csuki Privacy Policy
Effective date: 23 April 2026
Last updated: 23 October 2026
This Privacy Policy explains how Adrian Kuttesch ("csuki," "we," "us," or "our")
collects, uses, stores, and shares information when you use the csuki
mobile application, website, and related services (collectively, the "Service").
By using the Service, you acknowledge the practices described in this Privacy Policy.
If you do not agree, please do not use the Service.
1. Who we are
The controller responsible for the processing of personal data under this Privacy Policy is:
2. Information we collect
Depending on how you use the Service, your device settings, and the features you choose to use,
we may collect the following categories of information:
- App-generated user ID used to operate the Service and distinguish app installations.
- Usage and interaction data, such as selected lines, feature usage, and general app interactions.
- Device and technical data, such as device type, operating system, app version, language, approximate timestamps, diagnostics, and crash information.
- Location data, if you grant location permission or use location-based features.
- Arrival alarm data, if you arm an arrival alarm: the station, line and number of minutes you chose, and your device's push notification token. It is used only to notify you for that one alarm.
- Subscription and purchase status, such as whether you have an active ad-free subscription.
- Support communications, such as messages, bug reports, or feedback you send to us from within the app or by email.
- Advertising-related data, if advertising is shown in the app, including information made available by advertising SDKs or platform APIs, subject to your device permissions and settings.
3. How we collect information
We collect information in the following ways:
- directly from you when you use the app or contact us;
- automatically from your device and app usage;
- from integrated third-party services and SDKs, such as analytics, crash reporting, maps, app stores, and advertising providers;
- from subscription and payment platforms for purchase-status verification.
4. How we use information
We may use the information we collect to:
- provide and operate the Service;
- show transport information, routes, timetables, maps, and related content;
- remember app preferences and support core functionality;
- maintain, monitor, debug, secure, and improve the Service;
- measure app usage and performance;
- respond to support requests, bug reports, and feedback;
- manage subscriptions and ad-free features;
- display advertising where applicable;
- comply with legal obligations and enforce our terms.
5. Legal bases for processing (EEA/UK users)
Where the GDPR or similar laws apply, we process personal data on one or more of the following legal bases:
- Performance of a contract - to provide the Service you request.
- Legitimate interests - to operate, secure, maintain, analyze, and improve the Service.
- Consent - where required, for example for certain location features, tracking-related permissions, or other device permissions.
- Legal obligation - where processing is necessary to comply with applicable law.
6. Sharing of information
We do not sell your personal data. We may share information only as reasonably necessary in the following situations:
- Service providers and processors, such as hosting, analytics, crash reporting, customer support, and infrastructure providers.
- Push notification services, Apple Push Notification service on iPhone and Firebase Cloud Messaging (Google) on Android, which deliver an arrival alarm to your device. They receive the push token and the content of that notification.
- Map, platform, and transit-data providers, where needed to provide app functionality.
- Advertising partners, if ads are shown in the app.
- App stores and payment providers, such as Apple and Google, to manage app distribution, subscriptions, purchases, and refunds.
- Legal and safety reasons, if required by law or necessary to protect rights, safety, users, or the Service.
- Business transfers, if the Service or related assets are sold, transferred, or reorganized.
7. Advertising
The Service may display advertisements. Advertising providers may process device, app, and
advertising-related information in accordance with their own privacy policies and the permissions,
settings, and choices available on your device and platform.
If you purchase an ad-free subscription, advertising may be removed or reduced in accordance with
the subscription terms.
8. Data retention
We retain personal data only for as long as reasonably necessary for the purposes described in this
Privacy Policy, including to provide the Service, maintain security, resolve disputes, comply with
legal obligations, and enforce agreements.
Retention periods may vary depending on the type of data, how the Service is used, and legal or
operational requirements.
Arrival alarm data, including the push token, is deleted as soon as the alarm fires, is cancelled or
expires, at the latest one hour after it was armed.
9. Data security
We use reasonable technical and organizational measures designed to protect personal data against
unauthorized access, loss, misuse, alteration, or disclosure.
However, no method of transmission over the internet or electronic storage is completely secure,
and we cannot guarantee absolute security.
10. International data transfers
Some of our service providers or integrated third-party services may process data in countries
outside your country of residence. Where required, we take steps intended to ensure that personal
data receives an adequate level of protection under applicable law.
11. Your rights
Depending on where you live, you may have rights regarding your personal data, including the right to:
- request access to personal data;
- request correction of inaccurate data;
- request deletion of personal data;
- request restriction of processing;
- object to certain processing;
- request data portability where applicable;
- withdraw consent where processing is based on consent;
- lodge a complaint with a competent supervisory authority.
To exercise any of these rights, contact us at csuki.contact@gmail.com.
12. Children's privacy
The Service is not directed to children under the age at which parental consent is required under
applicable law. We do not knowingly collect personal data from children in violation of applicable law.
If you believe a child has provided personal data to us unlawfully, please contact us.
13. Third-party services
The Service may contain links to, or integrate with, third-party services, SDKs, and websites.
Those third parties may have their own privacy policies and practices. We are not responsible for
the privacy practices of third parties.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The updated version becomes effective when
posted on this page or otherwise made available through the Service, unless a later date is stated.
Your continued use of the Service after the effective date of an updated Privacy Policy means you
acknowledge the updated policy.
15. Contact
If you have questions or requests relating to this Privacy Policy or your personal data, contact: