Privacy Policy
Effective date: 1 October 2026
Who we are
PixBus is developed by THE GROWING COMPANY SL, a company registered in Spain (D-U-N-S 471616639), registered office in Madrid, Spain. For any question about this policy, contact us at privacy@pixbus.co.uk.
What this policy covers
This policy explains how we handle data through:
- The pixbus.co.uk website.
- The PixBus mobile app (iOS and Android).
Data we collect
Through the website (pixbus.co.uk). Today, pixbus.co.uk does not use any analytics, advertising, or tracking cookies. We may collect basic technical server logs (IP address, browser type, date/time of access) generated automatically by our hosting provider, for security and troubleshooting purposes only. These logs are not linked to any individual identity.
Through the PixBus app:
- Location. With your permission, PixBus uses your device's approximate or precise location to show you nearby bus stops ("Nearby stops"). This is processed on your device; PixBus does not store a history of your location on our servers.
- Push notification tokens. If you enable "Follow this bus" or "Arrival alerts", we register a device token so we can send you live updates about a specific bus you chose to follow. On iOS that token is issued by Apple's Push Notification service (APNs); on Android, by Google's Firebase Cloud Messaging (FCM). In both cases it is a device token only: it is not linked to your name, email, or any other identifier — PixBus does not require an account.
- Usage analytics. We use PostHog, an analytics provider hosted in the EU, to understand app usage (e.g., which stops are viewed). IP geolocation is disabled and IP addresses are discarded at project level; data is pseudonymous.
- No account data. PixBus does not require registration, login, email, or password. We do not collect your name or email through the app.
Legal basis for processing (UK GDPR / EU GDPR)
- Location data: consent (granted through your device's system settings, on iOS or Android).
- Push tokens: consent (you activate follow/alerts) and legitimate interest (providing the feature you requested).
- Analytics: legitimate interest, with data minimised and pseudonymised.
Who we share data with
- Apple Inc. — solely to deliver push notifications to iOS devices via APNs, under Apple's own privacy terms.
- Google (Firebase Cloud Messaging) — solely to deliver the same push notifications to Android devices, under Google's own privacy terms. Same data as the Apple channel: a device token, not linked to your identity.
- Map data (OpenStreetMap). The stylised map is drawn from OpenStreetMap data. PixBus fetches it from our own server (hosted on Fly.io, London region), which caches each area, so in normal use your device contacts no third-party map service at all. If our server is unavailable, the app falls back to public Overpass API mirrors, all of them operated within the EU (Germany, Austria and France); those mirrors then receive your device's IP address and the map area requested, and nothing else.
- PostHog (EU-hosted instance) — analytics processor.
- Transport for London (TfL) — PixBus queries TfL's public API for live bus arrival data; no personal data is sent to TfL beyond the technical stop/line identifiers necessary to fetch public transport data.
- Google Analytics 4 (Google Ireland Limited / Google LLC) — only on the pixbus.co.uk website, and only if you accept our cookie banner. Used to measure site visits and App Store/Google Play download link interactions. See our Cookie Policy for details on cookies, retention, and international transfer.
- We do not sell your data, and we do not use it for ad targeting.
International transfers
THE GROWING COMPANY SL is based in Spain (EU). Where data is processed in or transferred to/from the UK, this relies on the UK's data protection adequacy arrangements with the EU.
Data retention
- Push tokens are kept only while a "follow"/"arrival alert" subscription is active, and are deleted when you stop following, disable alerts, or if the token becomes invalid.
- Analytics data is retained for 14 months and is pseudonymised.
Your rights
Depending on your location, you may have the right to access, rectify, delete, restrict, or port your data, and to object to processing. Contact privacy@pixbus.co.uk. UK residents may also contact the Information Commissioner's Office (ICO); Spanish/EU residents may contact the Agencia Española de Protección de Datos (AEPD).
Children
PixBus is designed to be easy to use for anyone, including older adults with low digital literacy, but is not directed at children. We do not knowingly collect personal data from children, and the app does not collect names, emails, or account data from any user in any case.
Changes
We may update this policy from time to time. The "Effective date" above reflects the latest revision.
THE GROWING COMPANY SL · Madrid, Spain · D-U-N-S 471616639
privacy@pixbus.co.uk · hello@pixbus.co.uk