Syrax (SG Bus) · Effective date: 2 August 2026 · Last updated: 2 August 2026
Short version: Syrax has no accounts and asks for nothing about you. To show the stops nearest to you, the app sends your coordinates to our server, which keeps them in its access logs — alongside a resettable device identifier — for 7 days and then deletes them. The app shows ads, and the advertising SDK collects an advertising identifier. Everything else — your favourites, your reminders, and the journey tracking that tells you when to get off — stays on your device.
Syrax, published as SG Bus, is a Singapore public bus companion app that provides live bus arrival times, journey tracking, and route information. It is available for Android and iOS and is developed and maintained as an independent project. If you have any questions about this policy, contact us at syraxapp@gmail.com.
Syrax does not ask for, and has no way to receive:
We do not sell your data, and we do not share it with anyone except as described in section 6.
Syrax uses your device location for two features, which handle it differently. The distinction matters, so it is set out plainly:
| Feature | What happens to your location |
|---|---|
| Nearby stops | Sent to our server. Your latitude and longitude are included in the request so the server can return the bus stops closest to you. |
| Journey tracking (alerting you before your stop) |
Stays on your device. Your position is compared against the route's stops locally to work out how many stops remain. These coordinates are never transmitted. |
The coordinates sent for nearby-stop lookups appear in our server's access logs as part of the request, on the same line as the resettable device identifier described in section 7. Those logs are retained for 7 days and then deleted. Within that window, lookups from the same device can therefore be seen together; after it, they are gone. The logs are used only to operate, secure, and debug the service. They are not tied to any personal identity — there is no account, and we never learn who you are — are never used for advertising, and are not shared with third parties.
You can refuse location permission, or withdraw it later in your device settings. The app keeps working — you search for stops by name or 5-digit stop code instead, and journey tracking is unavailable.
On iOS, journey tracking continues while the app is in the background so it can alert you with the screen off. This uses the "While Using the App" permission; the app never requests "Always" access.
Syrax displays banner advertisements supplied by Google AdMob. To do this, the AdMob SDK collects information from your device, which typically includes your advertising identifier, approximate location derived from your IP address, device and app information, and interactions with the ads shown. This data is collected by Google, not by us — we never receive it, and we cannot connect it to anything else in the app.
On iOS, the app asks for permission to track using Apple's App Tracking Transparency prompt. If you decline, ads still appear but are non-personalised. You can change this at any time in Settings › Privacy & Security › Tracking.
On Android, you can reset or delete your advertising ID, and opt out of ad personalisation, in Settings › Google › Ads.
Google's handling of this data is governed by Google's Privacy Policy. See also how Google uses data from apps that use its services.
To stop our API being abused by automated traffic, each request carries an attestation token proving it came from a genuine, unmodified copy of the app. This uses Firebase App Check, with Apple's App Attest on iOS and Google Play Integrity on Android. The check confirms the app itself, not you: it involves no personal information and no account.
Syrax uses the following services, each governed by its own privacy policy:
Our server keeps standard web access logs for each request: the time, the URL requested (which for nearby-stop lookups includes the coordinates described in section 3), the HTTP status, the IP address the request came from, and the app's user-agent string.
On both platforms the user-agent string contains the app version, the OS version, the device model, and a resettable device identifier: the Android ID on Android, and the vendor identifier on iOS. Neither is the advertising identifier, and neither is shared with anyone. Both can be reset by you — the Android ID by a factory reset, the iOS vendor identifier by deleting every app we publish — after which requests from your device are no longer connected to earlier ones.
We use this identifier only to tell one device's requests apart from another's while diagnosing a fault or blocking abuse. It is not used to build a profile of you, and it is never combined with data from any other company.
All access logs are retained for 7 days and then deleted. They are used solely to operate, secure, and debug the service.
The following is saved locally on your device and never transmitted to us:
All of it is removed when you uninstall the app.
Arrival and destination reminders are delivered as local notifications, scheduled and shown by your device's operating system. We operate no push-notification service, and no data is sent to us or to anyone else to deliver them.
Syrax is not directed at children under 13, and we do not knowingly collect personal information from them.
Because Syrax has no accounts, we hold nothing that identifies you and cannot look up "your" data. The location and IP information in our access logs is deleted automatically after 7 days. You can remove everything the app stores by uninstalling it, and you can control advertising and location through your device settings as described above. For any privacy request, email syraxapp@gmail.com.
If we make material changes, we will update the "Last updated" date above. Continued use of the app after a change constitutes acceptance of the updated policy.
For any privacy-related question or request, email syraxapp@gmail.com.