Privacy Policy

Effective: 5 June 2026 · Data controller: Andrii Melnykov ("we", "us") · Contact: agentodessa2011@gmail.com

Source CY ("Cyprus Source") is a free mobile app that shows public civic information for Cyprus — reservoir and dam levels, weather and air quality, fuel prices, duty pharmacies, wildfire and earthquake activity, disaster alerts, bus schedules and emergency numbers.

We have built it to need as little personal data as possible. You can use almost all of the app without signing in; an account is optional and is used only to sync your settings across your devices and to deliver the alerts you opt into. We show no ads and do not track you across other apps or websites. We do use a crash-reporting tool to keep the app stable (see §8).

1. The short version

• Accounts / sign-in — Optional (Sign in with Apple or Google); used only to sync settings and deliver alerts.
• Product / marketing analytics — None.
• Crash & performance diagnostics — Yes, via Sentry (§8).
• Cross-app or advertising tracking — None (§7 for future advertising).
• AI profiling — None. Data sold or rented — Never.
• Precise location — Used only when you grant permission (§2).
• Account data we store — Only if you sign in: email, name, synced settings, push token, and any feedback you send (§5, §6).

2. Location data

If you grant the location permission, the app reads your device's approximate or precise GPS position once when a relevant screen loads, to request weather/air-quality for your position (your coordinates are sent to our backend, which fetches Open-Meteo — see §4) and to sort fuel stations and duty pharmacies by distance (done on your device; your location is not sent to those providers). Your coordinates are held only in memory for the current session and are not stored on our servers or linked to your account. You can decline or revoke the permission at any time; the app still works.

3. Search text (trip planner)

When you use the bus trip planner and type a place name, that text and the chosen start/end coordinates are sent to OpenStreetMap services (Nominatim and OSRM) so they can return matching places and a walking route. We do not store these queries.

4. Information shared with third-party data providers

We use a minimal backend (Supabase) for weather/air quality and for optional accounts; every other civic screen fetches directly from the public source that owns the data. Whoever receives a request necessarily sees your device's IP address, plus, where noted, your coordinates or search text:

We do not control how these providers process the requests they receive; their own privacy policies apply.

5. On-device data, your account and settings sync

The app saves your preferences (language, light/dark appearance, home-screen layout, alert choices) and short-lived caches locally on your device; uninstalling deletes them.

Signing in is optional. If you sign in with Sign in with Apple or Google, we create an account through our backend provider Supabase so your settings sync across devices. For an account we store the email address and name provided by Apple or Google (with Apple you may use "Hide My Email", and you may decline to share your name), an account identifier, and your synced preferences — used only to authenticate you and sync settings, not for advertising or profiling.

Any feedback or bug report you send from within the app is stored with your account so we can review and respond. You can sign out at any time, and you can ask us to delete your account and its data by emailing agentodessa2011@gmail.com (see §11–§12).

6. Notifications

If you enable notifications, the app registers your device with Expo's push service, storing a push token together with your device platform, app language and chosen alert categories. This token is linked to your account identifier — your account if you have signed in, or otherwise an identifier created for your device — and is used only to deliver the alerts you choose (earthquakes, wildfires, Saharan-dust air quality, severe weather, floods and other emergencies). Messages travel via Expo and, in turn, Apple's (APNs) and Google's (FCM) networks. You can disable categories in the app or notifications entirely in your device settings.

7. Advertising

This version contains no advertising or advertising SDK. If advertising is introduced later, this policy and the store privacy disclosures will be updated before ads ship; on iOS, if an advertising identifier (IDFA) is used, you will be asked through Apple's App Tracking Transparency prompt.

8. Analytics and crash reporting

We do not use product or marketing analytics. We do use Sentry for crash reports and performance diagnostics. When the app crashes or reports a performance issue, Sentry may receive your device model and OS version, the app version, a diagnostic stack trace and recent navigation breadcrumbs, and your IP address. This is used only to operate, debug and improve the app — never for advertising or cross-app tracking — and is processed by Sentry on our behalf under its own terms.

9. Artificial intelligence

The app does not use AI to process your personal data, profile you, or feed your information into any AI system.

10. Children

Source CY is a general-audience information app and is not directed at children under 16 (or the higher age set by local law). Signing in is optional, and we do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

11. Data retention

If you create an account, we keep your account data (email, name, synced preferences, push token, and any feedback) for as long as your account exists; deleting your account deletes it. Diagnostic data sent to Sentry is retained for a limited period under Sentry's policy. On-device data persists until you clear it or uninstall. Our weather backend is a stateless proxy that stores nothing about your requests.

12. Your rights

If you have signed in, you can access, correct, export or delete the personal data associated with your account — sign out, or email us to delete your account and its data. If you have not signed in, we generally hold no personal profile about you. EU/EEA residents may complain to the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus (www.dataprotection.gov.cy). California residents: we do not sell or share personal information and collect only the limited data described here.

13. International transfers & security

Our backend/auth provider (Supabase), crash-reporting provider (Sentry) and push provider (Expo), and some data providers (e.g. NASA, USGS in the USA), may process data on servers outside Cyprus/the EEA; we rely on recognised transfer mechanisms where required. Connections use encrypted HTTPS, and account data is protected by row-level security so each account accesses only its own data.

14. Changes & contact

We may update this policy as the app evolves; material changes will be reflected by a new "Last updated" date. Questions: agentodessa2011@gmail.com.