Privacy policy
Last updated 17 October 2026
Berlinav is operated by Bishesh Tiwaree.
hello@berlinav.com
Who operates Berlinav
Berlinav is operated by Bishesh Tiwaree. For privacy questions or to exercise your data-protection rights, contact hello@berlinav.com. Berlinav is independent and is not an official BVG or VBB app.
Journey planning and location
When you search for stops or addresses, plan a journey, check departures or refresh an itinerary, the selected inputs go through our Cloudflare-hosted transit backend to the BVG transit service. These requests can contain typed searches, chosen addresses, station identifiers, journey refresh tokens, and precise coordinates when you choose current location. Our backend also receives your IP address and uses it to limit abusive requests. We do not send continuous location traces to the transit service.
Foreground location only
Location permission is optional. Berlinav accesses location when you choose a current-location feature or start the journey companion. Continuous progress matching happens on your device while the companion is in use and stops when the app enters the background. Underground signals may be inaccurate or unavailable. You can revoke location permission in your device settings and use manually selected endpoints.
Information stored on your device
Home and Work places, favorites, recent routes and an active itinerary are stored on your device. In the Android/iOS app, saved session content is encrypted with a device-kept key; app cloud backup is disabled on Android. Browser storage is local to your browser but is not encrypted by Berlinav, so avoid saving sensitive addresses on shared browsers. Persisted active itineraries expire after 24 hours. Other saved places and recent routes remain until replaced or deleted. The “Clear saved data” control removes Berlinav’s saved session and optional analytics preference from this device/browser.
Optional usage analytics
Umami event tracking is being prepared and is currently disabled while hosting and retention details are verified. The planned setup uses analytics.tap-buzz.com, self-hosted by the operator on Hetzner, and requires a separate opt-in. It sends only allowlisted screen names, feature events, transport modes, app version/platform and coarse request outcomes/timing. It excludes search text, addresses, station pairs, journey tokens and GPS coordinates. No advertising ID or persistent custom user ID is sent. Umami does not use tracking cookies, but its server receives network information and may derive approximate location and session identifiers. Turning analytics off stops new events and clears the app’s in-memory analytics session; it does not automatically delete events already received by the server.
Why we process information
Necessary journey requests are processed to provide the route-planning features you request. Operating and protecting the service relies on our legitimate interests in providing a working, secure transit companion. Where consent is required for access or processing, we ask before it begins. Optional analytics will rely on your consent and will remain usable only after the setup and this policy are updated. Refusing analytics does not limit route planning.
Recipients and retention
Cloudflare processes backend traffic and BVG receives the transit inputs needed to answer your request. Our application backend does not intentionally retain route/address request bodies or continuous location history, does not use shared route/address caches, and disables application request logging. Temporary rate-limit counters expire according to the rate-limit window. Infrastructure providers may process technical network/security information under their own service terms; provider-level logging, processing locations and applicable international-transfer safeguards must be reviewed before a broad launch. Umami hosting location and analytics retention are not yet confirmed, so analytics remains disabled.
Your choices and rights
You can clear saved data in the app, clear browser storage, uninstall the app, or revoke location permission. Where applicable under data-protection law, you can ask for access, correction, erasure, restriction or portability of your personal data, and object to processing based on legitimate interests. You can withdraw optional analytics consent at any time in the app. You may complain to a data-protection supervisory authority, including one in your country of residence. Because Berlinav has no account and optional analytics will avoid persistent personal identifiers, we may be unable to link anonymous-looking server events back to you; contact us and we will explain what is feasible.
No advertising or data sales
Berlinav has no user accounts, advertising or sale of personal data. It is a general-audience transit tool and is not designed to collect personal information from children. We will update this policy when the service or its processing changes.
This website
This landing page has no analytics script, tracking cookies, account system or contact form. Its hosting provider, Cloudflare, receives technical network information needed to deliver and protect the website. Emailing us uses your email provider and sends the information you choose to include. The app’s processing is described above.