busdeckSGP
Privacy Policy
Last updated 29 August 2026 · Applies to the BusDeck apps for iOS and Android
The short version. BusDeck stores your account and the bus stops you pin, so your deck follows you between devices. Your location never leaves your phone. You can delete your account, and everything attached to it, from inside the app.
Your location stays on your device
BusDeck asks for location so it can show the stops nearest you and point the map at where you are. That work happens entirely on your phone: the app downloads the full list of Singapore bus stops and works out which are closest locally.
Your coordinates are never sent to our servers. When BusDeck asks for arrival times, it sends only a bus stop code — never a position, and never a history of where you have been. We could not reconstruct your movements if we wanted to, because we never receive them.
You can refuse or revoke the permission in your phone's settings. The app still works: search and pinned stops continue to function, only the nearby list and the map's you-are-here go quiet.
What we store
| Data | Why |
|---|---|
| Email address | To create your account, sign you in, and send verification and password-reset codes. |
| Password | Sign-in. Stored only as a salted hash — we never see or keep the password itself. |
| Display name and avatar | Shown on your profile. Both are chosen by you; the avatar is one of our illustrations, not a photo. |
| Pinned stops and buses | So your deck and widgets follow your account to a new phone. |
| Feedback you send | Your message, plus the app version and which phone platform you are on, so a report can be acted on. Only sent when you tap Send. |
| Usage events | Which screens are opened, which stops are viewed and for how long, whether search is used, when buses are pinned. Used to decide what to build next. |
Usage events are tied to your account identifier and email so we can tell one person's session from another's. They do not contain your location.
What we don't collect
- Location history. Not stored, not transmitted, not derivable from what we hold.
- Contacts, photos, camera or microphone. BusDeck never asks for any of them.
- Advertising identifiers. BusDeck does not use your phone's advertising identifier and does not track you across other companies' apps or websites.
Who else is involved
BusDeck relies on a small number of service providers, each doing one job on our behalf and none permitted to use your data for their own purposes:
- Hosting and database providers — store your account, pinned stops and feedback, and run the service that fetches arrival times. These see ordinary web request data such as IP addresses.
- An analytics provider — receives the usage events described above. Its servers are outside Singapore, in the United States.
- An email provider — delivers your verification and password-reset codes.
- Apple and Google — involved only if you choose Sign in with Apple or Google. They confirm who you are; we receive an identifier and, unless you choose to hide it, an email address.
Arrival times come from LTA DataMall, Singapore's official transport data source. Those requests are made by our server rather than your phone, so your device is never exposed to it and it learns nothing about you.
We do not sell your personal data. If a future version of BusDeck introduces new recipients of your data, this page will say so and the app will tell you before it takes effect.
Deleting your account
Open BusDeck, go to Profile → Account settings → Delete account, and confirm twice. That erases your account, your pinned stops and widgets, and any feedback you sent, immediately and permanently. It is not a request queue and there is no waiting period — the deletion happens as you tap.
Logging out instead leaves your account intact and simply signs the device out.
If you cannot reach the in-app control, email privacy@busdeck.app from the address on the account and we will delete it for you.
How long we keep things
Account data and pins are kept while the account exists, and are removed when you delete it. Feedback is deleted with the account. Usage events are retained for up to 12 months and then discarded. Server request logs are short-lived, on the order of days.
Children
BusDeck is a public transport timetable and is not directed at children. We do not knowingly collect data from anyone under 13. If you believe a child has created an account, email us and we will remove it.
Your rights
Singapore's Personal Data Protection Act, and the GDPR if you are in the UK or EU, give you the right to see what we hold about you, correct it, and have it erased. Deletion is built into the app; for access or correction, email privacy@busdeck.app and we will respond within 30 days.
Changes
If this policy changes in a way that affects what we collect or who receives it, we will update the date at the top and say so in the app before the change takes effect.
Contact
Questions about privacy: privacy@busdeck.app. General feedback is easiest through Profile → Send feedback in the app, which reaches us with the context needed to act on it.