Effective date: 30 October 2026
The short version
Ves has no accounts, no ads, no analytics and no tracking tools. We use your location while the app is open, to show what's near you and plan trips from where you are. We do not keep a history of where you have been. Your saved places and preferences stay on your phone. Our website, vesmobility.app, has no analytics, ads or tracking tools either.
1. Who looks after your data
Ves is provided by Burutay Yalçın, of 08021, Barcelona, Spain ("we", "us" or "Ves"). We are responsible for deciding how your data is used — in GDPR language, we are the controller.
For privacy questions or to use your privacy rights, email privacy@vesmobility.app or write to us through Contact us in the app's Settings. We have not appointed a Data Protection Officer because the law does not require one for this service.
This policy is written for Ves’s launch in Spain and follows the EU General Data Protection Regulation (GDPR) and applicable Spanish data-protection law, including the LOPDGDD.
2. What we use, why, and for how long
| What | Why we use it | Legal basis | How long we keep it |
|---|---|---|---|
| Your location, if you allow access | To show nearby transport and plan a trip from where you are | To provide the feature you ask for (Article 6(1)(b) GDPR) | We do not save it in our database. It can appear in our hosting provider’s technical logs for up to 7 days. |
| Trip start and destination that you choose or type | To plan your route | To provide the feature you ask for (Article 6(1)(b) GDPR) | Up to 60 seconds in memory, to answer repeat requests faster. It can also appear in technical logs for up to 7 days. |
| What you type in place search and a rough area of about 1 km | To find places. We also keep a shared result so people searching for the same thing nearby get a faster answer and Ves makes fewer paid search requests. | To answer your search (Article 6(1)(b) GDPR); for the shared cache, our legitimate interest in running Ves efficiently and keeping it free to use (Article 6(1)(f) GDPR) | 30 days, then deleted automatically. |
| Technical information from the app and our website: your IP address, the time and the address requested | To keep Ves secure, working and fix problems | Our legitimate interest in running a secure, reliable service (Article 6(1)(f) GDPR) | Up to 7 days |
| Saved places, favourite lines, recent searches, transport choices and settings | So Ves remembers your choices | Kept on your phone, not sent to our servers | Until you delete them or delete the app. If your phone backs up apps, these items may be included in your iCloud, computer or Google backup, which is managed by Apple or Google. |
| Messages you send through Contact us in the app or the contact form on our website: your email address, your message, the topic you pick and your country (worked out from your internet connection). From the app, also the app version, phone type (iPhone or Android) and its system version | To read and answer your message, and to fix problems you report | Our legitimate interest in replying and improving Ves (Article 6(1)(f) GDPR). If your message is a privacy-rights request, we use it to meet a legal obligation (Article 6(1)(c) GDPR). | 30 days in our email provider's log, then deleted automatically. |
| Emails you send to privacy@vesmobility.app or team@vesmobility.app, and our replies to you | To answer you and manage the conversation | Our legitimate interest in replying (Article 6(1)(f) GDPR). For a privacy-rights request, a legal obligation (Article 6(1)(c) GDPR). | 12 months after the conversation ends. |
| Anti-spam check on our website's contact form: your IP address and basic browser details (browser type and version, and technical details of the connection) | To stop automated spam | Our legitimate interest in keeping the form free of spam (Article 6(1)(f) GDPR) | We don't keep it. Cloudflare handles it under its Turnstile privacy terms. |
Ves has no accounts. We do not ask for your name, phone number or account details. We do not sell your data, show behavioural advertising, use advertising IDs, use analytics, or use tracking SDKs.
Our website doesn't set cookies itself and uses no analytics, ads or tracking tools. We host its fonts ourselves. The only outside script is Cloudflare's anti-spam check (Turnstile) on the contact page.
3. Location, trips and your phone
Ves asks for location once, when you set up the app. You can say no and type a starting point instead. You can also turn location access off at any time in your phone settings.
