Privacy Policy
Last updated 7 September 2026 · Applies to the BusDeck website and apps for iOS and Android
The short version. BusDeck stores your account and the bus stops you pin, so your deck follows you between devices. Your exact location never leaves your phone. When you open the app or tap refresh, BusDeck records which bus stop you are nearest to, so we can see where the app is used and, in future, offer promotions near you. It never records where you go in between. You can delete your account and its profile data from inside the app. Historical usage events may be kept without an active account profile for the limited period described below.
Website waitlist
If you join the website waitlist, we store your email address, signup time, and the version of the launch-update notice you agreed to in a separate Cloudflare-hosted database. We use this list to send BusDeck launch updates. Joining does not create a BusDeck app account, and the waitlist is not linked to your app activity.
You can withdraw and request removal at any time by emailing [email protected] from the address you used to join. We remove waitlist data when it is no longer needed for launch updates. Cloudflare processes requests to operate and protect the service; we do not store your IP address in the waitlist database.
Your exact location stays on your device
BusDeck asks for location so it can show the stops nearest you and point the map at where you are. That work happens entirely on your phone: the app downloads the full list of Singapore bus stops and works out which are closest locally.
Your coordinates are never sent to our servers. When BusDeck asks for arrival times, it sends only a bus stop code — never a position.
What we do record. When you open the app, and when you tap refresh, BusDeck notes the nearest bus stop (its code and name, and roughly how far away it is, to the nearest 50 metres) and a one-kilometre map square. That is sent as part of the usage event, tied to your account while it exists. We use it to see where BusDeck is opened and which stops matter most, and we intend to use it to offer location-based promotions or coupons in future. We do not record anything while the app sits open or while you travel between those moments, so we hold a list of stops you were near when you acted, not a trail of where you went.
You can refuse or revoke the permission in your phone's settings. The app still works: search and pinned stops continue to function, only the nearby list, the map's you-are-here, and the nearest-stop note in usage events go quiet.
What we store
| Data | Why |
|---|---|
| Email address | To create your account, sign you in, and send verification and password-reset codes. |
| Password | Sign-in. Stored only as a salted hash — we never see or keep the password itself. |
| Display name and avatar | Shown on your profile. Both are chosen by you; the avatar is one of our illustrations, not a photo. |
| Pinned stops and buses | So your deck and widgets follow your account to a new phone. |
| Feedback you send | Your message, plus the app version and which phone platform you are on, so a report can be acted on. Only sent when you tap Send. |
| Usage events | Which screens are opened, which stops are viewed and for how long, whether search is used, when buses are pinned, when arrivals are refreshed, and the nearest stop and one-kilometre square when the app is opened or refreshed. Used to decide what to build next, and in future to choose location-based promotions. |
While your account exists, usage events use an internal account identifier so we can understand sessions across the app. Current versions of BusDeck do not send your email address, and never send your coordinates, as analytics event properties — only the nearest-stop note described above.
What we don't collect
- A location trail. No background position, no continuous tracking. The nearest-stop note exists only for the moments you open or refresh the app.
- Contacts, photos, camera or microphone. BusDeck never asks for any of them.
- Advertising identifiers. BusDeck does not use your phone's advertising identifier and does not track you across other companies' apps or websites.
Who else is involved
BusDeck relies on a small number of service providers, each doing one job on our behalf and none permitted to use your data for their own purposes:
- Hosting and database providers — store your account, pinned stops and feedback, and run the service that fetches arrival times. These see ordinary web request data such as IP addresses.
- An analytics provider — receives the usage events described above. Its servers are outside Singapore, in the United States.
- An email provider — delivers your verification and password-reset codes.
- Apple and Google — involved only if you choose Sign in with Apple or Google. They confirm who you are; we receive an identifier and, unless you choose to hide it, an email address.
Arrival times come from LTA DataMall, Singapore's official transport data source. Those requests are made by our server rather than your phone, so your device is never exposed to it and it learns nothing about you.
We do not sell your personal data. If a future version of BusDeck introduces new recipients of your data, this page will say so and the app will tell you before it takes effect.
Deleting your account
Open BusDeck, go to Profile → Account settings → Delete account, and confirm twice. That permanently erases your account, profile, pinned stops, widgets and any feedback you sent. If you used Sign in with Apple, BusDeck also asks Apple to revoke that authorization when a revocation credential is available.
We remove the analytics person profile, including the email stored on that profile, and recordings associated with the account. We retain historical usage events and an unlinkable account-deletion event so we can measure use of the service. Historical events retain an internal identifier and events recorded by an earlier app version may still include the email property that version sent, but they no longer have an active BusDeck account or analytics person profile attached to them. They expire within the 12-month period below.
Logging out instead leaves your account intact and simply signs the device out.
If you cannot reach the in-app control, email [email protected] from the address on the account and we will delete it for you.
How long we keep things
Account data and pins are kept while the account exists, and are removed when you delete it. Feedback is deleted with the account. Usage events, including historical events retained without an active account profile after deletion, are kept for up to 12 months and then discarded. Server request logs are short-lived, on the order of days.
Who BusDeck is for
BusDeck is a live bus and train arrivals app for everyone. It isn't designed for children, and we don't knowingly collect details from anyone under 13. If you think a child has set up an account, let us know at [email protected] and we'll remove it.
Your rights
Singapore's Personal Data Protection Act gives you rights to access and correct your personal data and limits how long it may be retained. Account deletion is built into the app as described above. For access, correction, full erasure where applicable, or another privacy request, email [email protected] and we will respond within 30 days. If the law where you live gives you additional rights, you can use the same address to exercise them.
Changes
If this policy changes in a way that affects what we collect or who receives it, we will update the date at the top and say so in the app before the change takes effect.
Contact
Questions about privacy: [email protected]. General feedback is easiest through Profile → Send feedback in the app, which reaches us with the context needed to act on it.