BorderCheck Privacy Policy
Effective 3 November 2026
Who operates BorderCheck
BorderCheck is operated by Rainforest Studio. It is an independent travel information service and is not affiliated with any immigration authority, transport operator, or government agency.
Information handled by the app
- On your device: selected checkpoint and direction, camera favourites, local report drafts, language preference, and an anonymous publishing session token.
- When you publish a report: checkpoint, direction, travel mode, observation time, report type, score, estimated minutes, completion status, selected place, and any optional note you enter.
- Optional report photos: photos are resized and re-encoded on your device. You review the preview before uploading. Faces and plates are not automatically masked. Only the prepared JPEG is uploaded; the selected original is not retained by BorderCheck.
- When you rate a money changer: the merchant, four 1–5 ratings, an optional note, and the anonymous publishing session used to prevent duplicate ratings.
- Optional crossing timer: only after you start the timer, precise coordinates are used on your device to recognise fixed entry, bridge, and exit zones. Coordinates stay on the device and are not sent to or stored by BorderCheck. The service receives only corridor, direction, zone IDs, timestamps, an accuracy category, app version, and a random installation identifier that the server immediately hashes.
- Service operation: our hosting provider may process ordinary network and diagnostic information needed to deliver and protect the service.
- Advertising: the Google Mobile Ads SDK may automatically collect and share IP address, user product interactions, diagnostic information, and device or account identifiers for advertising, analytics, and fraud prevention.
Location is requested when you run the optional crossing timer or take a chat photo. An active timer may continue receiving location in the background until you finish, cancel, or the route is completed automatically. Raw timer coordinates remain on the device. Refusing location leaves maps and cameras available. The internal build uses Google's official sample ad identifiers, which display test ads and do not generate advertising revenue.
Current public release
Versions with programme advertising disabled do not initialize Google Mobile Ads or request ads. Ad-enabled versions use Google AdMob banners and the consent controls described below. Tools and Offers may display merchant advertisements fetched from BorderCheck’s server, including images, links and scheduled availability. BorderCheck does not record merchant-ad clicks in a separate analytics database; opening a merchant link sends you to that merchant’s website. Recruitment examples are labelled as such. Dedicated app-review accounts use isolated camera demonstrations; their content is not published to public feeds.
Data licences
Map data © OpenStreetMap contributors, under ODbL. Contains LTA Traffic Images, Traffic Speed Bands and NEA two-hour forecast information under the Singapore Open Data Licence 1.0. Malaysia fuel data from data.gov.my / Ministry of Finance is provided under CC BY 4.0. App timestamps show current data freshness. Traffic interpretations are BorderCheck estimates, not official advice.
Advertising consent
Ad-enabled versions request non-personalized ads. BorderCheck does not provide checkpoint coordinates, community messages, photos, or interest keywords to Google for ad targeting. Non-personalized ads may still use approximate location derived from IP address and identifiers for frequency limits, reporting and fraud prevention; they are not data-free advertising.
At launch, Google's User Messaging Platform checks whether a consent message is required. BorderCheck requests an ad only after the platform reports that ads may be requested. Where required, the Tools page provides an “Ad privacy choices” entry so you can view or change your Google advertising consent choices. Ad-enabled public versions use the publisher’s production AdMob identifiers. Test builds use Google sample identifiers and do not generate revenue.
Public reports and purpose
Published reports are visible to other users under a random anonymous author ID. Do not put names, phone numbers, vehicle plates, or other personal information in an optional note. We use reports to show recent border conditions, reduce duplicate submissions, moderate abuse, and diagnose service problems.
Crossing Chat (when enabled)
Reading does not require an account. Guests receive a generated identity and may post five texts per UTC+8 day. Registration uses a username, public nickname and password. Registered users earn capped contribution points for helpful answers, confirmed reports and eligible timings. These report/timing records are associated with the signed-in account for rewards; contribution and deduplication records remain until account deletion, without retaining message text beyond its normal expiry. Passwords are salted and hashed; session tokens are stored securely on your device. We store rule acceptance, messages, replies, reports and your blocked-user list. Text is public for up to seven days. Photos require immediate camera capture in designated areas and review before publication. Location, accuracy and time are sent for eligibility checks; exact coordinates are not written to the chat database. Photos stop being accessible after 24 hours and are removed from active storage by cleanup every minute and at startup, including pending photos. Delete your messages or your account from the chat account menu. Blocking hides an account for you; administrators can remove content or ban accounts.
