DPDP Act 2023 Compliant

Privacy Policy

Last Updated: August 17, 2026 • Effective for all BusPe Web and Mobile users

This notice outlines what data the BusPe public transit application collects, how it is used, and how your rights are protected under India's Digital Personal Data Protection Act, 2023 (“DPDP Act”). BusPe operates on a privacy-first principle: we do not sell your personal data, track your recurring travel patterns, or require invasive sign-ups.

01. Data Fiduciary & Identity

BusPe is an independently operated civic mobility platform. For the purposes of the DPDP Act 2023, the operator of BusPe serves as the Data Fiduciary, determining the limited purposes and means of processing personal data. As an end commuter, you are recognized as the Data Principal.

02. Categories of Data We Process

A. Anonymous Device Sandbox

BusPe functions entirely without requiring an account. Saved favorite routes, offline timetable caches, and fare preferences remain strictly inside your browser's local storage or device sandbox.

B. Ephemeral Geolocation

When you tap “Find Near Me” or calculate distance to a stop, coordinates are processed in real-time to sort nearby stops. Your coordinates are never saved to a database or linked to your identity.

C. Optional User Accounts

If you choose to sync your transit pass or commute dashboard across devices via Supabase Auth, we store only your authenticated email or phone identifier, secured with industry-standard bcrypt hashing and TLS encryption.

03. Lawful Grounds & Consent

Under Section 6 of the DPDP Act 2023, data is processed solely on the basis of your explicit, informed consent for specified transit companion functions (e.g. location permission for live stop radars). You may withdraw consent at any moment by clearing your browser site settings.

04. Your Rights as a Data Principal

Right to Access: Summary of any personal data stored and processed.
Right to Correction & Erasure: Rectification of inaccurate information or complete deletion of your account record.
Right of Grievance Redressal: Dedicated officer to address privacy inquiries within 48 business hours.
Right to Nominate: Designate an individual to exercise your rights in the event of death or incapacity.

Grievance Officer Contact Details

In accordance with the DPDP Act 2023 and Information Technology (Intermediary Guidelines) Rules, please direct any privacy questions, data deletion requests, or grievances to:

Grievance Redressal Officer: Data Protection & Civic Governance Desk

Entity: BusPe Public Mobility Initiative

Email: privacy@buspe.app / legal@buspe.app

Response Timeline: Within 48 hours acknowledgement, resolution within 15 days