1. Introduction
This Privacy Policy explains what information the TravelSG iOS application and its accompanying extensions (the Apple Watch app, home-screen widgets, Live Activities and Siri intents — together, the “App”) collect, how that information is used, and the choices available to you.
TravelSG surfaces Singapore public transport information — bus arrivals, MRT crowd levels, car park availability, traffic cameras and traffic incidents. It is built on publicly available transport data and is not affiliated with, endorsed by, or operated on behalf of the Land Transport Authority of Singapore or any government body.
By downloading or using the App, you agree to the practices described in this Privacy Policy.
2. Who is responsible for your data
The data controller for the purposes of applicable data-protection law is:
- BaBaSaMa
- Contact: long@babasama.com
If you are in the United Kingdom or the European Economic Area, we process your personal data in accordance with the UK GDPR and the Data Protection Act 2018 (or the EU GDPR, as applicable). If you are in Singapore, we handle personal data in accordance with the Personal Data Protection Act 2012 (PDPA).
3. Information we collect
We have designed TravelSG to collect as little personal information as possible. The App does not require you to create an account, and we do not ask for your name, email address or any contact details to use it.
3.1 Location data
With your permission, the App accesses your device’s location to:
- show your position on the map;
- find and display the bus stops, stations and car parks nearest to you;
- power the bus-journey Live Activity; and
- alert you (including via an alarm) when you are approaching your destination stop.
Depending on the feature you use, the App may request “While Using the App” or “Always” location access. “Always” access is only requested to keep destination alerts and the bus-journey Live Activity working while the App is in the background.
Your location is used on your device and sent to mapping and transport services only as needed to return nearby results (see Section 5). We do not store a history of your location on our servers, and we do not use your location for advertising or profiling.
You can change or withdraw location permission at any time in iOS Settings → Privacy & Security → Location Services → TravelSG.
3.2 Information you save in the App (“Favourites”)
When you favourite a bus stop, bus service or location, that preference is stored locally on your device (and synced across your own devices through Apple’s iCloud where you have enabled it). We do not collect your favourites on our own servers.
3.3 Notifications and push tokens
If you enable notifications, the App registers with Apple Push Notification service and Firebase Cloud Messaging to deliver alerts such as destination-arrival reminders and service messages. This involves processing a push token that identifies your device installation — it does not identify you personally.
You can disable notifications at any time in iOS Settings → Notifications → TravelSG.
3.4 Diagnostics and crash reports
To keep the App stable, we use Firebase Crashlytics to collect crash reports and diagnostic information when the App stops unexpectedly. This may include the device model, operating-system version, the App version, and technical details about the crash. This information is used solely to diagnose and fix problems and is not used to identify you.
3.5 Subscription information (TravelSG Pro)
TravelSG offers an optional paid subscription, TravelSG Pro, sold through Apple’s In-App Purchase. Payments are handled entirely by Apple — we never receive or store your payment-card details. We receive from Apple only the information needed to confirm your subscription status (for example, whether an active subscription or free trial exists). Apple’s handling of your purchase is governed by Apple’s own privacy policy.
3.6 Information we do not collect
- We do not use third-party advertising or marketing analytics SDKs.
- We do not sell or rent your personal data to anyone.
- We do not build advertising profiles about you.
4. How we use information
We use the limited information described above to:
| Purpose | Information used | Legal basis (UK/EU GDPR) |
|---|---|---|
| Show nearby stops, stations, car parks and your position on the map | Location | Consent |
| Deliver destination alerts and the bus-journey Live Activity | Location, push token | Consent |
| Send service and arrival notifications | Push token | Consent |
| Diagnose crashes and improve reliability | Diagnostic/crash data | Legitimate interests |
| Provide and manage TravelSG Pro | Subscription status (from Apple) | Performance of a contract |
Where we rely on consent, you may withdraw it at any time through your device settings, as described in this policy.
5. Third-party services and data sources
The App connects to the following third-party services to function. Your use of the App may result in information (such as a location query) being processed by these providers under their own terms and privacy policies:
- LTA DataMall (Land Transport Authority of Singapore) — bus, train, car park and traffic data.
- OneMap (Singapore Land Authority) — maps, geocoding and routing.
- Apple MapKit / Apple Maps — map display and location services.
- Google Firebase (Realtime Database, Cloud Firestore, Cloud Functions, Cloud Messaging and Crashlytics) — to deliver reference transport data, push notifications and crash diagnostics.
- Apple App Store / In-App Purchase — to process TravelSG Pro subscriptions.
We do not control, and are not responsible for, the privacy practices of these third parties. We encourage you to review their respective privacy policies.
6. Data sharing
We do not share your personal data with third parties except:
- with the service providers listed in Section 5, strictly to operate the App;
- where required by law, regulation or valid legal process; or
- to protect the rights, safety or property of our users or others.
7. Data retention
- Favourites and in-app preferences remain on your device until you delete them or uninstall the App.
- Crash diagnostics are retained by Firebase Crashlytics for a limited period in accordance with Google’s policies (typically up to 90 days).
- Push tokens are retained only for as long as needed to deliver notifications to your installation.
8. International data transfers
Some of our service providers (including Google Firebase, which we host in the Asia-South-East region) may process data on servers located outside your country, including outside the United Kingdom and the European Economic Area. Where such transfers occur, the relevant providers implement safeguards (such as Standard Contractual Clauses) intended to protect your data.
9. Children’s privacy
The App is not directed at children under the age of 13, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.
10. Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you;
- request correction or deletion of your personal data;
- object to or restrict certain processing;
- withdraw consent at any time; and
- lodge a complaint with a supervisory authority (in the UK, the Information Commissioner’s Office; in Singapore, the Personal Data Protection Commission).
Because the App is designed to operate without accounts and stores your preferences on your own device, you can exercise many of these rights directly — for example by deleting your favourites or uninstalling the App. For any other request, please contact us at long@babasama.com.
11. Security
We take reasonable technical and organisational measures to protect information, including using encrypted connections (HTTPS) for network requests and relying on Apple’s and Google’s platform security. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page and, where appropriate, provide additional notice within the App. Your continued use of the App after an update constitutes acceptance of the revised policy.
13. Contact us
If you have any questions about this Privacy Policy or how your information is handled, please contact:
- BaBaSaMa
- long@babasama.com