PantauSivik

01 Information we do not collect

PantauSivik has no sign-up, no login, and no user accounts of any kind. Within the apps, we do not ask for your name, email address, phone number, or any other identifying information, and none is transmitted to our servers. The only personal information we receive is what you choose to send us through the contact form on this website, as explained in Section 13.

The PantauSivik apps use Google Firebase for push notifications and, only if you allow it, for crash reports and anonymous usage statistics, as described in Section 04. Ads are shown through Google AdMob; see Section 03 for exactly what it collects.

02 Location data

If you grant PantauSivik location permission, the app uses your device's location for the following:

Used entirely on your device (never sent anywhere)

• Showing your position on the live map
• Finding your nearest bus stop, hawker centre, carpark, or other facility
• Filtering nearby alerts (flood, dengue, lightning, road incidents) to those within roughly 2 km of you

For these features, your location is processed entirely on your device. It is never sent to, stored on, or logged by our servers.

Sent to our backend for processing (Trip Planner only)

If you use the Trip Planner feature to get directions, your selected starting point and destination coordinates are sent to our backend, which relays them to OneMap (Singapore Land Authority) to calculate a route. This is processed only to return your route and is not stored or retained afterward; it's a pass-through for that single request, not logged against you or kept in any database. This only happens when you actively use Trip Planner; it does not happen anywhere else in the app.

Map tiles (Singapore map)

The Singapore map shows map tiles served directly by OneMap (Singapore Land Authority, onemap.gov.sg), not through our backend. To load a tile, your device connects to OneMap, which therefore receives your device's IP address and the map area you are viewing, in the same way as any website you visit. PantauSivik does not add your account, advertising ID or precise location to these requests. OneMap's own privacy notice applies to the data it receives.

Nearby alerts and your approximate area

Your precise location is used on your device. If you turn on Nearby alerts, the app joins a notification group for a coarse area of about 5 km around you, so that it can receive alerts for that area. This coarse area code is sent to Google's push notification service to deliver the alerts. Your exact coordinates are not sent for this purpose. If you turn Nearby alerts off, the app leaves the area notification group and stops using the area code.

Revoking access

You can deny or revoke location permission at any time in your device settings; the app remains usable without it, with location-based features (including Trip Planner) simply unavailable.

Precision and when it's used

PantauSivik requests both precise (GPS-based) and approximate (network-based) location permission on Android. Precise location gives the most accurate result for the features listed above (e.g. correctly identifying your single nearest bus stop); if you grant only approximate location, these features still work, using your general network-derived position instead of exact GPS coordinates.

Location access runs strictly in the foreground, only while you have PantauSivik open and actively on screen. The app does not request background location access, does not run any location-tracking service while closed or minimized, and cannot read your location when it isn't running.

03 Advertising (Google AdMob)

PantauSivik shows ads through Google AdMob to support keeping the app free. AdMob's software development kit runs inside the app and collects a device advertising identifier and other device/usage signals, which it uses to serve and measure ads. This data is collected and processed by Google, not stored on our own servers.

If you are in the European Economic Area, the United Kingdom or Switzerland, the app first shows a consent form (provided by Google's User Messaging Platform) asking whether ads may use your device data for personalised advertising. You can accept, refuse or manage your choices there. If you refuse, the app still shows ads, but only limited, non-personalised ones. You can reopen the form at any time from the app's Sources screen (Ad Privacy Options) and change your choice.

You can see and control what Google does with this data, including opting out of personalized advertising, through your device's ad settings (on Android: Settings → Privacy → Ads) or by referring to Google's own Ads privacy policy, which governs AdMob directly.

Identifiers used by the app

The app may use two identifiers: the device advertising ID, used by Google AdMob to show ads (you can reset or opt out of this in your device's ad settings), and a Firebase installation ID, used for push notifications.

04 Push notifications, crash reports and usage statistics (Google Firebase)

Push notifications (Firebase Cloud Messaging)

PantauSivik uses Firebase Cloud Messaging, a service provided by Google, to deliver push notifications for the alerts you choose to receive. To do this, Firebase assigns your device an installation ID and a push registration token. These are used only to deliver notifications you have enabled, and are not used for advertising or analytics. You can stop them at any time by turning off notifications for the app in your device settings or by uninstalling the app.

Google processes this data under its own privacy policies: Google Privacy Policy and Firebase privacy information. If you use Nearby alerts, see Section 02 for the coarse area code that is also used.

Crash reports and anonymous usage statistics (optional)

The app asks you once, during first-time setup (or on first launch after updating), whether you want to share crash reports and anonymous usage statistics. This is optional, and nothing is sent unless you choose Allow. If you choose No thanks, or have not yet chosen, crash reporting and analytics stay switched off. You can change your choice at any time in Settings → Preferences → Crash reports & usage stats.

