Privacy Policy

Overview

Bus Route Trainer is operated by Proven Innovation (ABN 93 589 866 241). We take your privacy seriously. This policy explains what data we collect, how we use it, and your rights.

The short version: we collect as little as possible, your GPS data stays on your device, and your payment details are handled by Stripe — not us.

What We Collect

Account Information

When you create an account, we collect:

• Email address — for account identification, purchase receipts, and service communications
• Name (optional) — for personalisation

GPS / Location Data

The app uses your device's GPS to show your position on the route and provide voice navigation. Your location data stays on your device. We do not transmit, store, or have access to your real-time location or driving history.

GPS processing happens entirely in your browser/app. No location data is sent to our servers.

Payment Information

Payments are processed by Stripe. Your credit/debit card details are entered directly into Stripe's secure payment form and never touch our servers. We receive only a confirmation of payment and the last four digits of your card for receipt purposes.

Usage Data

We may collect anonymous, aggregated usage data such as:

• Which routes and regions are most popular
• General app usage patterns (pages visited, features used)
• Device type and browser version (for compatibility)

This data is anonymised and cannot be linked to individual users.

How We Collect Your Information

We collect personal information in the following ways:

• Directly from you — when you enter your email address to create an account, or optionally provide your name
• From Stripe — when you complete a purchase, we receive a payment confirmation and the last four digits of your card
• Automatically — your browser or device may provide technical metadata (device type, browser version, operating system) for compatibility purposes

Collection of personal information is not required by any Australian or overseas law, but is necessary for us to provide the service. If you do not provide an email address, you will not be able to create an account or make purchases. You may still browse free routes without an account.

How We Use Your Data

• To provide the service — account management, route access, purchase processing
• To communicate with you — purchase receipts, service updates, route data updates
• To improve the product — anonymous usage analytics to understand which features matter
• To respond to support requests

We do not sell your data to third parties. We do not use your data for advertising.

Third-Party Services

We use the following third-party services:

• Supabase — authentication and data storage (hosted in Australia)
• Stripe — payment processing (United States, with global infrastructure)
• Cloudflare — website and app hosting, CDN, DNS (United States, with global edge network)

Each service has its own privacy policy. We choose services that maintain industry-standard security practices, including encryption in transit and at rest, and SOC 2 compliance.

Cross-Border Data Disclosure

Your personal information may be processed in the following countries:

• Australia — Supabase database hosting
• United States — Stripe (payment processing), Cloudflare (hosting and CDN)
• Other countries — where Stripe and Cloudflare operate edge infrastructure for performance and reliability

We take reasonable steps to ensure that overseas recipients of your personal information handle it in accordance with the Australian Privacy Principles. Our service providers are bound by contractual obligations regarding data protection and maintain industry-standard security certifications.

Cookies

The brochure website (busroutetrainer.com) uses minimal cookies:

• Essential cookies — required for basic site functionality
• Analytics — anonymous usage tracking (if enabled)

The app (app.busroutetrainer.com) uses localStorage for session management and route data caching. This data stays on your device.

Data Retention

• Account data: retained while your account is active. Deleted upon request.
• Purchase history: retained for tax and accounting purposes as required by law.
• Location data: not collected — stays on your device.
• Support correspondence: retained for service improvement.

Your Rights

You have the right to:

• Access your personal data — request a copy of what we hold
• Correct inaccurate data
• Delete your account and personal data
• Export your data in a portable format
• Withdraw consent for optional data processing

To exercise these rights, contact us at [email protected].

Australian Privacy Act

We comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). If you believe we have breached the APPs, you may lodge a complaint with the Office of the Australian Information Commissioner.

Data Breach Notification

In the event of a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988.

US Privacy Rights

If you are a resident of California or another US state with consumer privacy legislation, you may have additional rights regarding your personal information.

The categories of personal information we collect include:

• Identifiers — email address, optional name
• Commercial information — purchase history
• Internet/electronic activity — anonymous, aggregated usage data

We do not sell or share your personal information for cross-context behavioural advertising or any other purpose. We do not use your data for advertising. Because we do not sell personal information, there is no need to opt out — but you may contact us at any time to confirm this.

You have the right to know what personal information we collect, to request deletion, and to request a copy of your data. To exercise these rights, contact [email protected].

GDPR (European Users)

If you access the app from the European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR). Our legal basis for processing is contract performance (providing the service you requested) and legitimate interest (improving the product).

Children

Bus Route Trainer is not directed at children under 18. We do not knowingly collect personal information from anyone under 18. If you are under 18, please do not use this service or provide any personal information. If we become aware that we have collected personal information from a child under 18, we will take steps to delete it.

Changes to This Policy

We may update this policy from time to time. Material changes will be communicated through the app or via email. Continued use after changes constitutes acceptance.

Contact

Privacy questions? Email [email protected] or use our contact form.