Privacy Policy

1. Overview & Commitment

At Linely, we believe that navigating public transit should not come at the cost of your digital privacy. This Privacy Policy explains how Linely ("we", "us", or "our") accesses, collects, uses, and safeguards information when you use the Linely mobile application (com.linely.my), website (linely.my), and related services.

Our core principle is simple: we collect only the minimal data necessary to provide accurate public transit arrival countdowns, routing, live trip guidance, and cloud sync features. We do not sell your personal or sensitive user data to third parties, and we do not track your historical movement profiles.

2. Location Data Processing

Linely accesses your device's precise and approximate location for two core transit features:

• Nearby Stops & Route Planning ("While Using the App"): Used on-device to determine your proximity to nearby transit stops (MRT, LRT, Monorail, KTM, and bus stations within 500 meters) and calculate walking distances to interchange hubs.
• Live Transit Navigation & Arrival Alerts (Foreground Service): When you actively start a live trip navigation session, Linely uses continuous location tracking with a persistent status notification—including when your device screen is locked or the app is minimized—to monitor station proximity along your transit corridor and trigger approaching-station, transfer, and arrival alerts. Location tracking stops immediately as soon as your trip ends or you exit navigation.

On-device processing: Your coordinates are evaluated in real time on your device against transit stop coordinates. We do not log your historical GPS breadcrumbs on our servers or share your physical journey traces with advertising networks. You can revoke location permissions at any time in your device settings; Linely remains fully functional in manual station search and route planning mode.

3. Account Information & Cloud Synchronization

You can use Linely anonymously in Guest Mode without creating an account. If you choose to sign in to enable multi-device synchronization, we collect and store:

• Email address & authentication identifiers: Collected via one-time passcode (OTP) verification or OAuth sign-in (Google Sign-In / Apple Sign-In) solely for account authentication and identity verification.
• Display name & profile avatar (optional): Your display name and, if you choose to upload one, a custom profile image selected via your device's photo picker.
• Saved transit preferences: Your bookmarked stations, pinned transit routes, saved places, and notification preferences to synchronize seamlessly across your signed-in devices.

4. Camera & Media Access

• Camera (QR Ticket Scanning): Linely requests camera permission exclusively when you use the KTMB ETS Ticket Tracker to scan a train ticket QR code. Camera video frames are scanned locally on your device in real time and are never recorded, stored, or transmitted to our servers.
• Photo Picker (Profile Picture): When you voluntarily update your profile photo in Edit Profile, the system photo picker provides Linely read access only to the single image you select, which is uploaded securely to store your account avatar.

5. Push Notifications & Alerts

If you opt in to push notifications, we store an anonymous device push token to deliver service disruption alerts, platform updates, and commute reminders. You can disable push notifications at any time in the app settings or through your device's system settings.

6. Third-Party Service Providers & Open Data

To deliver reliable transit functionality, Linely relies on selected infrastructure providers bound by strict data protection standards:

• Authentication & Cloud Database (Supabase & Google OAuth): Account authentication, profile storage, and synchronized favorites are hosted securely on Supabase infrastructure. When signing in with Google, Google OAuth verifies your identity token in accordance with Google's privacy policies.
• Map Rendering (Mapbox): Interactive vector maps and station layers are powered by Mapbox, which processes standard technical network telemetry (IP address, device model, and map viewport coordinates) to serve map tiles.
• Transit Schedule Feeds (OpenDOSM, Prasarana & KTMB): Timetables and real-time vehicle positions are sourced from public GTFS open data feeds published by OpenDOSM, Prasarana Malaysia Berhad, and Keretapi Tanah Melayu Berhad. Zero personal user data is shared with transit operators.

7. Data Security & Encryption

We implement strict technical and organizational safeguards to protect your personal and sensitive user data. All data transmitted between the Linely mobile application and our cloud servers is encrypted in transit using modern cryptography (HTTPS / TLS 1.2 and TLS 1.3). Account records stored in our database are protected at rest with encryption and strict Row-Level Security (RLS) policies ensuring users can only access their own records.

8. Data Retention & Account Deletion

We retain your account data (email address, display name, profile avatar, and saved transit preferences) only for as long as your account remains active. You have the right to request permanent deletion of your account and all associated data at any time through either of the following methods:

• In-App Deletion: Open the Linely app and navigate to Profile → Delete Account, then tap Delete Account and confirm.
• Web / External Deletion (Without the App): Visit our dedicated Account Deletion page (https://linely.my/delete-account) or send a deletion request from your registered email address to support@linely.my.

30-Day Deletion Window & Data Purged: When you initiate account deletion, your account is deactivated and signed out immediately. Your account enters a 30-day grace period (allowing you to cancel the request if triggered accidentally), after which all associated personal data—including your email address, authentication records, display name, avatar image, saved stations, and saved routes—is permanently and irreversibly purged from our databases. No personal data is retained after the purge completes.

9. Children's Privacy

Linely is intended for general public commuters aged 13 and older. We do not knowingly collect personally identifiable information from children under the age of 13.

10. Updates to This Policy

We may update this Privacy Policy periodically to reflect enhancements to our services or applicable legal and Google Play policy updates. Any changes will be posted on this page with an updated revision date.

11. Contact Us

If you have any questions, data access requests, or feedback regarding this Privacy Policy or our data handling practices, please contact our privacy team at support@linely.my.