Privacy

Privacy policy

Your way stays yours. Here is exactly which data Wien Live processes, why and for how long – and which it does not.

No account

No sign-up, no email. Just a random install ID.

Location stays on your iPhone

Your position and areas are only compared on your device.

No tracking

No ads, no analytics tools, no selling of data.

Payment only through Apple

We see no payment details and do not know who you are.

1Controller

Peter Edlinger
Email: [email protected]
More details in the legal notice.

This policy covers the Wien Live app for iPhone, its widgets and Live Activities, the Apple Watch app, the website edlinger.dev/wienlive and the invitation pages at edlinger.dev/wienlive/app/w/….

Wien Live is not an app of Wiener Linien or the City of Vienna.

2Boards and settings

Wien Live needs no account. Your boards consist of lines, stops and directions, a name, optionally a time window (weekdays, start and end) and optionally an area on the map (centre and radius).

  • Boards and settings are stored on your iPhone, in a space only Wien Live, its widgets and Live Activities can read.
  • If you have paired an Apple Watch, the iPhone sends your boards and your Premium status directly to the watch app (Apple WatchConnectivity). No server of ours is involved.
  • Siri and Shortcuts run Wien Live actions on your device. Voice control is subject to Apple’s privacy policy.
  • Which parts of your boards our server knows so that Live Activities work is described in sections 5 and 6. The areas on the map are not among them.
  • Deleting the app removes all data on the device.

Legal basis: Art. 6(1)(b) GDPR (providing the app’s features).

3Location optional

A board can be tied to a place: when you enter its area it appears; when you leave, Wien Live switches to the next matching board. For this the app asks for your location, and only when you create a board with a location.

  • With While Using the App, Wien Live only checks your location while the app is open. With Always, iOS also tells the app in the background when you enter or leave one of your areas or move a significant distance. The app has no continuous background tracking for this.
  • Your position is compared with your areas only on your iPhone. It is not sent to us and not stored. The areas themselves (centre and radius) do not leave your device either.
  • Our server only learns whether a board uses a location and which location permission you granted (none, while using, always, denied). That tells it whether it may start boards at the beginning of a time window itself.
  • When you enter an area while the app is in the background and no board is running, the app asks our server to start that board. The server learns which board is started and when, but neither your position nor where the area is. The board is stored like any other started board.
  • The map and the address search for setting an area come from Apple (MapKit). Apple receives the map section and your search term, under Apple’s privacy policy.

You can change or revoke the permission at any time in iOS under Settings › Privacy & Security › Location Services › Wien Live.

Legal basis: Art. 6(1)(a) GDPR (consent through the system prompt) and (b) (providing the feature).

4Departures and timetable data

Departures come from the open real-time data of Wiener Linien. The app, widgets and watch request them through our server edlinger.dev, which fetches each stop once for all users from Wiener Linien.

  • Only the number of the stop or platform is sent, no device ID.
  • Your IP address is only used briefly in memory to fend off too many requests and is not stored.
  • If our server does not answer, the app asks Wiener Linien (Wiener Linien GmbH & Co KG) directly. Like any website, they then receive your IP address and the stop number.
  • To count down without a connection, the app downloads the line catalogue and the timetable of the platforms in your boards from our server. For this it sends the numbers of these platforms.
  • Sayings on the board and abbreviations for disruption notices are also loaded from our server, without a device ID.

Legal basis: Art. 6(1)(b) GDPR (providing the app’s features).

5Live Activities

iOS pauses apps in the background. To keep your board current on the lock screen and in the Dynamic Island anyway, our server sends it the departures through the Apple Push Notification service (APNs).

While a Live Activity runs, the app sends:

  • the random install ID (section 6) and the ID of the Live Activity
  • a push token from Apple that can only reach this Live Activity
  • the board: name, both rows (line, stop, direction) and the end of the time window
  • whether you have Premium and whether you want to see sayings, so the server sends real time or the timetable and the right content

From iOS 17.2, our server can also start a board at the beginning of its time window. For this it stores another token from Apple (push-to-start) and your time windows. This only happens when none of your boards uses a location. It also uses the token to start a board when you enter its area (see Location).

Apple delivers the push messages under Apple’s privacy policy. You can turn off Live Activities in iOS under Settings › Wien Live › Live Activities.

Legal basis: Art. 6(1)(b) GDPR (providing the app’s features).

6Device report and statistics

On first launch the app creates a random install ID. It is not an Apple device or advertising ID and does not identify you. You find it in the app under Settings › Geräte-ID. A reinstall creates a new one.

When the app opens and when your boards change, it reports to our server:

  • install ID, app version, iOS version, device model (e.g. “iPhone16,2”), time zone and language
  • your boards without areas: name, lines, stops, directions and time windows, and whether a board uses a location
  • which permissions you granted (Live Activities, notifications, location) and whether Premium is active
  • which version of the line catalogue and timetable the app has
  • a DeviceCheck token from Apple (section 8)

With this we start and end Live Activities at the right time (section 5) and see which timetable data the app needs. We also count on which days an install was opened and how often a saying was shown. That tells us how many people use Wien Live, which lines are in demand and whether something is broken.