If you allow it, the app uses two Google Firebase services:

• Firebase Crashlytics records a report when the app crashes or hits a serious error. It includes technical details such as the app version, device model, Android version, the state of the app at the time of the crash, and a Firebase installation ID.
• Firebase Analytics records anonymous events about how the app is used, such as which screens are opened, the language you select, which dashboard cards you show or hide, and whether you start a trip. It also records the technical information Firebase Analytics collects automatically, such as device model, operating system, app version, approximate region derived from your IP address, and an app-instance identifier.

We do not put your name, email address, phone number or GPS location into these reports or events. We use them only to find and fix problems and to decide which features to improve, not for advertising. Google processes this data under the Firebase privacy information. Under Firebase's default settings, event data is kept for up to 14 months and crash reports for up to 90 days. If you switch the option off, the app stops sending new data straight away. To ask for data already sent to be deleted, contact our Data Protection Officer (Section 14) and tell us the approximate date range; we will then use the identifier in your app-instance data to remove it.

05 Information stored on your device

To remember your preferences between sessions, PantauSivik stores a small amount of data locally on your own device, never on our servers. This includes things like:

• Bus stops you've saved for quick access
• Your Dashboard tile layout and hidden/shown tiles
• Selected news categories and country/view preferences

This data stays on your device. Uninstalling the app, or clearing its storage in your device settings, removes it completely. We have no access to it and no copy of it exists anywhere else.

Diagnostic log. Release versions of the app do not write a diagnostic log file. Debug builds used during development write a local log file on the device; it is not uploaded and is not included in device backups.

06 What the app displays

PantauSivik's content is public information republished from government and open-data sources, aggregated by our backend on a schedule (not on-demand per user, and not tied to any individual's request). Sources include, depending on country selected:

PantauSivik is independent and is not run, reviewed or approved by any agency named on this page. Data is compiled from public sources: the Land Transport Authority (LTA DataMall), National Environment Agency, PUB, Sport Singapore and data.gov.sg, under the Singapore Open Data Licence v1.0; MetMalaysia and data.gov.my, under the Malaysian Government Open Data Terms of Use 1.0; fuel prices from the Shell, SPC, Caltex and Smart Energy price boards and motorist.sg; weather and air quality for Malaysia from WeatherAPI.com; and map data from OneMap (Singapore Land Authority).

None of these look-ups are made per-user or tied to your identity; the app fetches from our own backend, which independently polls these public sources on a schedule.

07 Backend infrastructure

PantauSivik's backend runs on Supabase, which hosts the public data described above. The app reads this data directly; there is no user authentication and no user-specific data is ever written back to it from the app.

08 Links to other sites

Tapping a news article opens the original source (e.g. CNA, Straits Times, Bernama) in your device's browser or system share options. Those sites have their own privacy practices, which this policy doesn't cover; we'd encourage you to review them separately.

09 Children's privacy

PantauSivik is not directed at children and we do not knowingly collect information from anyone, of any age; this applies equally to users under 13 (or the relevant age of digital consent in your jurisdiction).

10 Data retention & deletion

Because the apps don't collect personal data in the first place, there's nothing on our servers to request deletion of. On-device data (saved stops, layout preferences) is deleted the moment you clear the app's storage or uninstall it. The one exception is a message you send through the website contact form: if you'd like it deleted sooner than the retention period in Section 13, contact our Data Protection Officer using the details in Section 14.

How to clear on-device data yourself

You're always in direct control of the small amount of data PantauSivik keeps on your device. To clear it without uninstalling the app:

1. Open your device's Settings app
2. Go to Apps (or "Apps & notifications")
3. Select PantauSivik
4. Tap Storage
5. Tap Clear Data (sometimes shown as "Clear Storage")

This immediately and permanently removes your saved stops, dashboard layout, and preferences from your device. Uninstalling the app achieves the same result. Either way, nothing further needs to be requested from us, since none of this data ever left your device.

Notification data is removed when you uninstall the app or turn notifications off. To ask for any other data to be deleted, contact our Data Protection Officer using the details in Section 14.

11 Your rights & withdrawing consent (Singapore PDPA)

For users in Singapore, this section explains your rights under the Personal Data Protection Act 2012 (PDPA), including your right under section 14 to withdraw any consent you've given at any time.

