Privacy Policy
Kus buss on? · Last updated 27 July 2026
Who is responsible
This app is published by Ornion OÜ (Estonia). For any privacy question, or to exercise the rights described below, write to privacy@ornion.ee.
Your location
If you tap the location button on the map, the app asks the operating system for your position and uses it for exactly two things: drawing the blue dot showing where you are, and centring the map there.
Your location is never transmitted anywhere. It is not sent to us, not sent to any server, not stored on the device after you close the app, and not used for advertising. It exists only in the app's memory while the map is open. Declining the permission disables the blue dot and nothing else.
What is stored on your device
The app saves the following in local storage on your device (browser local storage on the web). None of it is uploaded, and it is deleted when you uninstall the app or clear the site data:
- Your saved favourites and their names
- A cached copy of the route list, so the app opens without waiting for the network
- Display preferences: the last-used filter, map background, route-label toggle, and whether the route panel is collapsed
- Two dismissal flags, so a one-time tooltip and the install banner do not reappear
- The timestamp of the last interstitial ad, used to rate-limit them (free Android version only)
Who your device connects to
The app has no backend of ours that stores data about you. It fetches data directly from third parties, and as with any internet request, those parties can see your IP address and the time of the request.
| Service | Why | Platforms |
|---|---|---|
Tallinn public transport open data (transport.tallinn.ee) |
Route list and live vehicle positions | All |
| CARTO basemaps | Map background tiles | All |
Estonian Land and Spatial Development Board (tiles.maaamet.ee) |
Map background and aerial tiles, and a fallback when CARTO is unavailable | All |
| Sentry (EU region) | Crash and error reports — see below | All |
| Google AdMob | Advertising — see below | Android (free version) only |
On the web, transport data is requested through a proxy on this domain, because the browser will not otherwise allow the request. Its server logs may contain your IP address and the requested path, as ordinary web server logs do. They are not used to build any profile of you.
Crash reporting
When the app hits an error, a report is sent to Sentry so the fault can be fixed. Data is processed in the European Union. A report contains:
- The error message and the technical stack trace
- Device model, operating system version, and app version
- A short trail of recent in-app events — that the map was opened, that the route list loaded, that a favourite was saved — together with counts such as how many routes were selected
The app sets no user identifier and attaches no personal data to these reports. It does not record which routes you chose, what you searched for, or where you were. There is no product analytics or usage tracking of any kind: the app reports only faults, never behaviour.
Legal basis: our legitimate interest in keeping the app working (GDPR Art. 6(1)(f)).
Advertising
The free Android version shows ads supplied by Google AdMob — a banner, and an occasional full-screen ad when returning from the map.
If you are in the European Economic Area or the United Kingdom, the app asks for your choice through Google's consent form before requesting any ad, and no personalised advertising happens unless you agree to it. Declining does not limit the app in any way: every feature stays available, and you may still see basic contextual ads that are not based on your data. You can change or withdraw your choice at any time from Ad preferences in the app.
Where you consent, Google may process device identifiers, including your advertising ID, and your approximate location derived from your IP address. This processing is Google's, not ours, and is governed by how Google uses information from sites or apps that use its services and the Google Privacy Policy.
You can reset or delete your advertising ID at any time in Android Settings under Privacy → Ads.
Legal basis: your consent (GDPR Art. 6(1)(a)) where consent is required.
The iOS version and the web version show no ads at all, and the advertising SDK is not present in those builds. There are no in-app purchases on any platform.
Children
The app is a general-audience transport tool and is not directed at children. It does not knowingly collect anything from a child, and since it collects no identifying data from anyone, it holds nothing to delete.
Your rights
Under the GDPR you have the right to access, correct, erase, restrict, or object to the processing of your personal data, and to complain to a supervisory authority — in Estonia, the Data Protection Inspectorate.
In practice we hold no data that can identify you, so there is no account to look up. You can exercise the practical equivalent yourself at any time:
- Erase everything the app stored: uninstall it, or clear the app's data (on the web, clear this site's data in your browser).
- Stop location access: revoke the location permission in system settings.
- Change your advertising consent: open Ad preferences in the app, or reset or delete your advertising ID in Android settings.
For anything else, write to privacy@ornion.ee.
Changes
If this policy changes, the revised version is published on this page with a new date at the top. Material changes will also be noted in the app's store listing.