicked on their ads. Advertisers and data partners: If you have not purchased a Pro version of the app, subscribed or made the “remove ads” IAP then we may provide to third party advertising and data partners information about your activity on our app and your location. These partners may collect information about your activities to provide you contextual advertising based upon your interests and activity or be used in location-based products such as location audiences, location analytics and measurement. A list of our commercial, data and analytic partners and links to their privacy policies can be found here. Our legal basis of processing data We collect, use and share the data we have in the ways described above:
  • As necessary to deliver our Services to you;
  • As necessary to comply with our legal obligations;
  • As necessary for our (and others’) legitimate interests, including our interests in providing an innovative, personalised and profitable service to our users and partners.
Managing your personal information with us You control the personal data you share with us. You can access or rectify this data at any time. You can also deactivate your account or stop using our apps. Accessing or Rectifying Your Personal Data: If you have registered an account on Mapway, we provide you with tools and account settings to access, correct, delete, or modify the personal data you provided to us and associated with your account. Retention: When you give us any personal information we will only hold this for as long as we need to perform the activities detailed in this Policy or have a valid reason to keep it. We will also consider the type of information it is, the amount collected, how sensitive it might be and any legal requirements when considering retention. We design our services so that we don’t hold your information any longer than we have to. EU & EFTA: If you are located in the European Union or EFTA States, you can confidentially contact Mapway’s Privacy Team by emailing privacyteam@mapway.com. If you wish to raise a concern about our use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local supervisory authority. Your rights under GDPR are as follows:
  • You have the right to be informed about our processing of your personal data;
  • You have the right to have your personal data corrected if it is inaccurate and to have incomplete personal data completed;
  • You have the right to object to us processing your personal data;
  • You have the right to have your personal data erased, otherwise known as the ‘right to be forgotten’;
  • You have the right to request access to the personal data we hold about you, and information on how we process it, commonly known as a ‘data subject access request’;
  • You have the right to move, copy or transfer your personal data (‘data portability’); and
  • You have rights in relation to automated decision making, including profiling.
You also have the right to complain to the Information Commissioner’s Office. It has enforcement powers and can investigate compliance with data protection laws. More information about the Information Commissioner’s Office can be found on their website – ico.org.uk. Personal Control: There are ways in which you control the sharing and use of your information and ultimately you can also stop using our services and any time and delete our app so that no data is collected:
  • Remove Ads: Subscribing or making a “remove ads” (or equivalent) IAP will stop your device making requests for adverts and the sharing of your data with third parties for commercial purposes.
  • Limit Ad Tracking: You can do this from within your device settings. In doing so you will still receive adverts, but they will be less relevant to you (and so probably more of an annoyance) as less information is made available to the advertisers.
  • Analytics data: We use this data anonymously to help us improve and fix bugs within our apps. You can remove this from the settings in your device.
  • Location data: We need this data to provide our full services. You can limit this within the settings on your device.
Our Global Operations To bring you our services, we operate globally. Where the laws of your country allow you to do so, you authorise us to transfer, store, and use your data in the United Kingdom, and any other country where we operate. In some of the countries to which we transfer personal data, the privacy and data protection laws and rules regarding when government authorities may access data may vary from those of your country. If we transfer personal data outside of the European Union or EFTA States, we will ensure an adequate level of protection for the rights of data subjects based on the adequacy of the receiving country’s data protection laws and contractual obligations placed on the recipient of the data. Your privacy and protection are important to us, and we will not transfer your personal data until we are satisfied that your personal data will be protected. Changes to This Privacy Policy We may revise this Privacy Policy from time to time. The most current version of the Policy will govern our processing of your personal data and will always be at https://www.mapway.com/privacy-policy-permissions/. If we make a change to this Policy that, in our sole discretion, is material, we will notify you via an in-app notification, instigating our full app on-boarding process or any other method we consider appropriate. By continuing to access or use the Services after those changes become effective, you agree to be bound by the revised Privacy Policy. Effective: 14th February 2020 Previous versions of this Privacy Policy can be found here and here.