Plain-language notice
Privacy without surprises
This independent guide has no accounts. It uses Google Analytics only if you accept the cookie banner; decline and no analytics cookies are set. We also process data when you email us, open the embedded activities catalogue or follow a marked affiliate link.
Last updated 25 July 2026
Santorini Bus
Santorini Bus Android app privacy
This section applies to the Santorini Bus Android app (package com.sd2.santorini.bus). No account is required for ordinary use. The app has no ads, does not sell personal data and does not use data for cross-app tracking. The website practices are described separately below.
Location and GO rides
With foreground-location permission, the app uses current precise location to show nearby stops and departures, place you on the map, show direction and validate a stop correction you choose to submit. During a GO ride you start, an Android foreground service can continue receiving high-accuracy location while the app is backgrounded or the screen is locked so it can follow progress and alert you for your stop. If notification permission is denied, GO falls back to foreground-only location. The app does not request always-on background-location permission and does not run location tracking outside a GO ride you start. This follows your device, not live bus locations.
What can leave your device
A stop correction you confirm can send the action and stop details, an app-scoped persistent random identifier and, when foreground location was already allowed, current precise coordinates and distance to Supabase. After separate first-use GO consent, an on-route recording can send GPS coordinates and times, route and direction, board and alight stops, quality data and a fresh one-time ride code to Supabase; it does not include an account or the stop-report device identifier. Sentry can receive crashes, breadcrumbs, performance traces, profiles, metrics, session health and a sampled diagnostic replay when a session has an error; a problem report can also include the message and optional name or email you provide. Expo EAS Observe receives app-performance and navigation events with a session ID, times, route, app/build/update/language details and device OS, model and runtime metadata. Google Play and RevenueCat process purchase, receipt and entitlement data; an optional complimentary-access sign-in can send an email to RevenueCat. Santorini Bus does not use in-app PostHog product analytics.
Service providers
Supabase hosts stop contributions and GO ride recordings; Sentry provides diagnostics, sampled error-session replay and optional feedback; Expo provides EAS Observe app-performance measurement; RevenueCat and Google Play provide purchase and entitlement services; Cloudflare delivers schedule updates. Opening directions in Google Maps or Apple Maps sends the locations you choose to that external map provider. These providers process data to supply their functions under their own privacy terms. App service traffic uses encrypted HTTPS connections.
Retention
The service is moving to a 365-day limit for raw GO ride recordings, but the production deletion job has not yet been verified. Until it is verified, Santorini Bus does not promise automatic deletion on a fixed day; any in-app text that still says 90 days must be corrected. Derived route and timing observations may be kept without a fixed expiry. My Rides keeps up to 200 ride summaries and the newest 50 full GPS tracks locally on your device; you can delete one ride or clear all. Pending EAS Observe metrics expire from the device after seven days, but processor-side retention for stop contributions, Sentry, Expo, RevenueCat and Google Play is governed by operational or legal needs and provider terms; no shorter fixed period is promised here.
Your choices and deletion
Location, notifications, GO ride contribution, problem-report contact fields and complimentary-access sign-in are optional. You can deny permissions, decline GO consent, stop a GO ride and delete one local ride or all local history in My Rides. Stop contributions have no in-app deletion control. For privacy questions or a request concerning identifiable app data, email [email protected]. A GO recording has no account or persistent device identifier, so it normally cannot be found from your email.
No advertising tracking
The app does not use advertising identifiers, show ads, sell data, run PostHog product analytics or combine app data with activity from other companies for advertising. Offline schedule reading and ordinary journey planning do not require an account.
Who operates this guide
Santorini Bus is an independent information website and is not a transport operator, public authority or activity provider.
Privacy questions and rights requests: [email protected].
Website delivery and security
Cloudflare delivers and protects this website. Like most web infrastructure, it processes request information such as IP address, requested URL, traffic-routing data, browser or system information, and security signals. We use this processing only to deliver, cache, secure and diagnose the site.
Website analytics
This guide uses Google Analytics 4 to understand, in aggregate, how visitors find and use the site so we can improve it. Analytics run under Google Consent Mode: they are switched off by default, and the tracking cookies (_ga and _ga_*) are only set after you press Accept on the cookie banner. If you decline, or simply never choose, no analytics cookies are stored and no page-view or session data is sent.
When enabled, Google Analytics measures page views, sessions, approximate location, referrer, and general device and browser information, with IP-address anonymisation turned on. It also records clicks on Google Play buttons, current official timetable links and marked affiliate links, including the placement, page language, route or destination context and outbound URL. We do not use it for advertising, ad personalisation or remarketing — those consent categories stay denied at all times.
You can change or withdraw your choice at any time with Cookie settings in the footer. Withdrawing switches analytics off and removes this site’s Google Analytics cookies.
Email you choose to send us
If you email us, we receive your email address, message, headers and anything you attach. Cloudflare Email Routing forwards the message to a verified support inbox. We use it to answer the request, correct the guide, handle accessibility feedback or meet legal obligations.
Do not send passport, payment-card or health information. Messages are kept only as long as reasonably needed for the conversation, security and legal obligations, then deleted or anonymised.
Affiliate links
Booking through these links supports this free guide at no extra cost to you. Affiliate URLs include our partner identifier and a placement label. We do not receive your booking or payment details from this website.
The Experiences page embeds GetYourGuide’s catalogue. Opening that page connects your browser to GetYourGuide so it can provide current activities, prices and availability; it receives ordinary request information and may process data under its own privacy notice.
When you select a marked affiliate link, we send one cookie-free affiliate_click event to PostHog EU Cloud so we can understand which placements support this guide. It contains this site’s name, the current page path, the affiliate, placement, and destination host and path. It uses a new random identifier for that single event, creates no visitor profile, and does not track page views or sessions. PostHog also receives ordinary connection data, such as your IP address, to deliver and secure the request.
We use this limited measurement only to assess and improve the guide’s affiliate funding. We keep the events only while they are needed to compare placement performance, then delete or aggregate them.
When you follow a GetYourGuide link, you leave this site and GetYourGuide and the activity provider process information under their own terms.
Read GetYourGuide’s privacy policy .
Kiwitaxi transfer links use a Travelpayouts tracking redirect before opening Kiwitaxi. Travelpayouts and Kiwitaxi process ordinary request and booking information under their own terms.
Your choices and rights
You can choose not to follow an affiliate link. Depending on where you live, you may also have rights to access, correct, delete or restrict personal information, object to some processing, or complain to a data-protection authority. Email us to exercise a right. We may need enough information to verify and complete the request.
Changes to this notice
We update this page when the site’s technology or data practices change. The date above shows the current version.