Privacy Policy
COSCO Bus Services — Mobile Application & Website
Welcome to COSCO Bus. This Privacy Policy explains how COSCO Bus Services ("we", "us", or "our") collects, uses, discloses, and protects your information when you use our mobile application and website (collectively, the "Services"). Please read this policy carefully. By using our Services, you agree to the collection and use of information in accordance with this policy.
1Information We Collect
1.1 Information You Provide
- Full name, email address, and phone number when you register
- Payment information for ticket purchases (processed securely via third-party providers)
- Profile information and travel preferences
- Communications you send to our support team
1.2 Information Collected Automatically
- Device information (model, operating system, unique device identifiers)
- Log data (IP address, app version, pages visited, time and date of access)
- Location data (with your permission) for real-time bus tracking features
- Usage analytics to improve our Services
- Push notification tokens and delivery status for sending booking alerts
1.3 Information from Third Parties
- Payment processors for transaction verification
2How We Use Your Information
- To create and manage your account
- To process ticket bookings and payments
- To provide real-time bus tracking and route information
- To send booking confirmations, receipts, and service notifications
- To send push notifications about bookings, bus arrivals, and service updates
- To respond to your support requests and inquiries
- To improve our app, website, and services through analytics
- To detect, prevent, and address fraud or security issues
- To comply with applicable legal obligations
- To send promotional communications (only with your consent)
3How We Share Your Information
We do not sell your personal information. We may share your information with:
- Service Providers: Third-party vendors who assist us in operating our app (payment processors, cloud hosting, analytics providers)
- Bus Operators: To facilitate your bookings and travel
- Legal Authorities: When required by law, court order, or government regulation
- Business Transfers: In connection with a merger, acquisition, or sale of all or part of our assets
4Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. You may request deletion of your account and associated data at any time through the Delete Account page. We may retain certain information as required by law or for legitimate business purposes such as fraud prevention and record-keeping.
5Location Data
Our app requests access to your device's location to provide real-time bus tracking and nearby stop features. Location access is optional — you can use the app without granting location permission, though some features may be limited. You can revoke location access at any time through your device settings. We do not share your precise location with third parties for advertising purposes.
6Push Notifications
We use Firebase Cloud Messaging (FCM) and Expo Push Notification Service to send you important notifications about your bookings and bus services.
6.1 Types of Notifications
- Booking confirmations and updates
- Bus arrival alerts and reminders
- Schedule changes and delays
- Service announcements
- Promotional offers (only with your consent)
6.2 Data We Collect for Notifications
- Device push notification token (unique identifier for your device)
- Device type and model name
- Notification delivery and read status
- Language preference (English or Sinhala)
- User preferences for notification types
6.3 Your Control Over Notifications
You have full control over push notifications:
- Enable or disable notifications in app settings (Profile → Settings → Notifications)
- Manage notification permissions in your device settings
- Choose your notification language (English/Sinhala)
- Opt-out of promotional notifications while keeping booking alerts
6.4 Data Security and Deletion
- Notification tokens are securely stored and encrypted in transit
- Tokens are automatically deleted when you logout or uninstall the app
- We do not share notification tokens with third parties for advertising
- You can request deletion of your notification data at any time
6.5 Third-Party Services
We use the following services to deliver notifications:
- Firebase Cloud Messaging (Google) —Privacy Policy
- Expo Push Notification Service —Privacy Policy
Note: Notification permissions are requested when you first login or register. You can change these permissions at any time. Disabling notifications will not affect your ability to use the app, but you may miss important booking updates.
7Advertising and Ad-Related Data
We use Google AdMob to display advertisements in our app. AdMob helps us provide free access to features like Live Map tracking.
7.1 Data Collected by AdMob
- Advertising ID (a unique, user-resettable identifier)
- IP address
- Device information (model, OS version)
- App usage data
- Ad interaction data (views, clicks)
7.2 Purpose of Advertising Data
- Display relevant advertisements
- Measure ad performance
- Prevent ad fraud
- Generate revenue to support free features
7.3 Optional Ad-Supported Features
Live Map access is an optional feature. You can unlock it by:
- Watching a short advertisement (grants 4 hours of access)
- No payment required - completely voluntary
- Schedule Search remains 100% free without watching ads
7.4 Opting Out of Personalized Ads
You can opt out of personalized advertising:
Android:
- Go to Settings → Google → Ads
- Enable "Opt out of Ads Personalization"
- Or tap "Reset advertising ID"
iOS:
- Go to Settings → Privacy → Apple Advertising
- Disable "Personalized Ads"
Note: Opting out will not stop ads from appearing, but they will be less relevant to you.
7.5 Third-Party Ad Partners
AdMob may share data with advertising partners to deliver and measure ads. For more information:
Important: Watching ads is completely optional. You are never required to watch ads to use core app features. We do not sell your personal information to advertisers.
8Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data
- Portability: Request transfer of your data in a machine-readable format
- Opt-out: Unsubscribe from marketing communications at any time
- Restriction: Request restriction of processing in certain circumstances
To exercise any of these rights, contact us at [email protected].
9Data Security
We implement industry-standard security measures including encryption in transit (TLS/HTTPS), encrypted storage for sensitive data, and regular security audits. However, no method of transmission over the internet or electronic storage is 100% secure. We encourage you to use a strong, unique password and to contact us immediately if you suspect any unauthorized access to your account.
10Children's Privacy
Our Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will take steps to delete it.
11Third-Party Links
Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.
12Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of our Services after any changes constitutes your acceptance of the updated policy.
13Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
This Privacy Policy was last updated on May 24, 2026.
© 2026 COSCO Bus Services. All rights reserved.