Ves uses location only while the app is open. It does not use background location. When you start a trip, Ves checks your position to show your progress; that live position stays on your phone. Closing the app ends the trip.
To show a street name for your position, Ves uses your phone’s built-in geocoding service. This sends your coordinates to Apple on iPhone or Google on Android under their own privacy policies. We do not keep a history of your journeys or where you have been.
4. Who else handles data
We use a small number of providers to run Ves. They receive only the information needed for their part of the service.
| Provider | What it does and receives | Its role |
|---|---|---|
| Cloudflare, Inc. | Runs the Ves server, database and technical logs. It receives app requests, including IP address and, depending on the request, location coordinates, journey points or search text. Those details can appear in technical logs. It also runs our website and its anti-spam check (Turnstile), and passes on emails sent to our vesmobility.app addresses to our inbox, without keeping them. For Turnstile, Cloudflare also uses those browser details for its own purpose of improving its bot detection, as an independent controller under its Turnstile privacy terms. | Processor acting for us under its data-processing terms. |
| Google (Google Cloud EMEA Limited, Dublin, Ireland) | The Maps SDK loads maps directly on your phone and Google receives the map request, including your device IP address and the map area. For place search, our server sends Google the text you type and the centre of an area about 1 km wide, not your exact location or IP address. | Google acts under its own terms and privacy policy. See the Google Privacy Policy and Google Maps Additional Terms. Google is an independent controller of this data, under its own terms. |
| Apple or Google, through your phone’s geocoding service | Receives coordinates when your phone turns your position into a street name. | Independent provider under its own privacy policy. |
| Resend, Inc. | Delivers and stores the messages you send through Contact us in the app or the contact form on our website, with the details listed in section 2. | Processor acting for us under its data-processing terms. |
| Google (Gmail) | Stores emails you send to our vesmobility.app addresses, and our replies. | Google acts under its own terms and privacy policy. |
Transport operators never receive your personal data. Ves downloads their public transport information; it does not send them information about you.
We may also share information where the law requires it or where necessary to protect our legal rights.
5. Data sent outside the EU
Cloudflare, Google and Resend may handle data outside the European Economic Area, including in the United States. Cloudflare, Inc., Google LLC and Resend, Inc. are all certified under the EU–US Data Privacy Framework, which the European Commission recognises as giving adequate protection. Their contracts with us also include the European Commission’s standard contractual clauses. You can ask about the safeguard that applies by emailing privacy@vesmobility.app.
6. Your choices and rights
You can ask us to:
- see the personal data we hold about you;
- correct it;
- delete it;
- limit how we use it;
- object where we rely on our legitimate interests; and
- receive a copy of it in certain cases.
Email privacy@vesmobility.app to make a request. We normally reply within one month. If the GDPR allows extra time because a request is complex or numerous, we will let you know.
Because Ves has no accounts, server records are not linked to you, apart from messages you send us. In practice, we will usually be unable to find a particular search or request. We may ask for the information reasonably needed to look for it, but we will not create new identifying information just for that purpose. You can delete data stored on your phone by deleting it in the app or uninstalling Ves.
If you are unhappy with our response, you can complain to the Agencia Española de Protección de Datos (AEPD) at www.aepd.es, C/ Jorge Juan 6, 28001 Madrid, or to the data-protection authority where you live or work, or where you believe a problem happened.
7. Children
Ves is a general travel app. If you are under 14, please ask a parent or guardian before allowing location access or sending us personal information.
8. Keeping data safe
Data sent between Ves and our server is encrypted. We keep as little data as we can, for as short a time as we can, and restrict access to the people and providers who need it to run Ves. No online service can promise absolute security.
9. Changes to this policy
If we change this policy, we will update the effective date and show the new version in the app. If a change is important, such as using a new kind of personal data, we will give you extra notice and ask for permission where the law requires it.
10. Contact
Burutay Yalçın
Address: 08021, Barcelona, Spain
Privacy contact: privacy@vesmobility.app