This Privacy Policy explains how [MRT GO] ("MRT Go", "we", "us", or "our") collects, uses, discloses, and protects your information when you use the MRT Go mobile application (the "App") and any related services (collectively, the "Service").

We are committed to protecting your privacy and handling your data in an open and transparent manner in accordance with the Singapore Personal Data Protection Act 2012 (PDPA) and, where applicable, the EU General Data Protection Regulation (GDPR).

If you do not agree with this Privacy Policy, please do not use the App.

1. Who we are

MRT Go is operated by [MRT GO], [Singapore]. Email: hello@mrtgo.sg.

MRT Go is an independent product and is not affiliated with, endorsed by, or operated by SMRT Corporation Ltd, SBS Transit Ltd, the Land Transport Authority (LTA), or any other government agency in Singapore.

For PDPA purposes, our Data Protection Officer (DPO) can be reached at dpo@mrtgo.sg.

2. Summary in plain English

We collect location data to plan journeys and alert you about your stop. Background location is used only during an active journey that you start.
We collect anonymous usage data to improve the App.
We do not sell your personal data to anyone.
We do not use your data for advertising.
You can request deletion of your data at any time.

3. Information we collect

Information you provide directly: email address (only if you create an account), saved places, and support correspondence.

Information collected automatically: approximate and precise location, anonymous device identifiers, device model and OS version, App interaction events, and crash logs.

We do not collect your contacts, photos, microphone audio, calendar, SMS or call logs, advertising identifiers for tracking, or biometric data.

4. Background location — detailed disclosure

MRT Go requests background location access for one purpose only: Active Journey Tracking.

When you tap Start Journey on a planned route, the App begins tracking your location in the background so it can alert you before you reach your destination — even if your screen is off or the App is closed. On Android, a persistent notification is shown for the entire journey. On iOS, the system status bar indicator shows when location is in use.

Tracking stops automatically when you reach your destination, when you tap End Journey, or when 30 minutes pass with no movement on the MRT network detected.

Location data is used in real time to compute distance to your stop. It is never sold, never shared with advertisers, and never used to build a profile of your movements. Aggregated, anonymised journey statistics may be retained for service improvement, but no individual journey history is associated with your identity unless you explicitly opt in.

You can revoke background location permission at any time in your device settings without losing the rest of the App's functionality.

5. How we use your information

We use the information we collect to:

Provide the Service — plan journeys, show nearby stations, send stop and disruption alerts.
Improve the Service — diagnose crashes, understand which features are useful, prioritise fixes.
Communicate with you — reply to support requests, send important service notices.
Comply with legal obligations.
Protect the Service from fraud, abuse, and security incidents.

Under GDPR (where applicable), our legal bases are: consent for optional analytics and notifications; contract for the core Service; legitimate interests for security and product improvement; legal obligation for compliance.

6. Third-party service providers

We use the following processors under contractual data protection terms:

Supabase — backend database and authentication (email, saved places if signed in).
PostHog — product analytics and crash diagnostics (anonymous device ID, App events, crash data).
Tracelet — background location SDK (location data during active journey).
Apple and Google — App distribution and push notifications (device push token).

We do not use third-party advertising SDKs.

7. International data transfers

Some of our service providers are based outside Singapore. Where we transfer personal data internationally, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms under PDPA Section 26 and GDPR Chapter V.

8. Data retention

Account email and saved places — until you delete your account.
Active journey location — duration of the journey only.
Anonymous analytics events — 90 days, then aggregated.
Crash logs — 90 days.
Support correspondence — 2 years from last contact.

When you delete your account, we erase your personal data within 30 days, except where retention is required by law.

9. Your rights

Subject to applicable law, you have the right to access, correct, delete, and port your personal data; to withdraw consent; to object to processing based on legitimate interests; and to lodge a complaint with the Personal Data Protection Commission of Singapore (pdpc.gov.sg) or your local data protection authority.

To exercise these rights, email dpo@mrtgo.sg. We respond within 30 days.

10. Security

We use HTTPS / TLS 1.2+ for data in transit, encryption at rest for backend storage, access controls limiting employee access on a need-to-know basis, and regular security reviews of our infrastructure. No system is perfectly secure; if we become aware of a personal data breach affecting you, we will notify you and the relevant authorities as required by law.

11. Children's privacy

MRT Go is not directed at children under 13 (or the equivalent minimum age in your country). We do not knowingly collect personal data from children under this age. If you believe a child has provided us with personal data, contact privacy@mrtgo.sg and we will delete it.

12. Push notifications

If you opt in, we send stop alerts during active journeys, service disruption warnings for lines on your saved routes, and rare important service announcements. You can disable notifications at any time in your device or App settings.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes we will update the "Last updated" date, notify you in the App or by email (if you have an account), and where required by law obtain your renewed consent. Continued use after changes take effect constitutes acceptance.

14. Contact us

For any privacy-related question, request, or complaint:

Email: privacy@mrtgo.sg
DPO: dpo@mrtgo.sg

MRT Go is independent and not affiliated with SMRT Corporation Ltd, SBS Transit Ltd, or the Land Transport Authority of Singapore.