Shade On You Privacy Notice
Effective 6 September 2026
Shade On You is published by Jacob Shing. Contact: jacobszh@connect.hku.hk.
Information used to provide the App
Shade On You does not require an account. Precise location used for Nearby and active journey progress is processed on the device and is not sent to a Shade On You-operated server. Requests to transport operators identify routes and stops. Weather requests retrieve public observations and forecasts. Apple provides maps and location services under Apple's privacy practices.
Preferences, bookmarks, installed-package records, terms acceptance, onboarding completion and current Live Activity state are stored locally or in the App's private application-group container. You can remove bookmarks and downloaded packages in the App, revoke location permission in iOS Settings, or delete the App to remove ordinary local data, subject to iOS and backup behaviour.
Optional analytics
Only after you opt in, the App uses the IDFA-free Firebase Analytics Core SDK to understand broad feature use. We may collect:
- app screens opened and fixed-category feature-use events;
- app version, build number and distribution environment;
- device model, operating-system version, language, broad region, session information and a pseudonymous app-instance identifier; and
- technical information normally accompanying an internet request, including an IP address processed by Google and Cloudflare.
We do not send GPS coordinates, precise journey movement, route or stop identifiers, search text, bookmarks, selected journey times, diagnostic log contents, names, email addresses, account identifiers or advertising identifiers to analytics. Analytics is not used for advertising, cross-app tracking, data brokerage or automated decisions affecting you. The App does not request App Tracking Transparency permission.
Declining does not change any feature. You can change your choice in Settings. Analytics collection is disabled in Mainland China, Debug and Simulator builds, and automated tests.
Purpose, legal basis and retention
Jacob Shing processes optional analytics with your consent to measure feature use and improve the App. Google Analytics event-level and user-level data is configured for 14-month retention; aggregated reports may remain for longer. Analytics data may be processed outside your country or region by Google and its service providers.
Google acts as an analytics service provider. Review Google's privacy and security information and Google's privacy policy. Apple separately processes App Store, map and platform information under Apple's privacy policy.
Your choices and rights
In Settings, you can stop future analytics collection and submit deletion of data associated with the current pseudonymous app instance. The App sends that identifier to the Project Canicule privacy service hosted on Cloudflare. The service forwards it to the Google Analytics user-deletion API and stores only keyed hashes, a random request number, status and timestamps for security, rate limiting and proof of handling. Raw IP addresses and raw app-instance identifiers are not retained by that service. Receipt records are kept for no more than 24 months and rate-limit records for no more than 7 days.
Depending on where you live, you may also have rights to access, erase, correct, restrict or object to processing, withdraw consent, and complain to a regulator. Because no account or directly identifying profile is created, we may be unable to locate analytics beyond the app-instance identifier available on your device. Contact us if the in-app control does not resolve your request. Withdrawing consent does not affect processing that occurred lawfully before withdrawal.
Changes
If this notice or the purpose of analytics changes materially, the App will request a fresh decision where required. The notice available in the App states the current practice.