Privacy Policy

Last updated: 24 October 2026

1. Data Controller and General Information

The data controller responsible for personal data processed through the mobile application Pump Radar (hereinafter, “the Application”) is Javierorp (independent developer), located in Spain, contact email: javierorp@proton.me.

This Privacy Policy governs data processing in the Application pursuant to the General Data Protection Regulation (GDPR, Regulation EU 2016/679) and applicable Spanish data protection regulations (LOPDGDD).

The App has been developed to facilitate the viewing and comparison of fuel prices and the location of nearby petrol stations in Spain, Portugal, Andorra, France and Italy, based on official public information provided by the competent authorities of each country, detailed in the section 5, «Source of the Data Displayed».

2. Processed Data and Purposes

No account registration required: You can use the Application without creating an account or providing direct personal identity information (such as your full name, email, or telephone number). User preferences (such as favourite petrol stations, preferred fuel filters, and custom discount cards) are saved strictly locally on your device via secure on-device storage.

Technical device diagnostics: To diagnose performance issues, detect and prevent crashes, ensure compatibility, and maintain service security, the Application generates an anonymous pseudonymous installation identifier (deviceId) and may collect technical information such as device brand, model, RAM memory, and operating system version.

Comments and Feedback Section:
The Application includes a contact and feedback form allowing users to submit questions, suggestions, or incident reports. Data handling terms:

• Data processed: The submitted message, originating app screen, app version, pseudonymous device technical identifier, and, optionally, the user's email address if they request a reply.
• Purpose: To manage, address, and respond to the user's inquiry, suggestion, or issue.
• Legal basis: Consent granted by the user upon tapping "Send message" (Article 6.1.a GDPR) and legitimate interest in providing technical support and improving the service (Article 6.1.f GDPR).
• Retention: Data is kept only for as long as necessary to process and resolve the reported inquiry.

Section on the Voluntary Submission of Diagnostic Logs (Logs):
The Application offers an optional support feature, available on the Settings screen, which allows the user to send the Developer a ZIP file containing technical logs of the Application and a info_device.json file with technical information about the device, for the sole purpose of diagnosing and resolving an issue. The conditions of the processing are as follows:

• Data processed: operating logs of the Application (screens visited, technical actions, errors, traces and network failures); technical information about the device (make, model, operating system version, RAM memory, architecture, Application version and build, channel and update, language, region, time zone, screen size, subscription status and available storage); pseudonymous installation identifier (deviceId); the date, version of the consent text and retention period accepted; and the sender's email address, which will be visible to the Developer as a result of the submission.
• Data not included: GPS location, the search addresses entered by the user, the text of feedback messages, the contact email address, passwords, tokens, API keys, authorisation headers, or the bodies of HTTP requests or responses. The user may voluntarily add a description in the body of the email; it is recommended not to include in it any personal data the user does not wish to share. The email may also include the signature the user has configured in their email application.
• Purpose: solely to diagnose, reproduce and resolve the specific issue or error for which support is requested. It is not used for advertising, profiling, automated decision-making or disclosure to third parties for commercial purposes.
• Legal basis: the user's explicit consent (Article 6.1.a of the RGPD), given by means of the acceptance checkbox and the “Accept and send” button. Submission is entirely voluntary and is not necessary in order to use the Application.
• Retention: the email and the ZIP file will be kept for the time strictly necessary to analyse the issue and, in any event, for a maximum of 30 days from receipt, unless the user requests their erasure earlier. Once that period has elapsed, the Developer will delete the email and the attachment. The record of consent (date and version) is kept together with the logs for the same period. The copy retained by the user's email provider in the “Sent” folder is outside the Developer's control, and the user may delete it from their own email application.
• Recipient and email providers: the Developer, at the mailbox javierorp@proton.me. The submission is made from the email application chosen by the user; the user's email provider and Proton Mail (Proton AG, Switzerland) are involved solely in the transmission and storage of the message. The content is not disclosed to third parties for commercial purposes.
• Security: the email is transmitted over an encrypted connection (TLS) between the client and the mail server, but the ZIP file is not encrypted or password-protected. For this reason, it is recommended not to include personal data in the body of the message. The logs are stored locally in the Application's private space and are rotated automatically with an approximate limit of 2 MB.
• Voluntary nature: if the user does not accept, no log is sent and the Application continues to function normally; support for that issue may be limited.
• Independence from other processing: this channel is independent of the technical data that the Application may automatically record for the operation of the service, as described in sections 2 and 3.

Sending is not automatic: the Application only opens the user's email application with a draft. The user must review it and press send. The Application does not access the user's email inbox.

3. Device Permissions and Location Data

To deliver its core functionality of finding nearby service stations, the Application requests access to your device's geographic location (precise or approximate: ACCESS_FINE_LOCATION and ACCESS_COARSE_LOCATION).

How your location is processed:

• Locating nearby petrol stations: To retrieve and display stations within your selected search radius or along planned routes, the Application securely transmits your current geographic coordinates (latitude and longitude) via encrypted connection (HTTPS) to the Application's servers.
• Service optimization and search statistics: Search parameters (search radius, selected fuel type, open status filter, and coordinates) may be recorded on the server linked to the pseudonymous device identifier (deviceId) for server caching optimization, technical performance monitoring, and aggregated demand analysis.
• No background tracking: The Application does not track or collect your location in the background. Location is queried only in the foreground when you actively interact with search queries, the interactive map, or the route planner.
• No data selling: Your location data is never sold, rented, or transferred to third-party data brokers, nor used for external ad targeting.

You can grant, deny, or revoke location permissions at any time through your device's operating system settings. If location access is disabled, you may still use the Application by performing manual searches by town or address.