Money changer ratings
Ratings are shown only as combined results after at least five anonymous users have contributed. Optional rating notes are not displayed publicly during the beta and are used only for moderation and service review. Sponsorship is stored and labelled separately from user ratings. Do not include personal or payment information in a note.
Affiliate links
The Offers page includes clearly labelled Trip.com affiliate links and clearly labelled Airalo affiliate links. If you complete an eligible booking or purchase after opening one of these links, Rainforest Studio may receive a commission without increasing your price. Booking, purchase, and payment take place with the partner; BorderCheck does not receive your booking or payment details. Airalo code BORDERCHECK15 provides 15% off for new users only, while BORDERCHECK10 provides 10% off for all users. Both Airalo offers are valid until 30 June 2027.
Retention and deletion
Public reports and their processed photos remain visible for at most 24 hours and can be deleted earlier by their author. Expired or deleted photo files are permanently removed from active storage. Users must review the preview and avoid exposing private details before publishing. Report photos are not used for model training, advertising profiles, or long-term backups. Raw anonymous crossing-session records are deleted after 30 days; de-identified aggregate duration statistics may be retained.
Sources and service providers
Traffic speed bands and camera data come from LTA/data.gov.sg; Malaysia camera pages are opened on the official LLM website; LLM images are not republished by the current service. Availability and update times depend on those providers. Animated traffic and camera-derived congestion are BorderCheck visualisations or estimates, not official advisories. BorderCheck is independent and is not endorsed by LTA, LLM, MBJB, or any border authority. Train information links to official operator pages. Opening an external link is governed by that provider's privacy terms. The beta backend is hosted on Railway in a Singapore region. Programme advertising and consent services are provided by Google.
Sharing and security
We do not sell personal information. Information may be shared with Railway and Google as described above, when required by law, or to protect users and the service. The Mobile Ads SDK states that collected data is encrypted in transit. We also use HTTPS, hashed publishing tokens, access controls, and moderation tools, but no online service can guarantee absolute security.
Changes and contact
We will update this page before materially changing data collection, location use, analytics, or advertising. Questions or privacy requests: contact@rainforeststudio.my.
BorderCheck 隐私政策
生效日期:2026 年 11 月 3 日
营运者
