How Metro Bus collects, uses, and protects your personal information when you use Colombo's digital Metro bus service.
Effective: March 29, 2026 · Ref: LMT/DM/LTR/2026/008/R00
Metro Bus ("the App") is the official mobile application of Lanka Metro Transit (Pvt) Ltd — Colombo's new digital Metro bus service. The Proof of Concept (PoC) is implemented by EIMSKY Business Solutions Pvt Ltd under the Ministry of Transport, Highways, and Urban Development of Sri Lanka.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Metro Bus on Android or iOS. By using the App, you agree to the practices described here.
Government-backed pilot service. Metro Bus currently operates on selected routes in Colombo under Lanka Metro Transit (Pvt) Ltd, a project of the Ministry of Transport, Highways, and Urban Development. Coverage will expand in the coming months.
We collect the following to provide real-time tracking, journey planning, QR fare payments, and accessibility features:
Name, phone number, and email provided during registration or OTP verification.
QR fare transactions, ticket history, wallet balance, and pass data — viewable offline.
Auto-detected location to find nearby stops, show live bus positions, and plan routes.
Device type, OS version, crash reports, language preference, and app usage patterns.
Wheelchair bay bookings and accessibility preferences for specific trips.
Origin, destination, stop selections, and route queries for journey planning.
Nearby stops, route browsing, timetables, and live bus info are available without creating an account. No personal data is collected for anonymous browsing.
Your information is used solely to operate and improve Metro Bus:
We do not sell, rent, or trade your personal information. Data is shared only in these limited circumstances:
We implement industry-standard security measures at every layer:
All data between Metro Bus and our servers is encrypted via HTTPS/TLS. Sensitive data is encrypted at rest. QR payment flows use secure tokenisation. Role-based access controls ensure only authorised personnel access user data. Active tickets are cryptographically verified for offline use.
No method of transmission or electronic storage is 100% secure. We cannot guarantee absolute security, but we strive to use commercially acceptable means to protect your data.
Metro Bus stores route maps, timetables, fare structures, and active tickets locally on your device for offline access. This data syncs automatically when you reconnect. You can clear locally stored data anytime through your device's application settings.
We retain your personal data for as long as your account is active or as needed to provide services. You may request deletion of your account and data at any time by contacting support@lankametro.lk. Transaction and fare records may be retained for periods required by applicable financial and transport regulations in Sri Lanka.
Metro Bus is not directed at children under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you believe a child has provided us with personal information, please contact support@lankametro.lk immediately and we will promptly delete such information.
Metro Bus may link to third-party websites, including Lanka Metro Transit's portal at lankametro.lk. We are not responsible for the privacy practices of those third parties and encourage you to review their policies before submitting personal information.
As Metro Bus expands — adding tap-and-go, travel card top-ups, lost-and-found services, feedback submission, and coverage on more Colombo routes — this Privacy Policy may be updated. We will notify you of significant changes by updating the date above and, where appropriate, via an in-app notification. Continued use of Metro Bus after changes constitutes acceptance of the revised policy.
Reach out to the Lanka Metro Transit support team for any privacy-related queries or data requests.