Privacy Policy

1.1Location

1.2Device identifier

1.3App preferences, favourites, and saved journeys

1.4Commute Feed posts (user-generated content)

1.5Push-notification token and subscriptions

1.6Live Activities: Alight Reminder and Track Arrival

1.7Crash and error reports

1.8Usage analytics

1.9What we do not collect

• Your name, email address, phone number, photos, contacts, microphone, or health data. (The bus stop scanner uses the camera live on your device without capturing or storing anything; see §1.11.)
• Your location while the App and widget are not in use (the only exception is during an active Alight Reminder, and even then your location stays on your device; see §1.1).
• Your search queries by name, code, or service number. These are processed locally on your device against bus-stop and bus-service data already on the device. (A postal-code search is the one exception; see §1.10.)
• Browsing or usage data from other apps. We do not use the App Tracking Transparency (ATT) tracking permission.
• Any payment information. Bustro is free and contains no in-app purchases or advertising.

We do not send marketing or commercial electronic messages. Push notifications carry only the operational alerts and Commute Feed updates you have opted in to, and Bustro does not engage in any activity subject to the Spam Control Act 2007.

1.10Postal code search and search history

1.11Camera (bus stop scanner)

Bustro uses Apple's on-device Foundation Models (iOS 26+) to generate the short transit-mood headline shown above the bus-stop list. Generation runs entirely on your device. Weather context used to seed the prompt is never sent to Apple, to us, or to any third party. If on-device generation fails for any reason, a deterministic scripted fallback runs locally instead.

We use the data described in §1 only to:

• Show bus stops near you, calculate walking distances, and power the widget;
• Read a bus stop's QR code or printed stop number through the camera, on your device, to open that stop (§1.11);
• Run the Alight Reminders and arrival trackers you start, including pushing live countdown updates and alerts to your Lock Screen (§1.6);
• Save your favourites and journeys and sync them across your Apple devices via iCloud;
• Display, moderate, edit, and delete Commute Feed content you submit;
• Deliver traffic-alert and Commute Feed notification pushes you have opted in to;
• Generate crash reports and usage analytics to fix bugs and improve features;
• Decide which version of the App to recommend (Firebase Remote Config gates an in-app "update available" prompt; it does not personalise content);
• Comply with applicable law and respond to lawful requests from authorities.

We take reasonable steps to keep the personal data we hold about you accurate and complete (PDPA §23), and you may request correction of any inaccurate data at any time (§6).

We use the following third-party services. Each has its own privacy practices.

Cross-border data transfers (PDPA §26). Firestore records (Commute Feed content, push-routing records, and Live Activity tokens) are stored in Google's asia-southeast1 (Singapore) region. Firebase Analytics, Crashlytics, Cloud Messaging, and Remote Config are processed by Google LLC on infrastructure that may be in the United States or European Union. Google's data-protection terms (https://firebase.google.com/support/privacy) bind Google to provide a standard of protection comparable to what the PDPA requires; we rely on those terms for compliance with PDPA Section 26.

We do not sell, rent, or trade your information. We do not share data with advertisers, data brokers, or analytics providers other than those listed above.

We may disclose information when required to do so by Singapore law, by a valid order of a Singapore court, or by a Singapore regulator or law-enforcement authority acting within its statutory powers (including the Personal Data Protection Commission, the Infocomm Media Development Authority, and the Singapore Police Force under the Criminal Procedure Code), or to protect the rights, property, or safety of users, the public, or us. Where the law permits, we will notify the affected user before disclosing their information.

Under the PDPA you have the right to:

• Access: request a copy of personal data we hold about you (Commute Feed posts tied to your device, your push token, your subscription list). PDPA §21.
• Correction: request that inaccurate data be corrected. PDPA §22.
• Withdraw consent at any time, which (subject to legal retention obligations) will result in deletion of your data. PDPA §16. See §7 below for the practical ways to do this.
• Lodge a complaint with the Personal Data Protection Commission of Singapore at https://www.pdpc.gov.sg.

To exercise any right, email hi@bustro.app. You will need to provide the device identifier on which you used the App so we can locate the relevant data. We cannot honour requests we cannot tie to a record. We aim to respond within 30 days.

If you are a resident of a jurisdiction with its own data-protection regime and would like to exercise rights granted by your local law, email us at the same address. We will assess such requests in good faith, even where the local regime does not formally apply to us.

You can withdraw consent at any time by:

1. Revoking Location permission in iOS Settings;
2. Revoking Notifications permission in iOS Settings;
3. Revoking Camera permission in iOS Settings, which disables the bus stop scanner;
4. Disabling iCloud sync for Bustro;
5. Deleting your Commute Feed posts from within the App;
6. Stopping an active Alight Reminder or arrival tracker, which deletes its push-token record;
7. Deleting the App, which removes the device identifier and ends push delivery;
8. Emailing hi@bustro.app to request server-side deletion of any remaining data.

We protect your data using:

• iOS sandboxing and Keychain protection on your device;
• HTTPS/TLS for all network communication;
• Firebase's encryption at rest and in transit;
• Server-side admin review on Commute Feed submissions before publication;
• The principle of least data: we do not collect data we do not need.

No system is perfectly secure. If we become aware of a data breach affecting your personal data, we will notify the Personal Data Protection Commission of Singapore as soon as practicable, and in any case no later than 3 calendar days after we determine that the breach (a) is of a significant scale (affecting 500 or more individuals) or (b) results in, or is likely to result in, significant harm to an affected individual, in accordance with PDPA Part VIA (Data Breach Notification). Where a breach is likely to result in significant harm to you, we will also notify you in a reasonable manner.

Bustro is a general-audience public-transit utility, rated 4+ on the App Store. It is designed to be useful to Singapore students and young commuters who rely on buses to get to and from school, and there is no minimum age for using it for its primary purpose: checking bus arrival times, viewing stops, services, and routes, saving favourites, using the widget, viewing weather and traffic information, or viewing the Commute Feed.

For posting in the Commute Feed, you must be at least 13 years old. Every Commute Feed submission is reviewed and approved by a member of the Bustro team before it becomes visible to other users. This human review is part of our child-safety and content-quality controls, so that no harmful, identifying, or otherwise inappropriate content (whether about a young person or by one) is published. We may decline submissions and disable posting from a device if we have reason to believe the submitter is under 13.

If you are a parent or guardian and believe a child under 13 has submitted content, email hi@bustro.app and we will remove it.

In accordance with the Singapore Open Data Licence v1.0:

Contains information from the Singapore Government data.gov.sg APIs, made available under the Singapore Open Data Licence version 1.0.

We also acknowledge Singapore LTA DataMall as the source of bus arrival, bus stop, and bus service information.

We may update this Policy. The "Last updated" date at the top reflects the most recent revision. Material changes will be highlighted in-app or via push notification at least 14 days before they take effect, except where an immediate change is required by law or to address a security issue. Continued use of the App after the effective date constitutes acceptance.

• General enquiries: hi@bustro.app
• Data Protection Officer: hi@bustro.app (mark "DPO" in the subject line)
• Privacy or content reports: hi@bustro.app

We aim to acknowledge most enquiries within 7 days, and to formally respond to data-rights requests within 30 days.

This Policy is designed to comply with:

• Singapore Personal Data Protection Act 2012 (PDPA), including the Data Protection Provisions, Section 26 (transfer limitation), and Part VIA (data-breach notification);
• Apple App Store Review Guidelines, including 5.1 (Data Collection and Storage) and 1.2 (User-Generated Content);
• Apple App Privacy Nutrition Label disclosure requirements.