BorderCheck 由 Rainforest Studio 营运。本应用是独立出行资讯服务,与任何移民机关、运输营运商或政府机构均无隶属关系。
应用处理的资料
- 保存在装置:所选关卡与方向、摄影机收藏、本地路报草稿、语言偏好,以及匿名发布会话令牌。
- 发布路报时:关卡、方向、交通方式、观察时间、报告类型、评分、预计分钟、是否已经完成、所选地点,以及您自愿填写的补充说明。
- 选用路报照片:照片在本机缩小并重新编码。上传前请检查预览。系统不会自动遮挡人脸或车牌。BorderCheck 只上传处理后的 JPEG,不保留所选原图。
- 为兑换商评分时:兑换商、四项 1–5 星评分、选填说明,以及用来避免重复评分的匿名发布会话。
- 选用匿名过关计时:只有在您主动开始计时后,精确坐标才会在本机用于辨认固定的入口、桥面与出口区域。坐标保留在本机,不会传送或储存到 BorderCheck 后台。服务只接收通道、方向、区域编号、时间、精度类别、App 版本,以及由服务器立即散列处理的随机安装编号。
- 服务运作:托管服务商可能处理提供及保护服务所需的一般网络与诊断资料。
- 广告:Google Mobile Ads SDK 可能为广告、分析及防止欺诈而自动收集及分享 IP 位址、用户与产品的互动资料、诊断资料,以及装置或账号识别码。
只有在您主动运行过关计时器或在聊天室拍照时,App 才会要求定位权限。进行中的计时可在后台继续接收定位,直到您完成、取消或系统按路线自动完成;计时器原始坐标只保留在本机。拒绝定位后仍可使用地图与摄影机。内测包使用 Google 官方测试广告编号,只显示测试广告,不会产生广告收入。
当前公开版本
未启用程序广告的版本不会初始化 Google Mobile Ads 或请求广告。启用广告的版本使用 Google AdMob 横幅及下文的同意控制。工具与优惠页可从 BorderCheck 后台读取商家广告图片、链接与排期。BorderCheck 不另行建立商家广告点击分析数据库;点击商家链接后会前往该商家网站。招商示范会明确标示。专用审核账号使用隔离的相机演示,内容不会进入公开动态。
资料许可
地图资料 © OpenStreetMap contributors,采用 ODbL。LTA 摄影机、车速频段及 NEA 两小时天气预报采用新加坡开放数据许可 1.0。马来西亚油价来自 data.gov.my/财政部,采用 CC BY 4.0。更新时间随资料显示;车流解读属于 BorderCheck 估计,并非官方通告。
广告同意
启用广告的版本请求非个性化广告。BorderCheck 不向 Google 提供关卡坐标、社区文字、照片或兴趣关键词用于广告定向。非个性化广告仍可能使用 IP 推断的大致位置,以及用于频次限制、统计和防作弊的标识符,并不代表完全不处理数据。
App 启动时,Google User Messaging Platform 会检查是否需要显示同意讯息。只有当该平台确认可以请求广告后,BorderCheck 才会请求广告。在法规要求的地区,工具页会显示“广告隐私选择”入口,让您查看或更改 Google 广告同意选择。启用广告的公开版本使用发布者的正式 AdMob 编号;测试版本使用 Google 测试编号,不产生收入。
公共路报及用途
发布后的路报会以随机匿名用户编号向其他使用者显示。请勿在补充说明填写姓名、电话号码、车牌或其他个人资料。资料用于显示近期通关情况、避免重复发布、处理滥用及诊断服务问题。
关友聊聊(启用后适用)
浏览无需账号;游客使用系统生成身份,每个新马时间自然日可发五条文字;注册用户使用账号、公开昵称及密码。有效回答、获确认路报与有效计时可获得每日有上限的贡献积分;登录后提交的路报和计时会关联账号用于积分,积分与防重复记录保留至账号删除,但不会因此延长消息正文的保留期。密码经加盐散列处理,会话令牌安全保存在装置。后台保存规则同意记录、消息、回复、举报及个人屏蔽名单。文字最多公开七天。照片须在指定范围内即时拍摄,审核后才公开;拍摄及提交时会传送位置、精度及时间作范围核验,但精确坐标不写入聊天室数据库。照片到达 24 小时即不可访问,并由每分钟及服务启动时运行的清理任务从使用中的储存空间移除,待审核照片也会到期。可在聊天室删除自己的消息,或从账号菜单删除账号与内容。屏蔽仅影响自己的显示;管理员可删帖或封禁账号。同意规则不代表用户内容必然准确或合法。
兑换商评分
至少五名匿名使用者评分后,才会公开显示综合结果。内测期间,评分的选填说明不会公开,只用于内容审核及服务检视。赞助状态会与用户评分分开保存并明确标示。请勿在说明中填写个人或付款资料。
联盟链接
优惠页设有明确标示的 Trip.com 与 Airalo 联盟链接。通过链接完成符合条件的预订或购买后,Rainforest Studio 可能获得佣金,而不会增加您的价格。预订、购买与付款均在合作商家进行;BorderCheck 不会收到您的预订或付款资料。Airalo 优惠码 BORDERCHECK15 仅供新用户享有 15% 优惠,BORDERCHECK10 供所有用户享有 10% 优惠;两项 Airalo 优惠均有效至 2027 年 6 月 30 日。
保存与删除
公共路报及其处理后照片最多显示 24 小时,发布者可以提前删除;过期或删除的照片文件会从使用中的储存空间永久移除。发布前请检查照片预览,避免公开他人私人资料。路报照片不会用于模型训练、广告画像或长期备份。匿名过关计时的原始记录会在 30 天后删除;不含身份的综合通关时间可继续保留。
资料来源与服务商
交通速度频段与摄影机资料来自 LTA/data.gov.sg,马来西亚摄像头会打开 LLM 官方网页,目前服务不再转发 LLM 图片;其可用性与更新时间由有关来源决定。动态车流和根据摄影机作出的拥堵判断属于 BorderCheck 的视觉呈现或估算,并非官方通告。BorderCheck 为独立服务,未获 LTA、LLM、MBJB 或任何边境机关认可或背书。火车资料会链接至营运商官方页面。开启外部链接后适用该服务商的隐私条款。内测后台由 Railway 托管,并设于新加坡区域;程序广告与同意服务由 Google 提供。
分享与安全
我们不会出售个人资料。资料可能按以上说明提供给 Railway 与 Google,也可能在法律要求或保护使用者与服务时提供。Mobile Ads SDK 声明所收集资料会在传输时加密。我们也使用 HTTPS、散列发布令牌、访问控制及审核工具,但任何网上服务均无法保证绝对安全。
更新与联系
若日后对资料收集、定位、分析或广告作出重要改变,我们会更新本页面。如有问题或资料请求,请电邮 contact@rainforeststudio.my。