4. Third-Party Services and International Transfers

To support core operations, cartography, and monetization, the Application integrates selected third-party service providers:

• Google AdMob (Google LLC): In the free version, ads are displayed through Google AdMob. AdMob may process device identifiers and cookies to serve ads. The Application integrates Google's User Messaging Platform (UMP), allowing users to configure or revoke their consent for personalised or non-personalised ads at any time from app settings or via adssettings.google.com. Review the Google Privacy Policy for details.
• Ad suppression with paid subscriptions: If you purchase either the No-Ads Plan or the Pro Plan, the Google AdMob SDK is completely deactivated; no advertisements or advertising trackers are loaded while your subscription is active.
• Google Maps (Google LLC): The Application uses the Google Maps SDK to render interactive maps and visually display petrol station locations and route directions.
• RevenueCat (RevenueCat, Inc.): Used for technical management of digital subscriptions and entitlement verification for Pro features. RevenueCat processes anonymous installation identifiers and transaction logs, without accessing sensitive financial or credit card information. Consult the RevenueCat Privacy Policy.
• Google Play Store (Google LLC): In-app purchases and subscriptions are handled and billed strictly by Google Play Store. The Developer does not collect, access, or store payment card or banking details.
• Email for sending diagnostic logs: When the user uses this function, the email is sent from their own email application and received in the Developer's inbox on Proton Mail (Proton AG, Switzerland). Switzerland benefits from an adequacy decision by the European Commission. The user's email provider may be located outside the European Economic Area and will apply its own privacy policy. The content of the ZIP file is not shared with any other third party nor used for commercial purposes.

International data transfers: The providers mentioned with headquarters in the United States (Google LLC and RevenueCat, Inc.) carry out international data transfers under the umbrella of the EU-U.S. Data Privacy Framework and through the adoption of Standard Contractual Clauses approved by the European Commission, ensuring a level of protection equivalent to that required by European law. Proton Mail (Proton AG) is headquartered in Switzerland, a country covered by an adequacy decision of the European Commission.

5. Source of Displayed Data

The prices, locations and opening hours of the petrol stations displayed in the App come from the official public datasets of each country, made available by the following authorities:

• Spain: Ministerio para la Transición Ecológica y el Reto Demográfico (MITECO), through its fuel open data catalogue.
• Portugal: Direção-Geral de Energia e Geologia (DGEG), via the Preços dos Combustíveis portal.
• Andorra: Govern d'Andorra, through Preus dels Carburants.
• France: Ministère de l'Économie, via the Prix des carburants portal.
• Italy: Ministero delle Imprese e del Made in Italy (MIMIT), through the Osservaprezzi Carburanti portal.

The App is limited to processing and presenting such public information in a visual and accessible manner, without modifying its content.

6. Security and Data Retention

The Developer implements appropriate technical and organisational measures to safeguard data confidentiality, integrity, and security, utilizing encrypted communications (HTTPS with SSL/TLS protocols).

Data submitted via user feedback is retained only for the duration required to address the inquiry. Pseudonymous technical search logs are retained for limited periods to detect operational anomalies, protect infrastructure, and optimize service performance.

Diagnostic logs: the email and ZIP file are retained for the time strictly necessary to analyse the issue and, in any event, for a maximum of 30 days from receipt, unless the user requests their deletion earlier. Once this period has elapsed, the Developer deletes the email and the attachment. The ZIP file is not encrypted or password-protected; the email is transmitted via TLS between the client and the server, but end-to-end encryption is not guaranteed. The copy retained by the user's email provider in the 'Sent' folder is outside the Developer's control. On the device, logs are stored in the Application's private space and are automatically rotated with an approximate limit of 2 MB.

7. User Rights

Under the General Data Protection Regulation (GDPR), you hold the following rights regarding your data:

• Access: Inquire which technical data or messages are associated with your device or email address.
• Rectification: Request correction of inaccurate or incomplete records.
• Erasure: Request deletion of your data when no longer needed for the purposes collected.
• Restriction and Objection: Request restriction of processing or object to processing based on legitimate grounds.
• Data Portability: Receive data provided directly in a structured, commonly used format.
• Withdrawal of Consent: Revoke granted permissions at any time (such as location permissions in device settings or advertising consent in app settings).
• Diagnostic logs: the user may withdraw consent for future sends simply by not using the function. To request the deletion of a previously sent log, they may write to javierorp@proton.me indicating the approximate date of the send and, if available, the deviceId. The consent record (date and version) is retained together with the logs for the maximum period of 30 days.

Exercising your rights: To exercise your rights, please email the Developer at: javierorp@proton.me. If you previously provided an email address in the feedback form, please send your request from that same email account.

To locate records linked to pseudonymised technical data, the device identifier must be provided. This can be obtained by tapping the Application's version number located in the bottom right corner of the screen "Settings" five (5) times in succession; a support menu will open with the option "Copy Device ID". From this same menu, you can use "Send logs by email", which requests consent and opens your email application. You may also request the location or deletion of sent logs by writing to javierorp@proton.me from the same email address used in the send.

Right to lodge a complaint: If you believe the processing of your data infringes applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority, including the Agencia Española de Protección de Datos (AEPD) (www.aepd.es) or your local EU Data Protection Authority.

8. Changes to this Privacy Policy

The Developer reserves the right to modify this Privacy Policy to reflect regulatory, technical, or operational updates to the Application. Any revisions will be published on this website and reflected in the Google Play Store listing or through in-app notices.

In this revision, published on 24 October 2026, the voluntary channel for sending diagnostic logs described in section 2 is added, as well as its email provider and international transfer in section 4, its security measures and retention period in section 6, and the associated rights in section 7.