Privacy Policy

The short version

Stay On Track is local-first. You do not need an account, and the current launch production build does not send your railway progress, session history, or account identity to us. It does send a limited product-analytics event stream to PostHog and crash and diagnostic reports to Sentry. We do not sell personal information, run advertising networks, or use data for cross-service behavioral advertising. We receive information when you choose to email support and may receive ordinary technical request data through website hosting.

Who this policy covers

This policy applies to the Stay On Track website at getstayontrack.app, the Stay On Track mobile application, and support communications. In this policy, “Stay On Track,” “we,” “us,” and “our” mean the operator of the service. You can contact us at contact@getstayontrack.app.

Information we receive

Website information

The website does not currently provide an email signup or waitlist form, so it does not collect email addresses through the site. If you email support, we receive the information you choose to send as described below.

If you email support, we receive your email address, message, attachments, and any other information you choose to include. The app’s feedback composer may add the app version, build number, and operating-system version to the message. We use this information to respond, troubleshoot, and improve support. Your email provider and our mailbox or email service may process the message as part of delivering it.

The website is hosted on Cloudflare Pages. Like most websites, the hosting and security systems may process technical request data, such as an IP address, browser or device information, request time, and security events, to deliver and protect the site. We do not use that information to build an advertising profile.

App information

The app stores your railway progress and preferences on your device. This can include stations discovered, routes, session timestamps, trip history, fare and reputation, achievements, selected train, notification preferences, haptics and distance-unit preferences, onboarding status, and the optional iOS app-blocking preference. These records are not synced to an account or sent to us in the current launch production build.

The app also creates a randomly generated identifier and a small local event log so its local records can be kept separate and diagnosed on the device. When configured in the launch build, PostHog receives a limited product-event taxonomy, such as the selected entry path and feedback category. PostHog autocapture and app-lifecycle capture are disabled. The app uses the SDK’s default device-scoped identifier, but never calls identify() and does not send your name, email address, account identity, session IDs, railway progress, or support-message contents to PostHog.

When configured in the launch build, Sentry receives crash and diagnostic reports. Those reports may include technical app, operating-system, device, stack-trace, and error context needed to diagnose failures. The app does not attach account identity or railway progress to Sentry reports.

Arrival alerts and daily reminders are optional local notifications scheduled by your operating system. They do not require location access, and we do not receive a push token through these features. If you enable iOS app blocking, Apple’s Family Controls framework keeps the selected app and category tokens on your device. Stay On Track receives only a count for its interface; we do not receive the names of selected apps, app usage history, or Screen Time reports.

Information we do not request

The current app does not request or collect, through its normal features, your precise or coarse location, contacts, photos or videos, microphone or audio, health or fitness information, financial or payment information, advertising identifier, browsing history, or biometric information. Please do not put sensitive information in a support message. There are no ads, ad networks, or cross-app tracking technologies in the launch build.

How we use information

• To provide, maintain, secure, and support the website and app.
• To respond to messages you send us and troubleshoot problems.
• To understand product use and improve the service through the limited PostHog analytics described above, and to troubleshoot crashes and reliability issues through Sentry.
• To comply with legal obligations and enforce our agreements.

Legal bases where required

If the GDPR, UK GDPR, or a similar law applies to you, our legal basis depends on the context. We process information to provide a feature or respond to a request you make; for our legitimate interests in operating, securing, supporting, and improving the service where those interests are not overridden by your rights; to comply with legal obligations; or with your consent when consent is required, such as for certain optional analytics or marketing. You can withdraw consent at any time, but withdrawal does not affect processing that already occurred lawfully.

When information is shared

We do not sell personal information and do not share it for cross-context behavioral advertising. We may share limited information with service providers that help us host and secure the website, deliver or manage support email, provide PostHog product analytics, provide Sentry crash diagnostics, or provide another service you request. Those providers may process information only as needed for their services and may be located in countries other than yours. PostHog and Sentry data may be subject to the project settings and retention practices configured in those services.

We may also disclose information when reasonably necessary to comply with law, respond to valid legal process, protect people or the service, investigate abuse, or support a merger, acquisition, or other business transfer. We may disclose information to Apple or Google when a platform feature you choose requires the platform to process it. We do not control those companies’ separate privacy practices.

Remote analytics and crash diagnostics

The current launch release sends limited product events to PostHog and crash diagnostics to Sentry when those services are configured. We do not use either service for advertising, cross-app tracking, or behavioral advertising. The exact retention period can depend on the provider project settings and plan; we review those settings as part of release operations and delete or de-identify data when it is no longer reasonably needed, where practical.

Retention

App progress and settings remain on your device until you delete the app, clear its data, or otherwise remove them through your operating system. Device backups may retain copies under your platform’s backup settings. Support messages and ordinary hosting or security records are retained only for as long as reasonably needed for support, security, legal, accounting, dispute-resolution, or legitimate business purposes, and then deleted or de-identified when practical. PostHog analytics and Sentry diagnostic records are retained only as long as reasonably needed for product analysis, troubleshooting, security, legal, or legitimate business purposes, subject to the applicable provider project settings and plan.

Cookies and technical records

The website does not use advertising or analytics cookies. Your browser and our hosting provider may still create or retain strictly necessary technical records for delivery and security.

Your choices and privacy rights

You can turn notifications and iOS app blocking on or off in the app. You can keep using the core app without either feature. Because launch progress is local-only, we cannot access or delete that progress remotely; delete the app or clear its storage to remove the local copy, subject to any device backup you control.

Depending on where you live, you may have rights to access, know about, correct, delete, export, restrict, or object to the use of personal information, withdraw consent where processing is based on consent, and receive equal service when exercising those rights. California residents may also have rights to opt out of the sale or sharing of personal information and to limit certain uses of sensitive personal information. We do not sell or share personal information for targeted advertising.

To make a privacy request, email contact@getstayontrack.app with “Privacy Request” in the subject and describe what you need. We may ask for information needed to verify the request and may decline or limit a request where the law permits. Please do not send passwords or other sensitive information by email. Where applicable, you may also complain to your local data protection authority.

California-specific disclosures

If the California Consumer Privacy Act applies to us, during the preceding 12 months we may have collected these categories: (1) identifiers and contact information, such as an email address you include in a support message and technical identifiers handled by website hosting, PostHog, or Sentry; and (2) internet or other network activity, such as browser, device, app-interaction, request, crash, and security information. We collect these categories directly from you or receive them through the app, your browser, hosting, and service providers, and use them for support, site delivery, analytics, security, troubleshooting, and legal or business operations. We may disclose them to hosting, security, email, PostHog, and Sentry service providers for those purposes. We have not sold or shared personal information for cross-context behavioral advertising in the preceding 12 months.

International processing

If you contact support or use the app’s remote analytics and crash diagnostics, your information may be processed in the United States or another country where we or a service provider operates. Where required, we use appropriate safeguards for cross-border transfers.

Security

We use reasonable administrative, technical, and organizational measures for the information we handle. No device, email service, network, or storage system is completely secure, so we cannot guarantee absolute security.

Children

Stay On Track is a general-audience service and is not directed to children under 13. We do not knowingly request personal information from children under 13. If you believe a child has sent us personal information, contact us and we will take reasonable steps to delete it as required by applicable law.

Changes to this policy

We may update this policy when our practices, features, providers, or legal obligations change. We will post the revised policy here, update the date above, and provide any additional notice required by law. Your continued use after an update means the revised policy applies to the extent permitted by law.

Questions

Reach us at contact@getstayontrack.app, or visit the Support page.