The short version
- Timetables, the map, roads, walks, weather and help need no account, and we don't know who you are.
- Your location never leaves your phone.
- No adverts, no tracking, no analytics company and no cookies. We count visits as anonymous daily totals, and you can turn that off.
- To book, we keep what the operator needs to do the job, and remove your personal details 12 months after the trip.
- You can download everything we hold about your account, and delete it, from the app.
Who we are
TransportHub St Helena is run by NexTech St. Helena Ltd, on St Helena, which decides how your information is used (the "controller"). For anything about your data, or to use any of your rights, email solutions@nextechsthelena.com.
Using it without an account
Most of TransportHub needs no account. We collect nothing that identifies you. What happens:
- Counting visits. Each day, your phone adds one to an anonymous total, and to the screens it opened. No times, no location, no internet address, no device ID. Turn it off in Account → Count my visits. It is already off if your browser sends Global Privacy Control or Do Not Track.
- Alerts. If you turn on flight or road alerts, we keep the alert address your browser gives us, the two keys that encrypt messages to it, and which alerts you want. If you choose alerts only for your buses, also the stop names and route numbers you chose. Nothing else: no name, email or location. A back-to-ship reminder adds which ship visit, and is cleared the day after.
- Your location, if you tap "Locate me" on the map, is used on your phone to find the nearest stop. We never receive it.
- On your phone only: your settings and appearance, your buses, your My Trip plan (the flights you choose, walks you add, a cruise visit), and copies of the timetables, notices and weather for when there is no signal. See cookies and storage for the full list.
With an account
You need an account only to book a taxi, hire car, boat trip or airport ride. You sign in with a code sent to your email; there is no password.
| What | Why | Who can see it | Kept |
|---|---|---|---|
| Email address, when you signed in | Signing in; booking emails | You; NexTech | Until you delete your account |
| Name, and a phone number if you give one | So the operator knows who to expect | You; operators you book; NexTech | Until you delete your account |
| Saved places (Home, Work, Other) | Quicker booking | You only | Until you delete them, or your account |
| Bookings: what, when, where from and to, how many people (and children, swimmers or bags), your flight for an airport ride, any note | To arrange what you asked for | You; the operator you booked; NexTech | Personal details: 12 months after the trip, then removed. The booking stays, identifying no one, for service reports |
| Which days you used the app (not when, or where) | To know how many people really use it | NexTech, as counts | 13 months |
Children: a booking records how many children travel, never who they are. Notes are free text: please don't put medical or other sensitive details in them. They are cleared with the rest after 12 months.
If you run a business on TransportHub
We keep your business name, contact email and phone, licence number, and the names of your drivers and details of your vehicles and trips. Your listing is public; the rest is seen by your business and by NexTech. It is kept while you are listed, and deleted when you ask.
This website and the boards
- This website sets no cookies, has no analytics, and loads nothing from anyone else: its fonts and code are served from here. Our host, Netlify, keeps request logs, which include your internet address, to run and protect the service.
- Boards on screens at the airport, the Tourist Office or bus stops collect nothing. They have no camera or microphone access, need no sign-in, and are not counted as visitors.
Who sees your information
- The operator you book sees your name, contact details and the booking, to do the job.
- NexTech staff who run TransportHub, to keep it working and sort out problems. Every change to a booking is recorded with who made it.
- Other travellers never do. Sharing an airport car, your driver sees your pickup; the others in the car don't see you.
We never sell your information, and never use it for advertising.
Who helps us run it
These companies process information for us, under our instructions, or see your phone's internet address when it loads something from them:
| Who | What they get | Where |
|---|---|---|
| Supabase | The database and sign-in: everything in "With an account". Its sign-in logs record internet addresses | London (Supabase Inc. is a US company) |
| Netlify | Hosts the app and this website, and runs the server functions for emails, alerts, road notices and weather. Request logs hold internet addresses | Global network; functions in the USA |
| Resend | Booking emails: recipient addresses and the booking details in them | USA |
| Google, Apple, Mozilla, Microsoft | Deliver alerts you turned on. Each alert is encrypted for your phone; they can't read it | Mainly USA |
| OpenStreetMap | Map images, so roughly which area you are looking at, and your internet address | UK and Europe |
| Google Fonts, unpkg, jsDelivr | Your internet address, when the app first loads its fonts and two code libraries (not this website) | Global networks |
| project-osrm.org | Only the bus routes' own coordinates, to draw them on the map; your internet address | Germany |
St Helena Government's website, MET Norway, Open-Meteo and Flightradar24 are read by our server, never by your phone, and receive nothing about you. Some of the companies above are outside St Helena and the UK, mainly in the USA.
Why, and on what basis
| What for | Basis (UK GDPR, our standard) |
|---|---|
| Arranging the bookings you ask for, and the emails about them | Contract: you asked us to |
| Keeping the service safe and working, and sorting out problems | Legitimate interests |
| Counting visits anonymously; the days an account used the app | Not personal data; legitimate interests, and you can turn it off |
| Flight and road alerts | Your consent: you turn them on, and off at any time |
| Service reports to St Helena Government and operators | Legitimate interests, from bookings with personal details removed, or as counts |
How long we keep it
- Personal details on a booking: 12 months after the trip, then removed automatically. The booking stays, identifying no one.
- The days you used the app: 13 months.
- Booking emails waiting to send: 30 days. Alerts waiting to send: 3 days.
- Your account: until you delete it.
Your rights
- See all of it: in the app, Account → Download my data.
- Delete it: Account → Delete my account. Past bookings stay with the operator, no longer linked to you, until their 12 months are up. Bookings still to come must be cancelled first.
- Correct it, restrict it or object: email solutions@nextechsthelena.com.
- Stop alerts or counting: turn them off in the app, at any time.
We answer within a month. If you aren't happy with our answer, you can complain to St Helena Government.
The law on St Helena
St Helena has no data protection law in force yet. We follow the principles of the UK GDPR, as St Helena Government does, and our database is in London.
Keeping it safe
Strict rules decide who may see and change each record, and they are checked before every update. There are no passwords to steal, alerts are encrypted end to end, and the app runs only its own code. More on security.
Changes to this notice
When we change what we keep or who sees it, we update this notice and the one in the app, and change the date at the top. If a change matters to people with accounts, we tell them in the app first.