Privacy Policy

Precise location: When you grant permission, we read GPS coordinates to set your trip origin, improve nearby search, and—if you start trip guidance—to alert you when to board, transfer, or alight. Location is used only for features you initiate.

Search and trip data: Place names, coordinates, and route selections you enter are sent to our servers to return bus route options within Kathmandu Valley.

Device identifier: The app sends a randomly generated device ID with API requests so we can apply fair rate limits and reduce abuse. This ID is not your name, phone number, or Apple/Google account.

Technical logs: We may process IP address, app version, device type, and request timestamps for security, rate limiting, and outage diagnosis. Logs are kept for a limited rolling period.

We do not require an account to use Gantabya 1.0.0. We do not collect payment information because the app is free.

To plan trips, display maps, stops, polylines, traffic-aware estimates, and road disruption notices you request.

To operate trip guidance alerts while an active trip is in progress.

To protect the Service against abuse, fraud, and excessive automated traffic.

To improve reliability and fix errors in routing or search features.

We do not sell your personal information. We do not use your data for third-party advertising or cross-app tracking.

The app caches route catalogs, traffic estimates, snapped map paths, and active trip state locally so planning works faster and trips can resume after a brief interruption.

You can clear cached data by deleting and reinstalling the app. Trip guidance state is cleared when you end a trip or remove the app.

Google Maps Platform: We use Google services (including Routes and Places APIs) for road-following paths, traffic-aware duration estimates, and reference stop data. Google receives the minimum coordinates and search text needed for each request under Google's terms and privacy policy.

OpenStreetMap-based services: Geocoding and fallback routing may use Photon, Valhalla, OSRM, or similar providers. They receive query text or coordinates necessary to answer a specific request.

Cloud infrastructure: Our API is hosted on Vercel and route data is stored in MongoDB Atlas. These providers process data on our behalf under their security and privacy terms.

Apple Maps: The iOS app displays maps through Apple MapKit / react-native-maps. Apple's privacy policy applies to map rendering on your device.

Server security and rate-limit logs are retained only as long as needed for protection and troubleshooting—typically a short rolling window.

Route catalog and disruption data is retained while the Service operates.

We do not maintain a long-term history of your individual trips on our servers for version 1.0.0.

You can deny location permission and still search for places manually.

You can stop trip guidance at any time, which stops periodic location reads for that feature.

You may contact us to request access, correction, or deletion of personal information we hold about you, subject to legal and operational requirements.

Residents of Nepal may contact us regarding privacy concerns under applicable local law.

We use HTTPS, client authentication headers, and rate limiting to reduce unauthorized access and abuse.

No method of transmission or storage is completely secure. Please use the Service on trusted devices and keep your operating system updated.

Gantabya is intended for a general audience. We do not knowingly collect personal information from children under 13 without appropriate parental consent. Contact us if you believe a child has provided personal data through the Service.

Gantabya is designed for use in Nepal. If you access the Service from outside Nepal, your information may be processed in countries where our service providers operate, including the United States and the European Union, under appropriate safeguards.

We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do. Material changes will be reflected in the app or on our website before they take effect where required by law.