London Bus PalLondon Bus Pal

Privacy Policy

This privacy policy explains how we collect, use, and protect your personal data when you use the London Bus Pal mobile application and websites (buspal.app and londonbuspal.co.uk).

Who We Are

London Bus Pal is operated by Mulder Digital Ltd (company number 11763023), the data controller for your personal data.

Our contact details:

  • Address: 2nd Floor College House, 17 King Edwards Road, Ruislip, London, United Kingdom, HA4 7AE
  • Email: support@buspal.app

For any data protection queries, please contact us at the email address above.

What Personal Data We Collect

Information You Provide

  • Account information when you create an account (email address and authentication details)
  • Contact information when you get in touch with us
  • User-generated content such as photos, comments, suggestions, and feedback

Information Collected Automatically

  • Device information: Type of device, device identifiers, IP address, operating system, browser type
  • Usage information: How you interact with the app and its features
  • Location data: Your current location when you choose to use location-based features
  • Technical data: App performance, crash reports, and diagnostic information
  • Search data: Information you enter when using search and autocomplete features

How and Why We Use Your Personal Data

We process your personal data for the following purposes, each with a specific lawful basis under UK GDPR:

Purpose Lawful Basis
Providing transport information and app features Legitimate interest (delivering the core service)
Managing your account and subscriptions Contract performance
Analytics and service improvement Legitimate interest (understanding usage to improve the service)
Displaying advertisements (in-app only) Legitimate interest (funding the free tier of the service)
Responding to support requests Legitimate interest / Contract performance
Location-based features (when you request them) Legitimate interest (providing the feature you requested)
Meeting legal obligations Legal obligation

Where we rely on legitimate interest, we have conducted a balancing test to ensure our interests do not override your rights and freedoms.

Cookies and Tracking

Our website (buspal.app) uses Google Analytics to understand how visitors use the site. Google Analytics uses cookies to collect:

  • Pages visited and time spent
  • Device type and browser
  • Approximate location (city level, derived from IP address)
  • How you arrived at the site (referrer)

This data is aggregated and does not personally identify you. We use it under our legitimate interest in understanding site usage to improve the service.

The buspal.app website does not use advertising cookies. Advertising is present within the mobile app and on the londonbuspal.co.uk blog, served by third-party advertising networks.

Opt out: You can prevent Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

Sharing Your Personal Data

We share personal data with trusted service providers who help us operate the app:

Service Providers

  • Transport data providers (TfL, National Rail): To obtain real-time transport information
  • Cloud hosting (Firebase/Google): For secure data storage and user authentication
  • Payment processing (RevenueCat via Apple/Google): For subscription management
  • Analytics (Google Analytics): For app and website usage analysis
  • Maps and location services: For mapping and location-based features
  • Crash reporting (Firebase Crashlytics): For app stability monitoring

Location Data

When you use location-based features, your location is sent to transport and mapping service providers to deliver relevant information. We do not store your location data or send personally identifiable information alongside it.

We may also share personal data:

  • To protect our rights, property, or safety
  • To investigate fraud or security issues
  • If required by law or legal process

International Data Transfers

Some of our service providers (particularly Google/Firebase) process data outside the UK. These transfers are protected by appropriate safeguards including Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner.

Data Retention

We retain your personal data only as long as necessary:

  • Account data: Until you delete your account
  • Usage analytics: 14 months (our configured Google Analytics retention period)
  • Crash reports: 90 days
  • Location data: Not stored (used transiently to serve your request)
  • Support correspondence: 2 years (for complaint resolution)
  • User-uploaded photos: Until removed by you or through moderation

Your Rights

Under UK data protection law, you have the right to:

  • Access your data: Request a copy of the personal data we hold about you
  • Correct your data: Ask us to update any incorrect information
  • Delete your data: Request deletion of your personal data
  • Restrict processing: Limit how we use your data
  • Object to processing: Object to processing based on legitimate interest
  • Data portability: Receive your data in a portable format

To exercise these rights: Contact us at support@buspal.app. We will respond within one month.

Right to complain: If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Children's Data

London Bus Pal is not directed at children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe we have collected data from a child under 13, please contact us at support@buspal.app and we will delete it promptly.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit and at rest. Whilst we work hard to protect your data, no system is completely secure.

Managing Your Privacy

  • Location sharing: Control location access through your device settings
  • Account deletion: Use the "Delete all my user data" option in the app settings, or contact us at support@buspal.app
  • App removal: Uninstall the app to stop further data collection on your device

Changes to This Policy

We may update this privacy policy to reflect changes in our practices or legal requirements. We will post updates here and notify you of significant changes through the app.

Contact Us

If you have questions about this privacy policy or our data practices:

  • Email: support@buspal.app
  • Address: Mulder Digital Ltd, 2nd Floor College House, 17 King Edwards Road, Ruislip, London, United Kingdom, HA4 7AE

Last updated: 3 May 2026