Skip to main content
Skip to main content

Privacy Policy

Last updated: 29 January 2026

Gombak BusKaki ("we", "us", or "our") is committed to protecting your personal data in accordance with the Singapore Personal Data Protection Act 2012 (PDPA). This policy explains how we collect, use, disclose, and protect your personal data when you use our shuttle bus tracking application.

What Data We Collect

For Public Users (no account required)

  • Device information (browser type, operating system, screen size)
  • Approximate location (only when you tap "Find my location" on the map)
  • Usage patterns (pages visited, features used, button clicks)
  • Session data for error diagnosis (when errors occur)

For Alert Subscribers

  • Push notification token (device identifier for sending alerts)
  • Alert preferences (selected stops, timing preferences, active days)

For Drivers (authenticated users)

  • Email address and authentication credentials
  • GPS location data during active shifts
  • Shift history (start/end times, breaks, status changes)

How We Use Your Data

  • Display real-time bus locations on the map
  • Send push notifications when buses approach your selected stops
  • Improve app performance and fix errors
  • Analyze usage patterns to enhance features
  • Ensure service reliability and security

Third-Party Services

We use the following third-party services to operate this application:

Supabase

Database and authentication provider. Stores driver accounts, alert preferences, and vehicle location data. Data is hosted in Singapore.

Firebase Cloud Messaging (Google)

Push notification delivery service by Google. Receives device tokens to send bus arrival alerts. Subject to Google's privacy policy.

PostHog

Analytics platform for understanding app usage. Collects anonymized usage data with your consent. You can opt out via our cookie banner. Data hosted in US.

Sentry

Error monitoring service. Captures error details and session replays when errors occur to help us fix issues quickly. Data hosted in US.

MapTiler

Map tile provider. May receive your IP address when loading map tiles. Does not receive your precise location.

Vercel

Web hosting platform. Serves the application globally via edge network. May process request metadata (IP addresses, headers) for delivery.

Cross-Border Data Transfer: Some services (PostHog, Sentry, Firebase, Vercel) process data outside Singapore. We ensure these providers maintain data protection standards comparable to PDPA requirements.

Cookies and Tracking

We use cookies and similar technologies to operate and improve the app:

Essential Cookies

Required for basic functionality such as language preferences and authentication. Cannot be disabled.

Analytics Cookies (opt-in)

Used to understand how you use the app. You can accept or reject these via the cookie banner. We respect your choice.

Data Retention

  • Your location: We do not store your location data
  • Alert subscriptions: Kept until you delete them or unsubscribe
  • Driver shift history: Retained indefinitely for operational records
  • Analytics data: Retained for 12 months, then aggregated or deleted

Your Rights Under PDPA

Under the Singapore Personal Data Protection Act, you have the following rights:

  • Access: Request a copy of your personal data we hold
  • Correction: Request correction of inaccurate or incomplete data
  • Withdrawal of Consent: Withdraw consent for data collection at any time
  • Deletion: Request deletion of your personal data (subject to legal retention requirements)

To exercise these rights, please contact us using the details below. We will respond within 30 days.

Data Protection Contact

For questions about this privacy policy or our data practices, please contact us. Note: A formal Data Protection Officer (DPO) has not yet been registered with PDPC as we are a community project with minimal personal data collection.

Privacy Contact

Email: me@felixisaac.dev

Updates to This Policy

We may update this privacy policy from time to time. When we make significant changes, we will notify you through the app or by posting a notice on this page. The "Last updated" date at the top indicates when changes were last made.

Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or your personal data, please contact us:

Email: me@felixisaac.dev

Website: felixisaac.dev