Privacy policy

OctaFuel (“the app”, “we”, “us”) is a free mobile app that shows fuel prices at stations in Portugal, Spain and France, using data from official government sources. This policy explains what information the app and this website use, why, who receives it, and the choices you have.

In short

You don’t need an account, and we never ask for your name, email or phone number.
We use your location only to find stations near you and to plan routes. We don’t store it or link it to you.
Your favourites, alerts and settings stay on your phone.
Ads from our partner Adsterra appear only if you agree (and, on iPhone, also allow tracking), and you can change your mind at any time under Privacy & ads in the app.
If you report an ad, we store only the report itself, with nothing that identifies you.
This website (octafuel.pt) sets no cookies and uses no analytics or tracking.

Who is responsible

The data controller is Carlos Rodrigues, an individual developer based in Portugal.

Email: contacto@octafuel.pt

Information the app uses

Your location

If you allow it, the app reads your device’s location while you are using it. It never tracks your location in the background. Location is used to:

Find nearby stations and show them on the map. Your coordinates are sent over an encrypted connection (HTTPS) to the OctaFuel server, which returns the stations around that point. The server uses the coordinates only to answer that request. It does not save them, and it doesn’t link them to you or to your device. Our hosting provider keeps technical logs, such as the IP address and time of a request, for 1 day, for security and operations.
Fall back to official sources. If the OctaFuel server is unavailable, the app asks the official data services directly. For France, the app sends your coordinates to the French government’s open-data service (data.economie.gouv.fr) to get stations within a radius. For Portugal and Spain, the app only requests the municipality or province, which it works out on your phone.
Show your town name (“Current location · Lisboa”). This uses your phone’s built-in geocoding service (Apple on iPhone, Google on Android). In the Route tab it may also use Photon, a place-search service run by komoot GmbH (Germany).

Maps. On iPhone, maps are drawn by Apple Maps. On Android they are drawn by the Google Maps SDK, which collects device details (model, operating-system version), your IP address, a pseudonymous identifier generated by the SDK, crash reports, and how you move and zoom the map. Google uses this to run and improve its services, under the Google Privacy Policy. The app doesn’t turn on the map’s own “my location” layer.

If you don’t allow location access, the app still works. It shows Lisbon by default, and you can move the map anywhere.

Route planning

When you plan a route, the places you type in the From and To fields and the coordinates of your start and end points go to our routing and place-search providers to calculate the driving route. These providers are Photon by komoot GmbH (Germany) and the public demo routing server of the open-source OSRM project (router.project-osrm.org); the OSRM project does not publish where that server is located. Both use OpenStreetMap data. The app then asks the OctaFuel server for stations along that route, as described above. We don’t keep a history of your routes on any server.

Information stored only on your phone

The following are stored locally on your device, and are never sent to us: favourite stations; price alerts (fuel, target price, radius); vehicle settings (consumption, refuel interval, tank size); language and display preferences; a local history of prices you have seen; and your ad-consent choice. Deleting the app deletes all of this.

Price alerts are checked on your phone whenever the app refreshes prices. When a station matches, the app shows it to you in the app and may show a local notification. We don’t use push notifications, and we keep no notification token.

OctaFuel is free thanks to ads from Adsterra (AD MARKET LIMITED, Christaki Kranou 49, Germasogeia, 4041 Limassol, Cyprus).

Consent comes first. The first time an ad space appears, the app asks whether you allow ads. If you choose “No thanks”, no ad code is loaded and no ads are shown. The app works exactly the same either way.
Apple’s tracking prompt. On iPhone, after you allow ads the app shows Apple’s App Tracking Transparency prompt. Ads load only if you allow ads and allow tracking. If you choose “Ask App Not to Track”, no ad code is loaded and the app works the same.
Private ad view. Ads run in a separate private (“incognito”) web view. It doesn’t share cookies or storage with the rest of the app, and what the ad code stores there is not kept on your phone after the ad view closes.
What Adsterra receives when ads are shown. Adsterra’s ad code runs in a small embedded web view and may receive or use your IP address and an approximate location derived from it; device, operating-system and browser details; cookies or similar identifiers; and which ads were shown or tapped. Adsterra uses this to deliver and measure ads, cap how often you see them, and prevent fraud, and may combine it with information from other apps and websites. Adsterra is an independent controller of this data under its own privacy policy, which says cookie-related data is generally kept for no more than one year.
Ad taps open in your phone’s web browser, outside the app.
Changing your choice. You can withdraw or change your ad consent at any time in the app: open the Alerts tab and tap Privacy & ads. Withdrawing is as easy as agreeing: turn ads off and they stop loading straight away. On iPhone you can also turn off tracking for OctaFuel, or “Allow Apps to Request to Track”, in Settings → Privacy & Security → Tracking.
Hiding or reporting ads. You can hide any ad space with the × button, and report an inappropriate ad with “Report this ad” in the ⋯ menu next to “Sponsored” (or by email at contacto@octafuel.pt). The same menu has “Why am I seeing this ad?”, which explains what information may have been used to choose the ad.
What we don’t pass on. Apart from what Adsterra’s code receives directly, we give Adsterra nothing: not your location coordinates, favourites, alerts, or anything else that identifies you. We do not use the device advertising identifier (IDFA/AAID).

