Skip to content

Instantly share code, notes, and snippets.

@dautovri
Created November 24, 2025 15:06
Show Gist options
  • Select an option

  • Save dautovri/3cb00b94d994983481eccefb046c65a9 to your computer and use it in GitHub Desktop.

Select an option

Save dautovri/3cb00b94d994983481eccefb046c65a9 to your computer and use it in GitHub Desktop.
MyStop Berlin - App Store Privacy Questionnaire & Configuration Guide

MyStop Berlin - App Store Privacy Questionnaire

App Information

  • App Name: MyStop Berlin
  • Bundle ID: com.ruslandautov.mystop.berlin
  • Primary Category: Navigation
  • Description: Real-time Berlin transit departures with Live Activities & Dynamic Island support

Privacy Practices

Does your app collect data?

Answer: YES (Location data only)


Data Types Collected

1. Location Data

Precise Location

  • Is this data collected? YES
  • Is this data linked to the user? NO
  • Is this data used for tracking? NO
  • For what purposes?
    • App Functionality (to show nearby transit stops)

Explanation: The app requests location permission to help users find nearby transit stops. Location data is:

  • Only used locally on the device
  • Never sent to any server
  • Never stored permanently
  • Never linked to user identity
  • Never used for advertising or analytics

Data NOT Collected

The following data types are NOT collected by MyStop Berlin:

  • ❌ Contact Info (name, email, phone, address)
  • ❌ Health & Fitness
  • ❌ Financial Info
  • ❌ Contacts
  • ❌ User Content (photos, videos, audio, documents)
  • ❌ Browsing History
  • ❌ Search History
  • ❌ Identifiers (User ID, Device ID, Advertising ID)
  • ❌ Purchases
  • ❌ Usage Data
  • ❌ Diagnostics
  • ❌ Other Data

Third-Party Data Collection

Does your app use third-party SDKs or APIs that collect data?

Answer: YES

Third-Party Services Used:

BVG (Berlin Public Transport) API

  • Purpose: Fetch real-time departure information
  • Data Sent: Stop IDs (public identifiers, no personal data)
  • Data Collected by Third Party: None
  • Privacy Policy: N/A (public API, no user tracking)

Note: The BVG API only receives transit stop identifiers. No location coordinates, user identifiers, or personal information is transmitted.


Privacy Policy URL

Privacy Policy URL: https://github.com/dautovri/MyStop-Berlin/blob/main/PRIVACY.md

(If you don't have a privacy policy yet, you'll need to create one and host it publicly)


App Store Connect Configuration Steps

Step 1: Log into App Store Connect

  1. Go to https://appstoreconnect.apple.com
  2. Select MyStop Berlin
  3. Navigate to App Privacy

Step 2: Answer Privacy Questions

Question: "Does your app collect data from this app?"

  • Answer: YES

Step 3: Configure Location Data

Data Type: Location → Precise Location

Purposes for Collection:

  • ✅ App Functionality

Is this data linked to the user's identity?

  • ❌ NO

Do you or your third-party partners use this data for tracking purposes?

  • ❌ NO

Step 4: Confirm No Other Data Collection

For all other data types (Contact Info, Health, Financial, etc.):

  • Answer: Not Collected

Step 5: Provide Privacy Policy URL

  • Enter: https://github.com/dautovri/MyStop-Berlin/blob/main/PRIVACY.md
  • Or host your own privacy policy

Step 6: Review & Publish

  • Review all entries
  • Click Publish
  • Return to app submission and click Add for Review

Sample Privacy Policy (PRIVACY.md)

If you need to create a privacy policy, here's a template:

# Privacy Policy for MyStop Berlin

**Last Updated:** November 24, 2025

## Introduction

MyStop Berlin ("we", "our", or "the app") is committed to protecting your privacy. This policy explains how we handle your information.

## Information We Collect

### Location Data
The app requests access to your device's location solely to:
- Help you find nearby transit stops
- Display relevant departure information

**Important:**
- Location data is processed entirely on your device
- We do not transmit, store, or share your location with any servers
- Location access can be disabled in iOS Settings at any time

## Information We Do NOT Collect

We do not collect, store, or transmit:
- Personal identification information
- Contact details
- Usage analytics
- Device identifiers
- Advertising IDs
- Any data that could identify you

## Third-Party Services

### BVG API
The app uses the Berlin Public Transport (BVG) API to fetch real-time departure data. We only send:
- Transit stop IDs (public identifiers)
- No location coordinates
- No personal information

## Data Security

Since we don't collect or transmit personal data, there is no user data at risk. All transit information is fetched anonymously.

## Children's Privacy

The app does not knowingly collect information from children under 13. No personal data is collected from any user.

## Your Rights

You can:
- Disable location access in iOS Settings → MyStop Berlin → Location
- Delete the app to remove all locally stored data

## Changes to This Policy

We may update this policy. Changes will be reflected in the app's App Store listing.

## Contact

For privacy questions, contact: [your-email@example.com]

---

**MyStop Berlin respects your privacy. We believe in transparency and minimal data collection.**

Checklist Before Submission

  • Privacy questionnaire completed in App Store Connect
  • Privacy Policy URL provided (publicly accessible)
  • Location permission purpose string in Info.plist (NSLocationWhenInUseUsageDescription)
  • All privacy labels accurately reflect app behavior
  • No unexpected data collection in code
  • Third-party API usage documented

Common Mistakes to Avoid

Don't claim "no data collected" if you use location ❌ Don't forget to provide a privacy policy URL ❌ Don't link data to user identity unless truly necessary ❌ Don't enable tracking unless required for your business model

Do be transparent about location usage ✅ Do explain why permissions are needed ✅ Do keep privacy policy updated ✅ Do minimize data collection


Questions from Reviewers

Q: Why do you need location access? A: To help users discover nearby transit stops and show relevant departure information. Location is processed locally and never transmitted to servers.

Q: Do you collect any identifiers? A: No. We do not collect device IDs, advertising IDs, or any user identifiers.

Q: What data is sent to the BVG API? A: Only public transit stop IDs (e.g., "900100003" for Alexanderplatz). No location coordinates or personal data.


Created: November 24, 2025
For: MyStop Berlin App Store Submission
Contact: @dautovri

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment