Spain's COVID tracing app tries to balance public health with privacy