Location and data in TuJu

What the authority said

On 22 October 2026, LLM deputy director-general (operations) Dr Mohammed Ridzuan Jahidin said TuJu's focus is providing traffic information, not collecting user data. Malay Mail reported the line this way: the app is there to supply a live traffic picture, instead of depending on data that users contribute. That is the design claim, and it is the claim people repeat when they compare TuJu with Waze.

It is not the only public text. The product site still lists checked community contributions among its sources, alongside LLM, operators, and roadside devices. "We do not depend on driver reports" and "we accept vetted community input" can both be partly true. Neither sentence is a full privacy policy.

What the stores disclose

Google Play's data-safety section, in the listing examined for this guide, said the app may share location with third parties, and may collect location, personal information, and other data types. It also said data is encrypted in transit, and that you can request deletion. Those labels are written by the developer and can change. Read the live Play page before you install.

Apple's listing carries the standard warning that the app may use your location even when it is not open, which drains battery and is also a data fact. Background location means a trail can exist when you think the app is idle. Set the permission to While Using if you do not want that, and check Settings after the first trip because the prompt can be easy to accept in a hurry.

The in-app notice

SoyaCincau, after logging in on iPhone, described a permission notice. In their account it said the app tracks location, motion, and usage behaviour, which may be shared with a Malaysian government body for road-user analysis and product improvement. They also said the notice listed a long set of further categories: product interaction, precise and approximate location, name, email, phone number, physical address, device and user identifiers, advertising data, and payment or fraud-related fields.

That is a reporter's reading of a screen, not a copy of a contract we hold. The categories are broad enough that you should read the actual notice on your phone and decide. A navigation app needs a location to navigate. It does not, on the face of it, need payment-fraud fields in order to show you a camera. If the screen in your build still lists those fields, treat that as the operator's own disclosure and ask them, at the feedback address, which of those categories they actually collect.

One legal point the same article raised, correctly as a matter of the statute's text: Malaysia's Personal Data Protection Act 2010, section 3, does not apply the Act to the Federal and State Governments. LLM is a federal agency. Prosignal Consortium Sdn Bhd is a company in the joint venture. This guide is not a legal opinion on which entity is the data user for any given field. The practical step is the same either way. Read the notice. Limit the phone permissions. Ask for deletion if the store says you can.

Controls you actually have

• Install only from Google Play or the App Store, so you are talking to the official build and not a copy that added its own trackers.
• On iPhone, set Location to While Using if you do not want a background trail. On Android, use Settings, Apps, TuJu, Permissions, and turn off anything you will not use.
• Sign in with an account you can later recover or delete. The tested iPhone build would not navigate without one.
• If Play says you can request deletion, use the in-app account tools if they exist, and also write to feedback@prosignalconsortium.my.
• Uninstalling removes the app from the phone. It does not, by itself, prove the server forgot you. Ask.

This website's own analytics and ad script are a separate matter. They are described in the site privacy policy. We do not receive your TuJu login.