Privacy Policy

We do not collect your data. This page explains exactly what that means.

Effective date: 2026-05-31
Data Not Collected - Apple App Store Privacy Label. TrainAtlas does not collect any data linked to you or used to track you.

Overview

TrainAtlas is built on a simple principle: your railway history is yours. The app is designed to work entirely on your device and on your private iCloud storage. We do not operate accounts, we do not see your trip data, and we do not sell or share any information about you.

This policy covers the TrainAtlas iOS application (bundle ID app.trainatlas.ios) and this website (trainatlas.app).

1. Data we collect

We collect nothing. To be specific:

  • We do not collect your name, email address, or any contact information.
  • We do not collect your location data (the app requests one-time location permission only for "Near me" station search; this data is never transmitted off-device).
  • We do not collect your trip history, routes, or any travel data you enter into the app.
  • We do not collect device identifiers, advertising IDs, or any persistent unique identifiers.
  • We do not use cookies on this website.
  • We do not embed third-party analytics, tracking pixels, or advertising networks anywhere in the app or on this site.

2. Where your data lives

On-device storage

All trip data, settings, and preferences are stored locally on your iPhone using SQLite (via GRDB.swift). This data is backed up as part of your normal iOS device backup if you have iCloud Backup or iTunes Backup enabled. That backup is governed by Apple's terms, not ours.

iCloud sync (Pro feature)

TrainAtlas Pro includes multi-device sync via Apple's CloudKit private database. When enabled, your trip data is stored in your personal iCloud container - a private area of iCloud that only you can read. We cannot access, read, or modify data stored in your CloudKit private database. Apple is the data processor for this storage; their privacy policy applies: apple.com/legal/privacy.

3. Crash reporting (opt-in)

TrainAtlas includes an optional crash reporting SDK (Sentry). This feature is off by default. You must explicitly enable it in Settings to activate it.

If you choose to enable crash reporting:

  • Sentry collects anonymised crash reports including stack traces, OS version, and device model.
  • No trip data, routes, station names, or personally identifiable information is included in crash reports.
  • Crash data is transmitted to Sentry's servers (sentry.io) and is used solely to fix bugs.
  • You can disable crash reporting at any time from Settings - the change takes effect immediately.

Sentry's privacy policy: sentry.io/privacy.

4. In-app purchases

Pro subscriptions and lifetime purchases are processed entirely by Apple via StoreKit 2. We never see your payment information. Apple is the data controller for all transaction data. Apple's privacy policy governs these transactions.

We receive only a non-identifiable confirmation that a purchase was completed - no name, email, or payment details are shared with us.

5. Third parties

The app uses the following third-party services:

  • Apple App Store - distribution, payments, and reviews. Apple Privacy Policy
  • Apple CloudKit - private iCloud sync (Pro only). Same Apple Privacy Policy.
  • Sentry - crash reporting, opt-in only. Sentry Privacy Policy
  • Träwelling - if you choose to import data via OAuth, you authorise Träwelling to share your trip history with the app. This is an explicit user-initiated action. Träwelling's privacy policy governs your data on their service.

We do not use Google Analytics, Firebase, Facebook, Amplitude, Mixpanel, or any advertising networks.

6. Children's privacy

TrainAtlas is rated 4+ on the App Store and is suitable for all ages. We do not knowingly collect information from children. Because we collect no data from any user, there is no special handling required for users under 13 (US COPPA) or under 16 (EU GDPR).

7. Your GDPR rights (EU/EEA/UK users)

Because TrainAtlas does not collect personal data, most GDPR rights are satisfied by design - there is no personal data to access, correct, port, or delete on our end.

Your trip data lives on your device and in your private iCloud. You can:

  • Delete all data - delete the TrainAtlas app from your device. All local data is removed immediately.
  • Access your data - all data is readable within the app. Export will be added in a future update.
  • Remove iCloud data - go to Settings > [your name] > iCloud > Manage Account Storage > TrainAtlas and delete the iCloud data.

If you have GDPR questions, email privacy@trainatlas.app.

8. Your CCPA rights (California users)

We do not sell personal information. We do not share personal information with third parties for cross-context behavioral advertising. California residents have the right to know, delete, and opt-out of sale of personal information - none of which is applicable here as we collect no personal information.

9. This website

The trainatlas.app website is a static site hosted on Cloudflare Pages. It does not set cookies, does not use analytics, and does not embed any third-party scripts. Cloudflare may collect minimal server-level access logs (IP address, request path, timestamp) as part of their hosting infrastructure. This is governed by Cloudflare's privacy policy: cloudflare.com/privacypolicy.

10. Changes to this policy

If we change this policy in a material way, we will update the effective date at the top of this page. We do not have your email address to notify you directly, so changes will be reflected here. If we ever introduce data collection of any kind, we will update this policy before the feature ships and will note clearly what is collected and why.

11. Contact

Privacy questions or requests: privacy@trainatlas.app

We aim to respond within 5 business days.