Privacy Policy — Metrozinho

Last updated: 12 September 2026 · Version v1.6 (English edition; the Portuguese version is the reference text)

In short: Metrozinho works without an account — we never ask for your name or e-mail and there is no sign-up. Most data (recent routes, preferences) stays only on your device. Your location is used to suggest nearby stations and, if you ask for it, bus lines to the station — with no link to your identity and no storage beyond short-lived technical logs.

1. Who we are

This Policy describes how Metrozinho (metrozinho.com.br and the Metrozinho São Paulo and Metrozinho Lisbon mobile apps), operated by Infinniti IA, Brazilian company registration (CNPJ) 59.584.600/0001-97 ("we"), handles personal data, in compliance with the Brazilian General Data Protection Law (Law 13,709/2018, "LGPD") and, for users in the European Union, the General Data Protection Regulation (GDPR). Data Protection Officer: to be appointed by Infinniti — adm@infinniti.com.br.

2. Nature of the service

Metrozinho is a route planner and information source about metropolitan rail transport: in São Paulo (Metrô, CPTM and concession lines) and in Lisbon (Metropolitano de Lisboa). It is an independent project with no affiliation, sponsorship or endorsement from Companhia do Metropolitano de São Paulo (Metrô), CPTM, SPTrans, ViaQuatro, ViaMobilidade, Motiva, the Government of the State of São Paulo, Metropolitano de Lisboa, E.P.E., Carris, TML/navegante or the Portuguese Government. "Metro" is used in its descriptive sense for the means of transport.

3. Data we process

No account: we do not collect name, e-mail, phone number or documents, and there is no login.
Location (optional): if you allow it, we use your GPS position to suggest the nearest stations — this is computed on your device. In door-to-door planning (São Paulo), when the walk to the station is long, the coordinates of the starting point are sent to our server only to find direct bus lines to the station and their arrival predictions. The request is not linked to your identity and is not stored beyond short-lived technical logs.
Typed addresses: when you search for an address, the typed text goes through our server and is forwarded to a geocoding service — the public Nominatim/OpenStreetMap service (OpenStreetMap Foundation, United Kingdom) and, when needed, Google Geocoding (Google LLC, USA) — only to locate the point on the map. We keep a short technical cache (about 10 minutes) of the searched text, with no link to who searched.
Live trip (optional): when you share a trip, we create a temporary session containing the chosen route and the departure/arrival times you entered (no GPS). Whoever receives the link sees the position estimated from travel time on the map — it is not real tracking. Anyone with the link can follow the trip; share it only with people you trust. The session expires automatically.
Local preferences: recent routes, first-trip mode and settings stay in your device or browser storage. You delete them by clearing the app/site data.
Technical data: server logs (IP address, date and resource accessed) for security and stability, kept for a short period. To enforce the daily limits of the assistant's free plan we keep a usage counter associated with the IP address — without message content — deleted automatically after 30 days without use.
Metrozinho assistant (optional): messages you send to the assistant are interpreted on the device whenever possible. When needed, the message text is processed by an artificial-intelligence service — Google Gemini (Google LLC, USA) and, as a fallback, OpenAI (OpenAI, L.L.C., USA) — only to understand the request (e.g. identify origin and destination), without any identifier of yours. If you use voice, transcription is done by your device's or browser's speech-recognition service, which may use the vendor's own servers (e.g. Google, in Chrome); the audio never goes through our servers and only the transcribed text moves on. Conversations are not stored on our servers. Avoid including personal data in messages; the assistant does not need it. Daily usage limits apply.
Advertising: in the apps we use Google AdMob configured for non-personalized ads by default; in the European Union, Google's consent form (UMP) is shown and ads are personalized only with your consent, which you can change at any time in the app. On the website we use Google AdSense, which may use cookies (Google LLC, USA). Learn more at How Google uses data in ads.
Premium subscription: payment is processed by the App Store (Apple) or Google Play (Google); we never receive your payment data. The subscriber is recognized by the store itself, with no Metrozinho account.
Service alerts (optional, São Paulo app): if you enable notifications, we store a technical notification identifier of your device (push token), not linked to name, account or location, used exclusively to send alerts about stopped or restored lines. Delivery is made through the Expo push service (Expo, Inc., USA) and the Apple (APNs) and Google (FCM) notification services. When you turn alerts off in the app, the identifier is removed from our servers; inactive identifiers (e.g. app uninstalled) are discarded automatically.

4. Purposes and legal bases

We process data to: calculate routes and suggest nearby stations; interpret messages sent to the Metrozinho assistant; operate trip sharing; send the service alerts you request; display the ads that keep the service free; and ensure security and stability. Legal bases (LGPD art. 7 and GDPR art. 6): performance of the requested service, legitimate interest and, for location, service alerts and personalized ads, your consent — which you can withdraw at any time in your device permissions, by turning alerts off, or in the app's privacy options.

5. Sharing and processors

We do not sell data. We share only what is necessary with service processors: Google LLC (AdMob/AdSense, Gemini AI for the assistant, geocoding and FCM notifications, USA), OpenAI, L.L.C. (fallback AI for the assistant, USA), Apple Inc. (app store and APNs notifications, USA), Google (app store, USA), Expo, Inc. (notification delivery, USA), OpenStreetMap Foundation (geocoding, United Kingdom) and hosting by Hostinger International Ltd. Queries to status, fare and bus-arrival sources (Metrô-SP, CPTM, SPTrans/Olho Vivo, TIC Trens, Metropolitano de Lisboa) are normally made by our server per line or stop and include no user data. In the apps, if our server is unavailable, the status query may be made directly from your device to the public sources — in that case the source receives your device's technical connection (such as the IP address), just as when visiting its website. We may share data with authorities when required by law.

6. International transfers

When processors handle data outside Brazil or the European Union (advertising, geocoding, hosting), the transfer follows LGPD arts. 33–36 and GDPR Chapter V and adopts appropriate safeguards.

7. Retention

Geocoding cache: minutes. Live-trip sessions: expire automatically. Technical logs: short period, for security only. Preferences: stay on your device and under your control. Notification token: kept while alerts are enabled; removed when you turn them off or when it becomes invalid (app uninstalled).

8. Your rights

Under LGPD art. 18 and GDPR arts. 15–22 you may request: confirmation and access; rectification; anonymization, blocking or erasure; portability; information about sharing; objection; and withdrawal of consent. EU users may also lodge a complaint with their local supervisory authority. To exercise your rights: adm@infinniti.com.br.

9. Children

Metrozinho is a public-utility service suitable for all audiences. We do not collect personal data from any user and ads in the apps are non-personalized unless you consent otherwise.

10. Security

We adopt technical and organizational measures to protect data, including encrypted traffic (HTTPS) and server access control. No system is fully immune to incidents; in the event of a relevant incident we will follow the notification duties of the LGPD and the GDPR.

11. Changes to this Policy

We may update this Policy; relevant changes will be announced on the website and in the apps. The date of the last update appears at the top. In case of discrepancy, the Portuguese version prevails.

12. Contact

Questions about privacy and personal data: adm@infinniti.com.br
Infinniti IA — Rua Verbo Divino, 2001 — Conj. 305, Chácara Santo Antônio (Zona Sul), São Paulo/SP, Brazil, CEP 04719-002.