Privacy Policy

What we collect

• Browsing nearby ATMs and opening navigation do not require an account.
• If you sign in, we store your verified email address, name if supplied by Google, language, authentication identity, device token, and contribution reputation. Email is encrypted and separately indexed with a one-way hash.
• Reports store the ATM, outcome, optional broad amount band, time, location-match quality, and moderation state. We never request a PIN, card number, account number, bank password, SMS, or exact withdrawal amount.
• A check session starts only after your action and foreground-location disclosure. It lasts up to 45 minutes. The app matches ATM visits on the device and uploads only ATM identifiers, entry/exit times, dwell, sample count, and accuracy/quality summaries. The raw coordinate trail is discarded on the device.
• We retain limited first-party operational events and security/audit records. We do not include advertising trackers.

How we use data

We authenticate accounts, calculate explainable ATM availability and service estimates, rank nearby options, prevent abuse, moderate evidence, diagnose reliability, and meet deletion/security obligations. Personal or bank-decline outcomes do not affect whether an ATM is scored as empty.

Retention

• OTP records: 24 hours; matched visit events and session evidence: 30 days.
• Explicit reports: 12 months, then eligible outcome counts become irreversible ATM/day/hour aggregates.
• Google-derived place fields: no more than 30 days before refresh or removal; durable Place IDs may remain as permitted.
• Security and administrator audits: 12 months; encrypted backups: 30 days.

Location, permissions, and choices

Location permission is optional for manual search. A report without a verified location match receives less scoring weight. Background/foreground-service location is used only during a visible, user-started check session, with Android’s persistent notification, and stops on timeout, explicit stop, permission removal, or service termination.

You may change app language, sign out, revoke location permission in Android, or delete your account and its identifying reports/session data. Deletion revokes access tokens immediately and recalculates affected scores. See data deletion instructions.

Google Maps and Places

ATM names, positions, addresses, search, map display, and navigation may be provided by Google. Google processes those interactions under the Google Privacy Policy and Google Maps/Google Earth Additional Terms. Google attribution is shown with mapped place data.

Security and contact

We use HTTPS, encrypted sensitive fields, hashed tokens/OTPs, rate limits, scoped administrator access, and audited moderation. No service can promise absolute security. For privacy questions, use the contact route on our support page.