Privacy Policy

• No Personal Identifiers: We do not ask for or collect personal accounts, logins, passwords, names, phone numbers, or email addresses.
• No Location Tracking: We never track your location in the background, and we never collect, transmit, store, or share your coordinates. The app reads your location only while you are looking at the map and only if you tap the locate button — see section 3.
• No Payment Information: The service is completely free and does not process payments or collect banking details.

To keep the app reliable and notify riders of service changes, we use select third-party services that process technical, pseudonymous information:

• Google Analytics for Firebase: Collects anonymous device metadata and usage events (such as searched station pairs and screen views) to understand app usage and improve transit routing.
• Firebase Cloud Messaging (FCM): Processes an anonymous device registration token to deliver push notifications regarding subway line delays, service closures, and timetable updates.
• Sentry: Collects anonymous crash logs and diagnostic stack traces when an error occurs, helping us fix bugs and improve app stability.

For more details, please review their privacy policies:

• Google Play Services & Firebase Privacy Policy
• Sentry Privacy Policy

The app includes a map, based on OpenStreetMap data, that shows subway stations and lines. The map works without any location access, and every feature of the app remains fully usable if you never grant it.

• When we ask: Only when you tap the locate button on the map. Android then shows its own permission dialog, and nothing happens until you accept it. We never request location access at first launch, in the background, or anywhere else in the app.
• Why we ask: So the map can center on you and draw a dot at your position, which makes it easier to see which station you are standing near. That is the only thing your location is used for.
• Where it goes: Nowhere. Your coordinates are read by the map on your device, drawn on screen, and discarded. They are never written to our servers, never attached to analytics or crash reports, never stored on disk, and never shared with anyone.
• Foreground only: The app reads your location only while it is open on screen and you are viewing the map. It never collects your location in the background and requests no background-location permission.
• Withdrawing consent: You can revoke the permission at any time from Settings > Apps > Masir > Permissions > Location. The map keeps working; it simply stops showing your position.

Map tiles are fetched over the internet as you pan and zoom. As with loading any image on the web, the tile provider necessarily receives your device's IP address and the coordinates of the map area being requested. We do not send your GPS position to the tile provider.

The application requests only the minimum permissions necessary. Those marked optional are requested in context, and declining them leaves the rest of the app fully functional:

• POST_NOTIFICATIONS — Allows the app to display subway delay alerts and schedule adjustment notices (Android 13+).
• ACCESS_FINE_LOCATION & ACCESS_COARSE_LOCATION — Optional. Requested only when you tap the locate button on the map, so it can show your position. Never used in the background, never stored or transmitted, and the app works without it (see section 3).
• INTERNET — Allows the app to download subway schedule database updates and perform online route searches.
• ACCESS_NETWORK_STATE — Allows the app to check whether your device is connected to the internet, falling back seamlessly to offline mode underground.
• VIBRATE & WAKE_LOCK — Allows the app to vibrate and display urgent transit disruption notices promptly.

Most app data (transit schedules, subway maps, and saved routes) is stored locally on your device in an offline SQLite database. You can delete all local data at any time by going to your device's Settings > Apps > Masir > Storage > Clear Data, or by uninstalling the application.

To request the deletion of any associated telemetry identifiers from our servers, you may contact us at support@masirapps.ir.

All communication between the application and our servers is encrypted using standard Transport Layer Security (HTTPS / TLS 1.3).

The app is intended for general transit riders and does not knowingly collect personally identifiable information from children under the age of 13.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

If you have any questions or concerns regarding this Privacy Policy, please contact us:

• Email: support@masirapps.ir
• Website: https://masirapps.ir
• Application ID: com.avat.masirapp