Transparency
Who we work with
LAPAN Nav is built by one Malaysian, on top of a few trusted global providers. Here is every company that touches LAPAN Nav, what it does for us, what data it handles, where it comes from — and why we trust it.
Information checked against public sources on 23 October 2026.
Google Cloud & Firebase
🇺🇸 United States
- Company
- Google LLC (Alphabet Inc.), Mountain View, California
- What it does for LAPAN Nav
- Hosts this website and the LAPAN Nav app, runs our servers and database, and handles sign-in.
- Your data it handles
- Waiting-list details (email, name, state, language), and later your account, reports and anonymous traffic data.
- Where data is stored
- Database and servers in Singapore (asia-southeast1), the region closest to Malaysia. Web pages are served from Google's global network.
- Credibility & compliance
- One of the world's largest cloud providers. Firebase services are covered by Google's ISO/IEC 27001 certification and SOC 2 reports, and Google Cloud publishes guidance for Malaysia's PDPA.
Sources: Google Cloud compliance · PDPA Malaysia
- Company
- Mapbox, Inc., Washington, D.C. & San Francisco (since 2010)
- What it does for LAPAN Nav
- Provides the maps, place search and route calculation inside the app.
- Your data it handles
- The map area you view and the places you search or navigate to. It is not given your name or email.
- Credibility & compliance
- Mapping platform used by Strava, Instacart, The Weather Channel and the Financial Times. SOC 2 Type 2 and SOC 3 compliant, with TISAX and ISO 9001 certification.
Sources: Mapbox security · Wikipedia
- Company
- Brevo SAS (formerly Sendinblue), Paris (since 2012)
- What it does for LAPAN Nav
- Sends our emails — your waiting-list confirmation and launch news.
- Your data it handles
- Your email, name, state, language, driving use and referral code.
- Where data is stored
- European Union.
- Credibility & compliance
- European email platform serving over 500,000 businesses in 180 countries. ISO/IEC 27001:2022 certified and bound by the EU's GDPR, one of the world's strictest privacy laws.
Sources: Brevo legal · Wikipedia
Spaceship & Spacemail
🇺🇸 United States
- Company
- Spaceship, a Namecheap, Inc. company, Phoenix, Arizona (Namecheap since 2000)
- What it does for LAPAN Nav
- Registers the lapan-nav.com domain, runs its DNS, and hosts our ask@lapan-nav.com mailbox.
- Your data it handles
- Only emails you send to ask@lapan-nav.com.
- Credibility & compliance
- ICANN-accredited domain registrar, part of Namecheap — one of the world's largest registrars, operating since 2000.
Sources: Spaceship · Wikipedia
Google Gemini Planned
🇺🇸 United States
- Company
- Google LLC (Alphabet Inc.), Mountain View, California
- What it does for LAPAN Nav
- Will power optional hands-free reporting: you say “accident on the left lane”, and it turns that into a report for you to confirm.
- Your data it handles
- Only the words you speak to report, and only if you switch the feature on. Not active yet.
Compliance
The rules LAPAN Nav follows itself — on top of the certifications our providers hold.
⚖️ Malaysia PDPA 2010 (amended 2024)
Privacy notice in Bahasa Melayu and English, clear consent, and your rights to access, correct, delete and move your data (data portability). If a personal data breach ever happens, we will notify the Personal Data Protection Commissioner and affected users as the law requires.
🌏 Cross-border transfers
Some data is processed in Singapore, the EU and the US. We only use providers with strong security certifications and data-processing agreements, as the PDPA's transfer rules require.
✉️ Email you asked for
Double opt-in: you confirm before we send anything else. Every email has a one-tap unsubscribe link.
🔒 Secure by default
HTTPS everywhere, no ads, no trackers. The app runs inside your browser's security sandbox and only gets permissions you allow.
🚗 Road safety
Designed for mounted, hands-free use in line with Malaysian road rules on mobile phones: voice-first, typing locked while moving, and no distracting pop-ups while driving.
♿ Accessibility
We design to WCAG 2.2 AA: readable contrast, large tap targets, screen-reader labels and reduced motion when your phone asks for it.
Sources: Jabatan Perlindungan Data Peribadi · PDPA (Amendment) Act 2024
Things we deliberately don't use
- No advertising or tracking cookies, and no third-party analytics on this website.
- No outside font or script services — our fonts and code are served from our own domain.
- No data brokers. We never sell or rent your data.
If we add or change a provider, we'll update this page first. Questions? Email ask@lapan-nav.com.