Ad reports

When you report an ad, the app sends one report to the OctaFuel server, where it is stored so that we can review it and block unsuitable ad categories with Adsterra. A report contains only: where the ad was shown in the app and the ad format; the reason you chose (inappropriate, misleading, adult, gambling or other); the platform (iPhone or Android), the app version and the app’s language; and the time of the report. It contains no name, account, device identifier, advertising ID, location or free text, and the app cannot read reports back. We keep reports for 12 months and then delete them.

What we do not collect

OctaFuel has no accounts and no analytics or crash-reporting tools of its own. On Android, the Google Maps SDK collects its own diagnostics (see “Maps” above). The app has no access to your contacts, photos, microphone or camera. It does not collect your name, email, phone number or payment information, and it has no in-app purchases.

This website

octafuel.pt is a static website. It sets no cookies, uses no analytics, advertising or tracking, and loads no third-party scripts or fonts. Like any web server, our hosting provider (Vercel Inc.) processes your IP address and basic request data to deliver the pages and protect the service, and keeps technical logs (IP address, time) for about 1 hour. If you email us, we use your message only to reply.

Service providers and recipients

Recipient	Role	What it receives
Supabase, Inc. (OctaFuel server hosting)	Processor for us	Coordinates of station searches (used only to answer the request, not stored); ad reports; technical request logs (IP address, time). EU region (Ireland)
Vercel Inc. (website hosting)	Processor for us	IP address and request data when you visit this website
komoot GmbH (Photon) and the OSRM routing service	Independent third-party services	Place searches, route and location coordinates, IP address
DGEG (PT), MITECO (ES), French Ministry of the Economy (FR)	Public data sources	Station requests (France: coordinates; PT/ES: area only); IP address
Google (Google Maps SDK, Android only)	Independent controller	Device details, IP address, pseudonymous SDK identifier, crash data, map interactions
Apple / Google	Platform providers	Maps display, place names, navigation hand-off when you tap “Navigate”, local notifications
Adsterra (AD MARKET LIMITED)	Independent controller, only with your consent	See “Advertising” above

We share user data only with these recipients, and only as described here. Our processors are bound by data processing agreements. The independent recipients process data under their own privacy policies and the GDPR. We do not sell personal data.

Location for finding stations and planning routes: to provide the service you request (Art. 6(1)(b) GDPR), and only after you grant location permission on your device.
Technical logs for security and operation: our legitimate interest in keeping the service secure and running (Art. 6(1)(f)).
Ad reports: our legitimate interest in keeping ads in the app appropriate and meeting app-store rules on ad reporting (Art. 6(1)(f)). Reports contain no identifier.
Ads and the cookies or identifiers used for them: your consent (Art. 6(1)(a) GDPR and the ePrivacy rules on device storage). You can withdraw consent at any time; withdrawing does not affect processing that happened before.

How long data is kept

OctaFuel server: does not store your coordinates or searches. The hosting provider keeps technical logs (IP address, time) for 1 day, for security and operations.
Ad reports: 12 months from the report, then deleted automatically by a nightly scheduled job.
Data on your phone: kept until you delete it in the app or uninstall the app.
Adsterra: see its policy (generally no more than one year for cookie-related data).

Your rights

Under the GDPR you have the right to access your data and have it corrected or erased; to restrict or object to processing; to data portability; and to withdraw consent at any time.

We don’t keep information that identifies you, so in most cases we hold nothing we can link to you. We will still answer every request: write to contacto@octafuel.pt. For data Adsterra holds, contact Adsterra directly.

You can also complain to a data protection authority, for example the CNPD in Portugal (www.cnpd.pt), the AEPD in Spain (www.aepd.es) or the CNIL in France (www.cnil.fr).

Children

OctaFuel is meant for drivers and is not directed at children. Children under the age of digital consent in their country (13 in Portugal, 14 in Spain, 15 in France, and up to 16 elsewhere in the EU) cannot give valid consent to ads themselves. We do not knowingly process data from them. If you believe a child has consented to ads in the app, contact us and we will explain how to withdraw that choice and ask Adsterra to delete any related data.

Security

All connections from the app and to this website use encryption (HTTPS/TLS). The OctaFuel server only lets the app read public price data and add ad reports; the app cannot read, change or delete reports. The server has no user accounts and no table that identifies users.

Price data and accuracy

Prices come from official government open-data sources (DGEG for Portugal, MITECO for Spain, prix-carburants.gouv.fr for France) and are refreshed hourly. OctaFuel is independent and not affiliated with or endorsed by any government body. Prices at the pump may differ.

Changes to this policy

If this policy changes, we will update the date at the top. For significant changes, such as a new advertising partner or in-app purchases, we will also tell you in the app.

Contact

Carlos Rodrigues · contacto@octafuel.pt