Because the PantauSivik apps don't collect or store personal data on our servers, most PDPA data-subject mechanisms (access, correction, portability requests) don't apply to them; there's no server-side personal data to act on. The consents that are relevant here are the location permission you grant on your device, and the consent you give when you tick the box on the website contact form (see Section 13). You can withdraw either at any time:

• Revoke location permission: in your device's Settings → Apps → PantauSivik → Permissions → Location, set it to "Don't allow." The app remains fully usable; location-based features (nearest stop, map position, proximity-filtered alerts) simply switch off.
• Website analytics: choose Decline, or use the "Cookie settings" link in the footer of any page to change your choice.
• Crash reports and usage statistics: in the app, go to Settings → Preferences and switch off Crash reports & usage stats. This stops any further data being sent.
• Ad consent (EEA, UK, Switzerland): open Ad Privacy Options on the app's Sources screen to review or change your choice, or refuse personalised ads.
• Turn off notifications: in your device's Settings → Apps → PantauSivik → Notifications, or turn off Nearby alerts in the app, to stop push delivery and the use of the area code.
• Clear on-device data: follow the steps in Section 10 above to remove all locally stored preferences immediately.
• Uninstall the app: removes everything the app stored on your device, with nothing remaining anywhere.
• Contact form details: email our Data Protection Officer to withdraw your consent, or to ask for access to, correction of, or deletion of a message you sent through the website form. Withdrawing consent means we can no longer keep or act on that message.

If you have questions about exercising these rights, or believe PantauSivik has handled your data inconsistently with this policy, contact our Data Protection Officer using the details in Section 14.

12 Changes to this policy

If PantauSivik's data practices change, for example, if we introduce accounts, additional ad networks, or new kinds of analytics, this page will be updated first, with the "last updated" date above revised accordingly.

13 Website contact form

The contact form on this website is the only place where we collect personal information. The apps and the rest of the website do not ask for personal information. This section explains what the form collects and what happens to it.

What we collect

• The name and email address you type in
• The topic you choose and the message you write
• Your tick-box confirmation that you agree to us using these details to reply to you

Please don't put passwords, identity card numbers, payment details, or other sensitive information in your message, we will never need them.

Why we use it

Only to read your message, reply to you, and deal with the support request, feedback, partnership enquiry or privacy request it contains. We don't add you to any mailing list, use it for advertising, or sell it.

How it is handled

When you send the form, your details are emailed to the ZN Labs team. The website does not save your message in a database. The email is then held in our mailbox, which is provided by our web hosting provider, and it is shared with no one else unless the law requires it.

Spam protection

To stop automated abuse, the form uses a hidden check field and a single-use form token, and it limits how many messages one visitor can send. For this, the server briefly keeps two short-lived, irreversible codes: one derived from your IP address (kept for up to 48 hours) and one derived from your email address and message, to spot duplicates (kept for up to 24 hours). Both are one-way codes made with a secret key that stays on our server, so your actual IP address, email and message are not stored, and both codes are deleted automatically.

Website analytics (Google Analytics and Microsoft Clarity)

This website uses Google Analytics, a service provided by Google, to count visits and see which pages are useful. It does not apply to the apps. It is controlled by a choice you make in the banner shown on your first visit, using Google Consent Mode:

• If you accept: Google Analytics sets cookies and collects information about your visit, such as the pages you view, how you arrived, your approximate location (country or city level), your device, browser and screen type, and a randomly generated identifier. It is not used to identify you personally.
• If you decline, or have not yet chosen: no analytics cookies are set and no identifier is stored. Google's tag still loads, so Google receives a limited, cookie-free signal from your browser, together with the technical details every web request carries, such as your IP address and browser type, which Google uses to estimate overall visits.

We do not use Google Analytics for advertising, and advertising storage and personalisation stay switched off. You can change your choice at any time with the "Cookie settings" link in the footer of every page, and you can clear the cookies in your browser. Google processes this data under its own policies: Google Privacy Policy and Google Analytics data safeguards.

Microsoft Clarity. If you accept, this website also uses Microsoft Clarity, a service provided by Microsoft, to understand how visitors use our pages, through heatmaps (where people click and scroll) and anonymised session recordings. Clarity is loaded only after you accept. If you decline, or have not yet chosen, Clarity is not loaded and sets no cookies. If you accept, Clarity sets its own cookies and collects information such as the pages you view, your clicks, scrolling and mouse movement, your approximate location, device, browser and screen type, and a randomly generated identifier. Text you type into forms, such as the contact form, is masked and is not recorded. We do not use Clarity for advertising. If you change your mind, use the "Cookie settings" link in the footer to decline, which stops Clarity and removes its cookies. Microsoft processes this data under its own policies: Microsoft Privacy Statement.

Other website technical data

Apart from Google Analytics and Microsoft Clarity as described above, this website uses no advertising trackers, and its fonts are served from our own server rather than a third party. Like most websites, our hosting provider's server may keep standard access logs (such as IP address, time and page requested) for security and operations. We do not use these logs to identify or track individual users.

How long we keep it

We keep your message for 3 years after our last conversation with you, then delete it. You can ask us to delete it earlier at any time (see Sections 11 and 14).

14 Contact & Data Protection Officer

PantauSivik is developed and operated by ZN Labs, based in Singapore.

Questions about this policy, the app's data practices, or requests to exercise the rights described in Sections 11 and 13 can be directed to the Data Protection Officer above.