Privacy Policy

• You can browse the map, search, and get routes without an account.
• Your location is used to draw your position and to work out a route. It is never stored against your name, and no location history is kept.
• An account exists so your saved places and contributions follow you between devices. It holds your email address and nothing you did not give us.
• Rain alerts watch the places you saved. Turning them on stores your device's notification token so we can reach it; turning them off, or deleting your account, removes it.
• There is no advertising, no tracking SDK, and nothing is sold to anyone.
• You can delete your account and its data from inside the app, at any time, without asking us.

Some things people expect to find here are absent because the app genuinely does not do them: there is no advertising identifier, no analytics or crash-reporting SDK of ours and none left running in anyone else's, no contacts, calendar, microphone or camera access, and no background location tracking. The notification token above identifies a device to Apple's and Google's push services and nothing else — it cannot be used to track you between apps.

Under Singapore's Personal Data Protection Act we rely on your consent, given when you allow location access, sign in, or submit a contribution. Where the GDPR applies to you, the corresponding bases are consent for location and account data, contract for running the account you asked for, and legitimate interests for the security logs that keep the service available.

We do not sell personal data and we do not share it for advertising. The service runs on a small number of providers, each of which sees only what its job requires:

• Supabase — hosts the database and handles sign-in. It holds your account record, saved places and contributions.
• Railway — hosts the routing server that receives route and search requests.
• Mapbox — serves the map itself. Loading map tiles discloses your IP address and the part of the map you are looking at to Mapbox, under their own privacy policy. Their map software also ships with usage reporting switched on, which would send them your location and how you use the map; we switch it off when the app starts, so tile requests are all they receive from us.
• Google and Apple — only if you choose to sign in with them, and only to confirm it is you.
• OneMap (SLA) — receives search terms and coordinates to return addresses and place names.
• Expo — only if rain alerts are on. Delivering a notification hands your device token and the alert text to Expo's push service, and on to Apple or Google, which is how any push notification reaches a phone.

Singapore government open data used by the app — LTA DataMall for transit, NEA for weather, PUB for flood alerts — is read by our server, not by your device, and those requests carry nothing about you.

We may also disclose data where the law requires it, and would tell you unless legally prevented from doing so.

A verified shelter or a reported missing path becomes part of the map everyone routes on. That is the point of contributing, and it is why contributions are not deleted when an account is: removing them would quietly make everyone else's routes worse.

What is removed is the link to you. When you delete your account, the account identifier and the email address stored alongside each contribution are erased, and what remains cannot be traced back to a person.

Account details and saved places are kept until you delete them or delete your account. A notification token lasts only as long as rain alerts are switched on. Contributions are kept indefinitely in the anonymised form described above. Server logs are short-lived and retained only as long as they are useful for security and debugging.

• Location — decline it, or turn it off later in your device settings. The map still works; you enter a starting point yourself.
• Notifications — rain alerts are off until you turn them on, and can be turned off again in Settings.
• Saved places — remove any of them individually in the app.
• Delete your account — Settings → Account → Delete account, in the app. It removes your account, saved places and notification token immediately and anonymises your contributions. It cannot be undone, and it does not require contacting us. If you signed in with Apple, the app also disconnects itself from your Apple ID.
• Access or correction — write to privacy@cowaymap.com for a copy of what we hold about you, or to have it corrected.

Coway Map is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has given us data, write to us and we will remove it.

Our database and routing server are hosted in Singapore. The providers listed above may process data in other countries; where that happens, it is under their standard data protection terms.

If what we collect changes, this page changes with it and the date at the top moves. Material changes will be announced in the app rather than quietly published here.

Questions, requests, or complaints: privacy@cowaymap.com. If you are in Singapore and are not satisfied with our answer, you may raise the matter with the Personal Data Protection Commission.