Privacy Policy

Metro Live Dhaka · Last updated 19 October 2026

This policy explains what information the Metro Live Dhaka app ("the app", "we", "us") uses, why, and what choices you have. The app is published by NADESOFT.

You never create an account, and we never ask for your name, email or phone number.
Your location is used on your phone to follow your ride. It is never uploaded.
Your Rapid Pass / MRT Pass card is read on your phone. Its full ID is never stored or uploaded.
Only your stamps, streak, themes and travel totals are backed up to the cloud, under an anonymous ID.
No ads, no analytics, no tracking, and nothing is sold or shared for marketing.

1. Information the app uses

Location

With your permission, the app uses your device's location to:

show the station nearest to you;
follow your train along MRT Line 6 while you ride, and work out which stations you passed;
collect station stamps and update your travel totals.

If you start a ride and allow background location, the app keeps following the ride while your phone is locked or in your pocket. On Android this shows an ongoing notification for as long as the ride is being followed. Tracking stops when the ride ends.

Location is processed only on your device. Raw location coordinates are not saved to a history and are never sent to us or to anyone else. What the app keeps is a short ride log on your phone (the stations you rode between, distance, duration and the time the ride ended).

Transit card (NFC)

On Android phones with NFC, you can hold your Rapid Pass or MRT Pass to the phone to read its balance and recent transactions. This happens entirely on your device. The app stores the balance, up to 20 recent transactions and a masked card number (for example, •••• 66AF). The full card identifier is never stored and nothing read from the card is uploaded. You can also enter a balance by hand instead.

Progress and settings

The app stores on your device your station stamps, commute streak, unlocked and selected themes, travel totals, weekly totals, ride log, estimated card balance and app preferences.

2. Cloud backup

So your progress survives a new phone or a reinstall, the app backs some of it up using Google Firebase (Firebase Authentication and Cloud Firestore):

The app signs in anonymously. Firebase assigns a random user ID that is not linked to your name, email, phone number or any other account.
The backup contains your stamps, streak, themes, travel totals and weekly totals, plus the time it was last updated and when it expires.
It does not contain your location, your ride log or any card information.
A backup is only created once you have some progress to save.

Firebase may process technical information such as your IP address and device details as part of providing the service. See Firebase's privacy information for details.

3. Other network requests

Map and scene updates. The app may download updated 3D scene files from GitHub. These are plain file downloads; no personal information is sent, although GitHub, like any web server, receives your IP address.
Rapid Pass website. If you open the Rapid Pass website from the app, it opens in your device's browser. That site is run by a third party and its own privacy policy applies.

4. What we do not do

We do not use advertising or advertising identifiers.
We do not use analytics or third-party tracking tools.
We do not sell, rent or share your information for marketing.
We do not access your contacts, photos, files, camera or microphone.

5. How long information is kept

On your device: until you clear the app's data or uninstall the app. The ride log and card history are capped to recent entries.
Cloud backup: refreshed while you use the app. A backup that has not been refreshed for 180 days may be deleted, together with its anonymous account.

6. Your choices

Location: you can allow, limit (for example, "While using the app") or deny location access at any time in your device settings. Without background location, rides are only followed while the app is open. Without any location access, live ride tracking is unavailable, but the rest of the app still works.
NFC: card reading only happens when you choose to scan a card.
Deleting your data: clearing the app's data or uninstalling removes everything stored on your device. Because the backup is anonymous, we cannot look it up by name or email; to have it deleted sooner than the automatic expiry, contact us from the app's device and we will help identify it, or simply stop using the app and it will expire.

7. Security

Data sent to Firebase is encrypted in transit. Access rules ensure each anonymous ID can only read and write its own backup. No method of storage or transmission is completely secure, but we keep the data we handle to a minimum.

8. Children

The app is not directed at children under 13, and we do not knowingly collect personal information from them. The app does not ask anyone for personal information.

9. Changes to this policy

We may update this policy when the app changes. The date at the top shows when it was last updated. Significant changes will be noted in the app's release notes.

10. Contact

Questions or requests about this policy: contact@nadesoft.bd