  • We store no IP addresses, no locations, no names and no email addresses with this data.
  • The app uses no analytics, tracking or advertising services, and we do not combine the data with data from other apps or websites.
  • Please do not give your boards names that identify you, such as your full name or address.

Legal basis: Art. 6(1)(b) GDPR (providing the app’s features) and (f) (legitimate interest in operating, debugging and improving the app).

7Premium and subscriptions (RevenueCat)

Apple handles purchases and subscriptions through your Apple ID. We receive no payment details and do not learn who you are.

To manage your Premium status we use RevenueCat (RevenueCat, Inc., USA). RevenueCat processes your install ID as user ID, your purchase history (product, time, status), device information, IP address and country. Our server asks RevenueCat whether an install ID has Premium and adds free months from invitations there (section 8). RevenueCat’s privacy policy.

During a free trial, the app reminds you two days before it ends with a local notification, if you allowed notifications.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

8Inviting friends

On request, Wien Live creates a personal invitation link edlinger.dev/wienlive/app/w/CODE. If a friend newly installs the app through it and redeems the code, you both get a month of Premium.

  • We store your code with your install ID, who redeemed which code (two install IDs) and the state of the reward. For your reward we check whether your friend created a board and opened the app on two days.
  • We store rejected redemption attempts with code, install ID and reason to detect abuse.
  • So that nobody invites themselves again and again by reinstalling, we use Apple DeviceCheck. Apple stores two flags for your iPhone (code redeemed, own link created) that survive a reinstall. Apple does not tell us which device or person this is.
  • We count visits to an invitation link per code and day, without IP address and without cookies.
  • The app only reads the code from the clipboard when you tap Paste yourself, or from an invitation link you open.

Legal basis: Art. 6(1)(b) GDPR (taking part in the invitation programme) and (f) (legitimate interest in preventing abuse).

9Notifications

Wien Live sends you no advertising or newsletter notifications. The app only creates notifications locally on your device:

  • the reminder before a free trial ends (section 7)
  • before iOS 26, a notification at the start of a time window, because there the app can only start a Live Activity in the foreground

Live Activity updates (section 5) are not notifications and only appear in the Live Activity. You can turn off notifications in iOS under Settings › Notifications › Wien Live.

10Support and contact

When you write to [email protected], we process your email address and message to answer you. If you write from the app, the email automatically contains the app version, build and your device ID so we can understand your problem. You can remove this before sending.

With your device ID we can find the data our server has about your install (sections 6 to 8).

Legal basis: Art. 6(1)(b) GDPR or (f) (legitimate interest in answering requests).

11Website and invitation page

The website edlinger.dev/wienlive and the invitation pages run on a ZAP-Hosting server in Germany and are delivered through Cloudflare. Technically necessary connection data (e.g. IP address) is processed; details are in the privacy policy of edlinger.dev.

The Wien Live pages use no analytics or tracking tools. If you switch the language, a cookie stores only that choice. When you tap Wien Live laden, the invitation page copies the invitation link to your clipboard so the app can offer it after installing.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in delivering the page).

12Recipients and third countries

Only the providers named here receive data, as far as their task requires:

  • ZAP-Hosting GmbH, Germany: server and database
  • Cloudflare, Inc., USA: delivery of the website and API
  • Apple Inc. or Apple Distribution International Ltd.: push delivery, DeviceCheck, maps, purchases
  • RevenueCat, Inc., USA: Premium status
  • Wiener Linien GmbH & Co KG, Austria: only when the app requests departures directly (section 4)

We do not sell data and do not pass it on for advertising.

Apple, RevenueCat and Cloudflare may process data in the USA. Transfers are based on the EU-US Data Privacy Framework (adequacy decision of the European Commission) where the provider is certified, or on EU standard contractual clauses.

13Retention

  • Data on your device: until you delete it in the app or uninstall the app.
  • Device report, active days, Live Activities, saying views and your invitation code: if an install has not reported for 13 months, we delete all data about it. Individual entries (ended Live Activities, active days, saying views) are also deleted after 13 months.
  • Push tokens: they become invalid when the Live Activity ends; the entry is deleted as above.
  • Time window starts by the server: after 30 days.
  • Invitations, rejected redemption attempts and link visits: after 13 months.
  • Push delivery error logs: after 30 days.
  • Apple keeps the DeviceCheck flags until we reset them.
  • Emails: as long as needed to handle your request; then they are deleted.

14Children

Wien Live is not aimed at children under 14. We do not knowingly process data of children that requires consent.

15Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)), for example in your iPhone’s settings.

As we do not know your name, we need your device ID for access or erasure (in the app under Settings › Geräte-ID, tap to copy). Write to [email protected].

You can also complain to a data protection supervisory authority, in Austria the Datenschutzbehörde, or in the EU member state where you live.

16Changes

We update this policy when the app or the law changes. The version published here applies.

Last updated: 30 October 2026