Privacy policy

Last updated: 28 July 2026

1. Data controller

Fuentes de Madrid is provided by Iván Ramírez. For privacy questions or rights requests, email fuentesmadrid.app@gmail.com.

2. Data and permissions

Location

If you grant location permission, the app uses your position to show nearby fountains, estimate distance and walking time, orient the map and augmented-reality view, draw your local trail and update the widget.

Precise location is primarily processed on your device. It is not included with ratings or stored in the developer's database. The last position and, when enabled, recent trail points are stored locally. The app does not request background location.

Camera and sensors

The camera is used only when you open “View in AR”, to overlay directions on the live preview. The app does not record, retain or upload photos or video. Orientation sensors support the compass and direction indicators.

Ratings and broken-fountain reports

If you choose to rate a fountain, the app sends over HTTPS:

• the fountain's public identifier;
• a one-to-five-star rating;
• whether you reported it as broken;
• a random installation identifier.

The installation identifier is transformed server-side using SHA-256 and a private salt before storage. It is used only to maintain one rating per fountain and installation. No name, email address, precise location or advertising identifier is sent.

Local data

Favourites, settings, language, your ratings, last position and recent trail are stored on the device. You can remove them by clearing the app's data or uninstalling it.

3. Third-party services

• Google Maps Platform and Google Play Services provide maps and location services. Google may process technical and usage data under its Privacy Policy.
• Cloudflare Workers and D1 receive and aggregate anonymous ratings. Cloudflare may process technical request metadata under its Privacy Policy.
• GitHub hosts updates to the public fountain dataset. See the GitHub Privacy Statement.
• Spain's National Geographic Institute provides public elevation tiles used for approximate elevation differences.

These services necessarily receive technical connection data such as an IP address when serving a request. Fuentes de Madrid includes no advertising, tracking or analytics SDK.

4. Purposes and legal grounds

Location, camera and sensor access support features requested by the user and occur only after the corresponding action or permission. Ratings and reports are processed because the user voluntarily submits them. Technical security and abuse-prevention measures rely on the legitimate interest of keeping the service reliable.

5. Retention and deletion

• Local data remains until you remove it, clear the app's data or uninstall the app. Trail points expire automatically.
• Ratings are kept while useful to the service or until deletion is requested.
• Fuentes de Madrid does not retain precise location, photographs or recordings in its database.

To correct or remove a rating, email fuentesmadrid.app@gmail.com with the fountain, approximate rating and submission date. We may request only the additional details necessary to locate it.

6. Your rights

You may request access, rectification, erasure, restriction, objection or portability where applicable by using the contact address. You may also withdraw location or camera permissions in Android settings.

You may lodge a complaint with the Spanish Data Protection Agency.

7. Security

Communications with first-party services use HTTPS. Installation identifiers are stored in transformed form and are not used for advertising, profiling or cross-app tracking.

8. Changes

This policy may be updated to reflect changes to the app or its services. The effective date is shown at the beginning of this document.