Privacy Policy

Effective date: 23 October 2026

Where Is The Bus (the "app") is a bus map with no account. This policy describes exactly what the app does with data, and what it deliberately does not do.

1. The short version

We collect no personal data. There are no accounts, no ads and no analytics or tracking. Your GPS coordinates never leave your phone. The app only sends a city code and a route number to our own server to fetch public bus data.

2. Data we do not collect

• Name, email address, phone number or any other contact details (there is no sign-up or sign-in).
• Advertising identifiers, cross-app tracking or behavioural analytics.
• Contacts, photos, microphone or camera.
• Your GPS coordinates. They are used on the device only: never sent to a server, never written to a database, never written to logs, never stored in the app's storage.

3. Location permission

• The app requests foreground location only, while in use. No background location, no "Always" permission.
• It is used for two things: to centre the map on you, and to work out which city you are in so the right city's buses are queried.
• Location stops immediately when the app goes to the background or the screen locks.
• You can deny location. The map then opens at the city centre and every other feature still works.

4. What is sent to the server

The app only calls our own servers (bus-tdx-bff and bus-static-bff, deployed as Supabase Edge Functions) with:

• A city code and a route number — a city code plus a route such as "300" — to fetch vehicle positions and arrival estimates for that route.
• A route identifier, to fetch the route shape and its stop list.
• App version and an environment flag, to decide whether to prompt for an update and to debug version-specific problems.

These requests contain no GPS coordinates, no device identifier and nothing that can be tied to a person, and we do not create user records. The server keeps technical logs (request time, source IP, error messages) for operation and debugging; they are not linked to any identity and are deleted automatically after a fixed period. The server also caches public bus data (vehicle positions, arrival estimates, routes and stops) to reduce load on the upstream source; those caches contain no personal data.

5. Data stored on your phone

• Pinned routes, route shapes, stop lists and the last arrival times are kept in a local cache database (Hive) so routes can be viewed offline.
• Interface preferences — theme (light/dark), language, landmark and street-name toggles, last map position — are kept in local preferences (SharedPreferences).
• All of it stays on your phone. Nothing is uploaded and there is no cross-device sync. Deleting the app deletes it all.

6. No ads, no tracking, no account

• There are no ads in the app and no third-party advertising or analytics SDK.
• There is no account system: nothing to register, sign in to, or fill in.
• No data is used for marketing or analytics, and none is sold or shared with third parties.

7. This website

This website uses Cloudflare Web Analytics to count page views. It sets no cookies and does no cross-site tracking; we only see aggregate page views and the country of origin, never individual visitors. If you email us through the link on this site, we receive your email address and message and use them only to reply.

8. Third-party services and data sources

• TDX (Transport Data eXchange), operated by Taiwan's Ministry of Transportation and Communications: the source of bus positions, arrival estimates and route and stop data. Our server queries TDX and passes the results to the app.
• OpenFreeMap: map tiles, with data from OpenStreetMap.
• Cloud hosting provider: hosts our servers and this website.

No personal data is provided to any of them.

9. Attribution and disclaimer

• Bus data comes from TDX under its open data licence. It is published by the original providers; the app only reorganises and displays it and makes no guarantee about timeliness or accuracy.
• Map tiles are provided by OpenFreeMap; map data is © OpenStreetMap contributors, available under the ODbL.
• This site and the app are not affiliated with or endorsed by any of these agencies or projects.

10. Children

The app collects no personal data at all, so there is no children's data to handle. Its age rating is 4+.

11. Changes to this policy

If a future feature requires handling personal data (for example accounts or cloud-synced arrival alerts), we will update this policy and the effective date above before that feature ships, and announce the change in the app and on this site.

12. Contact

Questions about this policy or how data is handled: service@wewe.ws.