Better Tuju

Privacy policy

Effective 23 October 2026 · applies to the Better Tuju app (iPhone beta now, Android planned) and this website

Better Tuju is in beta. We do not collect driving analytics. The personal data we keep on a server is the beta sign-up list from this website, and the small amount our search server needs to keep place search fair for everyone, both described below. We do not sell or share your data for advertising.

Who we are

Better Tuju is an independent navigation app for Malaysia. Questions about this policy: hello@bettertuju.com.

Your account

You sign in with Apple. Better Tuju keeps the identifier Apple provides in your iPhone's Keychain so it can recognise you on this device. In updated app builds, your Apple-provided email address (which may be a private relay address) and your name when available are also sent to our search server for the private usage report described below. Older builds continue to use a private identifier without sending a name or collecting email for that report. Saved places and preferences have no cloud sync in this beta. To use place search, the app proves to our search server that you signed in with Apple; see "Our search server" below.

You can sign out, or delete the local account and its data, in Settings. To remove Better Tuju's access to your Apple Account, use Sign in with Apple in your Apple Account settings.

Location

Better Tuju uses your precise location to plan routes, guide your drive and show your current speed. Your speed is shown only to you and is not uploaded. During an active trip, location updates can continue while the screen is locked; ending the trip stops guidance.

Maps, search and navigation (Google)

Maps, place search, routes, live traffic and turn-by-turn guidance are provided by Google Maps Platform. To provide them, your device sends Google your location and your route, and place searches go to Google through our search server (below), which passes on your search text, your approximate position for nearby results, the places you open and, for stops along a trip, your route. Google's handling of this data is described in the Google Privacy Policy, and your use of Google's maps is subject to the Google Maps terms. Google's navigation terms are shown before navigation begins.

Our search server

Place search (suggestions as you type, place details, full searches and stops along your route) goes through a small server we run on Cloudflare. It holds our Google key so the key isn't in the app, and it limits how many searches each person and the whole app can make in a day.

• What it keeps: a one-way, keyed hash of the user identifier Apple gives us when you sign in (never the identifier itself); a profile containing your Apple-provided email and your name when available, so an authorised administrator can recognise you in the private usage report; sign-in tokens that let the app stay signed in, stored only as one-way hashes; and daily counts of search API requests, grouped by type of request and whether it succeeded, failed or was limited, filed under that hash. We link these counts to your profile to understand use, diagnose failures and limit abuse. Your name is a display label, not proof of identity. We do not use it or your email for marketing.
• What it doesn't keep: your search text, your location, the places you look up and your route are passed to Google to answer the search and are not stored or written to our logs. Our logs record only that a request happened and whether it worked.
• Deleting it: signing out or deleting your account in the app (Settings) ends that sign-in and earlier sign-ins and deletes past daily counts. Your name and email are deleted when no newer sign-in remains. Today's counts are retained under the private identifier until the daily cleanup removes them with the other daily counts. If the app can't reach the server at that moment, the data expires as described next.
• How long otherwise: daily search counts are deleted after 7 days. The app gets a new sign-in token each time it renews its session; each token expires 90 days after it was issued and is deleted within a day of expiring. Profiles with no valid sign-in are deleted by the same daily cleanup. If you stop using Better Tuju, the remaining records are removed within 91 days of your last session renewal.
• Help: use sign-out or account deletion in the app to remove your records, or email hello@bettertuju.com with questions.

Highway cameras

Camera images are loaded by your device directly from the public website of Lembaga Lebuhraya Malaysia (LLM). Better Tuju keeps the list of camera locations on your iPhone for up to 7 days, and recent images for no longer than the source allows (at most one minute). Nothing is sent to Better Tuju.

What stays on your iPhone

• Your saved places (Home, Work and other labels) and route preferences.
• The cached camera list and recent camera images described above.
• A route diagnostic report, only if you choose to copy one after a routing error. It contains no coordinates, destinations or account details, and it is not sent anywhere unless you paste it yourself.

What we don't do

• No driving analytics, speed uploads or location history on our servers. Searches are passed to Google, not kept.
• No advertising, tracking across apps, or sale of personal data.

If we later offer optional, aggregated driving-data contribution, it will come with its own explanation and choice, and it will be off unless you turn it on. This policy will be updated first.

Beta sign-up on our website

The iPhone beta comes first; an Android version is planned. If you sign up on this website to be invited to a beta:

• What we collect: your email address, the platform you chose (iPhone or Android), your name if you choose to give it, when you signed up, and which page of this site the form was on. To stop abuse we also keep a one-way, salted hash of your IP address (for IPv6, of its network part), never the address itself, and delete that hash after 30 days.
• Where it is kept: in a database run for us by Cloudflare, which also hosts this website. If the form shows a Cloudflare Turnstile check, Cloudflare processes information from your browser to tell people from bots, as described in the Cloudflare Privacy Policy. A copy of each new sign-up (your email, name and platform) also goes to the internal tools our team uses to run the beta.
• Why: for iPhone sign-ups, to invite you to the beta through Apple TestFlight. We give Apple your email address, and Apple emails you the invitation. For Android sign-ups, to email you when Android is ready. We don't use your sign-up for anything else, send newsletters or share it with anyone else.
• How long: until the beta you signed up for ends (for Android, until we have told you it is ready), then we delete it. After you are invited, Apple keeps your tester record in TestFlight until you leave the beta or we remove you.
• Deleting it: email hello@bettertuju.com from the address you signed up with, and we will delete your sign-up, including the copy in our internal tools, and remove you as a tester. You can also stop testing at any time in the TestFlight app.

TestFlight

If you test Better Tuju through Apple's TestFlight, Apple may share crash reports, usage information and any feedback you send with us, as described in Apple's TestFlight terms and privacy policy.

Children

Better Tuju is a driving app and is not intended for children.

Changes

We will update this page when our practices change, and change the effective date above.