Privacy Policy

Last updated: 16 July 2026

DailyDash shows you live NSW public-transport departures for your regular trips. It's built to need as little of your data as possible.

The short version

• No account, no login — your saved routes and settings live only on your phone.
• We add no analytics, tracking, or crash-reporting SDKs of our own, and send no push notifications. (On Android, the Google Maps component reports its own diagnostic and crash data to Google — see below.)
• Your location is used only on your device and is never sent to us or to Transport for NSW.
• The app talks to one server we run, which relays public timetable and live-running data from Transport for NSW. It sends the stop or route you're asking about — never your name, contacts, or location.

What's stored on your device (only)

Your saved routes and trips (including any custom names you give them), your pinned journey, your app settings, and your theme choice are stored only in the app's local storage. We never upload them. A copy of the public NSW timetable database is also downloaded and cached on your device so the app works quickly and with less network use — public data, not personal data. Uninstalling the app removes all of it.

What the app sends to our server

To answer a query, the app contacts one server we operate — api.dailydash.today — which relays data from Transport for NSW Open Data. Each request includes only the public transit identifiers needed to answer it (stop IDs, route IDs and labels, trip IDs, and travel mode). We do not send your name, email, contacts, account details, or your device's location. Custom route names stay on your device. We hold the Transport for NSW API key on our server, so the app never handles it.

A per-install identifier

Each request also includes a random identifier the app generates on your device the first time it runs. It is not derived from any hardware, device, or advertising identifier, and it resets if you reinstall the app. It appears in our server logs; its intended purpose is to help us protect the service from abuse (for example a per-install rate limit). It does not identify you personally. Because it is stable for the life of an install, repeated requests from the same install can be associated with one another in our logs — we don't build user profiles, but in the interest of honesty we note your queries are correlatable at the log level (for instance, a stop you look up every morning could imply a regular boarding location).

Location

If you enable location, the app uses your device's location only on the device, for two things: "Near me" stop search, and the live "you are here" dot while you're tracking a service you've boarded. It's used only while the app is open (when-in-use), controlled by a "Use my location" switch in Settings. Your coordinates are never sent to our server or to Transport for NSW, and the map is not given your location dot — it's drawn by the app as an overlay, so the map provider (Apple or Google) never receives your position, only the area you're viewing.

No analytics or tracking

DailyDash contains no analytics, tracking, or crash-reporting SDKs of our own, and sends no push notifications. On Android, the Google Maps component used for the tracking map reports its own diagnostic and crash data to Google (see "Infrastructure and third parties" below); we don't operate or receive it.

Infrastructure and third parties

• Transport for NSW Open Data — the upstream source of the data our server relays, used under CC BY 4.0.
• Cloudflare — hosts our server and serves the timetable database. As with any internet service, our hosting provider may process standard request metadata — such as your IP address and the requested URL — and keep it in logs under its own retention policy. We do not use your IP address to identify you.
• Apple Maps (iOS) — when you open the tracking map on iOS, iOS fetches map tiles from Apple under Apple's terms. We don't hand your location to the map.
• Google Maps (Android) — when you open the tracking map on Android, the Google Maps SDK fetches map tiles from Google. Google receives your device's IP address and the on-screen map area (which is centred on the service you're tracking, so it's near you), plus standard SDK data — a pseudonymous Maps identifier, device and request metadata, map interaction events such as panning and zooming, and diagnostic and crash metrics — under Google's terms, to provide and improve its services. We don't hand Google your location: the "you are here" dot is drawn by the app from your on-device GPS, so the map provider receives only the area you're viewing, not your position.

Retention and deletion

Because there are no accounts, there's nothing for us to delete on your behalf. Removing the app deletes everything stored locally and resets the per-install identifier. Request logs held by our hosting provider are retained under Cloudflare's log-retention policy.

Children

DailyDash is a general-audience transit app, is not directed at children, and we do not knowingly collect information from children.

Changes

If we change this policy, we'll update the date above and post the new version at this address.

Contact

Questions? Email mark@dailydash.today.