Nimbus — Privacy Policy

Who we are

Nimbus is an independent app that displays real-time transit information for Halifax Transit riders, using Halifax Transit's public GTFS and GTFS-Realtime data feeds. Nimbus is not affiliated with, endorsed by, or sponsored by Halifax Transit or the Halifax Regional Municipality.

What we collect, and why

Location — only for "Nearby stops" and the map, only with your permission

When you use the Nearby feature (or centre the map on yourself), the app asks your device's operating system for its location. Your coordinates are used entirely on your device — to centre the map and to calculate which stops are closest to you — and are never transmitted to our servers or to anyone else. Nothing about your location leaves your phone.

Location is optional. If you decline the permission, the rest of the app works normally; you simply won't see the Nearby list. You can revoke the permission at any time in your device settings.

Saved stops and preferences — stored on your device

Your saved (favourite) stops and routes, theme choice, and other settings are stored locally on your device. We never receive them and keep no copy on our servers.

If you have Android's built-in backup enabled, the operating system may include this local app data in your device's system backup to your own Google account, so your settings can be restored if you reinstall. That backup lives in your Google account and is controlled by you and Google — not by us. You can turn it off in your device's backup settings.

What we do NOT collect

• No account, name, email, or phone number.
• No advertising identifiers.
• No analytics or usage tracking, and no crash-reporting SDKs.
• No advertising and no third-party ad networks.

Information handled by third parties

Because Nimbus is a live map app, your device makes network requests that unavoidably reveal your IP address to the services it contacts:

• Map tiles are loaded from OpenFreeMap, using map data from OpenStreetMap. When your device requests map tiles, that provider receives your IP address and the map area you are viewing. See the OpenFreeMap and OpenStreetMap privacy pages.
• Our transit API (hosted on Railway) receives your requests over an encrypted (HTTPS) connection to return live vehicle, stop, arrival, schedule, and alert data. These requests do not include your location. Standard, transient server request metadata (such as IP address) may be processed to deliver the service; we do not use it to identify you, and we keep no user profiles.
• Google Play distributes the app and processes the optional one-time "Supporter" in-app purchase. If you choose to support the app, your payment is handled entirely by Google — we never see your payment details, and the purchase unlocks only cosmetic extras. Google Play also provides the optional system backup described above.

We do not send your information to any other third parties.

Data retention and your rights

We keep no user database, so there is no personal profile for us to retain, sell, or delete. Data stored locally on your device is under your control and is removed when you clear the app's data or uninstall it.

Under Canada's PIPEDA, you have rights to access and correct personal information an organization holds about you. Because Nimbus stores none on our side, there is generally nothing to access or correct — but you are welcome to contact us with any privacy question at the address above.

Children

Nimbus is a general-audience utility and is not directed at children. We do not knowingly collect personal information from children.

Security

Network communication with our API and with the map-tile provider uses HTTPS. Your location is processed only on your device and is never sent over the network.

Changes to this policy

If this policy changes, we will update the "Last updated" date above and post the revised version at the same URL.