Terms of Service
Last updated: 3 October 2026
1. Acceptance of Terms
By accessing or using the Malaysia Transit API ("the Service"), you agree to be bound by these Terms of Service. If you do not agree to these terms, please do not use the Service. The Service is provided by Aliff under TechMavie Digital.
2. Description of Service
The Malaysia Transit API provides access to real-time and static transit data for public transportation services across Malaysia, including but not limited to Rapid KL, Rapid Penang, BAS.MY operators, KTM Komuter, MRT, and LRT services.
3. Authentication and Account Management
User authentication and account management for this Service is handled through Google Firebase Authentication. By signing in, you acknowledge and agree to the following:
- Your account is created and managed via Firebase Authentication using Google or GitHub OAuth.
- Firebase stores your basic profile information (email, display name, profile photo) as provided by your OAuth provider.
- Your authentication session is managed securely by Firebase.
- I do not store your OAuth passwords; authentication is handled entirely by Firebase and your chosen provider.
- You are responsible for maintaining the security of your account credentials with your OAuth provider.
4. Free API Access
- API access is free. No payment, credit card or subscription is required.
- Sign in to generate and manage your public and secret API keys.
- Operational rate limits, upstream provider limits and abuse controls apply to keep the shared service available.
- Historical billing records do not determine access or cause active keys to expire.
5. API Key Management
API keys are generated and managed using Firebase Firestore. Your API key security is handled as follows:
- Each account can generate a public key and a secret key for authentication.
- API keys are generated securely and stored as hashed values in Firebase Firestore.
- Your full API key is shown only once upon generation; I do not store the plain-text key.
- Keep secret keys confidential and out of version control. Public keys may be used in browsers and should have allowed origins configured.
- You are responsible for all activity that occurs under your API key.
- If you suspect unauthorized use, you can regenerate your API key from the dashboard.
- Active keys have no billing-related expiry. Regenerating a key invalidates its previous version; inactive keys are not automatically reactivated.
6. Acceptable Use
You agree NOT to:
- Use the Service for any illegal or unauthorized purpose.
- Attempt to disrupt, overload, or impair the Service.
- Resell or redistribute API access without permission.
- Use automated systems to abuse the Service beyond reasonable use.
- Misrepresent the source of transit data in your applications.
7. Data Source Attribution
The transit data provided through this API is sourced from Malaysia's Open Data Portal (data.gov.my) and respective transit operators. When displaying data from this API in your applications, you should acknowledge the original data sources where appropriate.
8. Service Availability
- I strive to maintain high availability but do not guarantee 100% uptime.
- The Service depends on upstream data providers which may experience outages.
- Scheduled maintenance will be announced in advance when possible.
- I am not liable for any losses due to service interruptions.
9. Data Accuracy
While I strive to provide accurate transit information, the data is provided "as is" without warranties. Real-time predictions are estimates and actual arrival times may vary. I am not responsible for any decisions made based on the data provided through this API.
10. Limitation of Liability
To the maximum extent permitted by law, I shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits or revenues, whether incurred directly or indirectly, or any loss of data, use, goodwill, or other intangible losses resulting from your use of the Service.
11. Termination
- You may stop using the Service at any time without cancellation or payment.
- I reserve the right to suspend or terminate access for violations of these terms.
- Upon termination, your API key will be invalidated immediately.
12. Changes to Terms
I may update these Terms of Service from time to time. Continued use of the Service after changes constitutes acceptance of the new terms. Material changes will be communicated via email or dashboard notification.
13. Contact
For questions about these Terms of Service, please .