Last updated: April 2026
Bomba ("we", "our", or "app") is committed to protecting your privacy. This policy explains how we handle your data when you use our application.
Bomba uses your device's location exclusively to show fuel stations near you. Your location:
Fuel price data is obtained from the public APIs of DGEG (Portugal's Directorate-General for Energy and Geology) and the Spanish Ministry for the Ecological Transition. This data is public and contains no personal information.
If you enable the weekly forecast push, the app sends our backend a minimal set of data needed to deliver that notification:
This data does not include name, email, phone number, location, advertising ID, usage history, or any other personal data. It is stored in our backend database (Cloudflare D1) for the sole purpose of sending you the right notification, in the right language, on Friday/Saturday/Sunday.
You can opt out at any time by turning notifications off in the app's Settings. When you do, the app immediately asks the server to delete your registration.
Bomba does not collect, store, or transmit:
We use the public DGEG and Spanish Ministry APIs to obtain fuel prices. No personal data is shared with these services.
If you enable notifications, we use Google's Firebase Cloud Messaging service to deliver them to your device. Google issues a technical token for your device (described above); Google's privacy policy applies to this token: policies.google.com/privacy.
Our backend (which checks the weekly forecast and dispatches the notification) runs on Cloudflare Workers. Cloudflare transiently sees your request's IP address — as any HTTP request on the Internet does — and has its own privacy policy: cloudflare.com/privacypolicy. We do not retain IP addresses in our application logs.
The app shows ads served by Google AdMob. EU users see non-personalised ads by default. AdMob processes data under Google's privacy policy.
When you choose to navigate to a station, the app opens Apple Maps or Google Maps. Use of these services is subject to their respective privacy policies.
All preferences and settings are stored locally on your device. The only exception is when you enable push notifications — in that case the technical token and the minimal preferences described above are kept on our Cloudflare backend until you disable notifications or uninstall the app.
All communication between the app and our backend uses HTTPS. Backend access is protected by a shared secret. The personal data we collect is minimal and is not shared with third parties for commercial purposes.
Bomba is not directed at children under 13 and we do not knowingly collect data from users in that age range.
As a user in the European Union you have the right to access, correct, or delete the data we hold about your device. You can exercise these rights by turning notifications off in the app (this automatically deletes the record) or by contacting us at the email below.
We may update this policy periodically. Any changes will be posted on this page with a revised update date.
If you have questions about this privacy policy, contact us at: