Last updated: 29 June 2026
This Privacy Policy explains how Xuan Toan Mai trading as mlabs studio (“we”, “us”, “our”) handles information in connection with the Bus UK mobile application (“the App”).
The App requests permission to access your device’s location while the App is in use. Your approximate location is sent to Transport for London (“TfL”) to find nearby bus stops and arrival predictions. We do not store your location on our servers.
To open the map near you on future launches, the App may store your last known location locally on your device (in the App’s own storage). This local copy is not sent to our servers. It is replaced when the App saves a newer location and is removed when you delete the App.
Location data is transmitted only when required to perform nearby-stop or geocoding searches and is not used for tracking your movements over time.
You can deny or revoke location permission at any time in iOS Settings. Without it, the App cannot automatically find stops near you, but you can still search manually.
We use PostHog to collect usage analytics that do not directly identify you, such as:
We do not collect your name, email address, phone number, contacts, photos, or other directly identifying information. PostHog is configured with the “Discard client IPs” project setting enabled, which causes PostHog’s ingest servers to drop your IP address upon receipt without persisting it. No IP is stored, so no location can be derived from one.
PostHog’s own privacy policy is available at: https://posthog.com/privacy
Consent: on first launch, the App asks whether you want to share this analytics and crash data. If you choose “Not now”, nothing is sent. You can change your choice at any time via Settings → Privacy → “Anonymous usage analytics”.
The App may log technical errors to help us diagnose problems. These reports may contain technical diagnostic information such as device type, operating system version, app version, and error details (including stack traces). We do not intentionally collect information such as your name, email address, contacts, or photos in these reports, and we filter known location-shaped data (such as UK postcodes and coordinates) out of error messages before they are sent.
We use two services to receive these reports:
Crash and error reports are governed by the same consent as analytics above.
If you choose to send feedback via the “Send Feedback” link in Settings, your email app may send us your email address and any message you include. Error-context feedback may include app version, build number, device platform, OS version, the bus stop name and ID you were viewing, and a short technical error description. You can edit or remove any of this information before sending.
We share data with the following services for app functionality, postcode and place search, analytics, and error diagnosis:
| Service | Purpose | Data shared |
|---|---|---|
| Transport for London (TfL) Unified API | Bus stops, arrivals, route data | Your approximate location, only while you use the App |
| Postcodes.io | UK postcode autocomplete in the search box | Partial postcode text you type |
| Apple geocoding services | Converting searched places and postcodes into map coordinates | Search text submitted for geocoding |
| PostHog (EU region) | Product analytics, JavaScript-layer error reports | Pseudonymous device ID, event names, device metadata |
| Sentry (EU region) | Native crash and unhandled-error reports | Stack traces, device metadata, app version |
Analytics and error-report data are processed by PostHog and Sentry on our behalf. We have selected the EU hosting region for both, so this data is processed in the European Economic Area.
When the App makes a request to any of the above services, your device’s IP address is necessarily disclosed to that service as part of the network connection. PostHog discards it on receipt (see above); the other services receive it at the network layer and handle it under their own privacy policies.
We do not share data with advertisers, data brokers, or any other third party.
Under the UK GDPR and EU GDPR, we rely on the following legal bases:
If you are in the UK or EU, you have rights under data protection law including the right to access, correct, or delete personal data, to object to processing, to restrict processing, and to data portability.
Because the App does not collect data that identifies you personally and does not require an account, we typically have no personal data to retrieve or delete. If you believe we hold personal data about you, contact us at the email below.
To exercise your privacy rights or ask questions about this policy, contact us at the email in section 9.
The App is rated 4+ and is suitable for all ages, but is not directed specifically at children. We do not knowingly collect directly identifying information from children. The protections described in section 1 apply equally to all users regardless of age. If analytics is enabled, the App may collect the pseudonymous analytics and diagnostic data described in section 1.
We use HTTPS for all network requests. No transmission method is 100% secure; we cannot guarantee absolute security.
We may update this policy from time to time. The “Last updated” date at the top reflects the most recent change. Material changes will be highlighted in the App or via the App Store release notes.
Questions or concerns about this policy, or requests to exercise your data protection rights:
Xuan Toan Mai (trading as mlabs studio) Email: mlabs.studio1@gmail.com