Train TRACK Privacy Policy

Effective September 16, 2026 · Withamedia LLC

This policy explains how Train TRACK handles information in its app, related account services, advertiser portal and support communications. Train TRACK provides informational railroad-crossing reports; it does not guarantee crossing conditions or safety.

Account and authentication information

We process account identifiers, authentication/session information, email addresses and names supplied through account creation or sign-in. Mobile sign-in supports Apple and Google. Apple users may choose a private relay email address; we receive that address instead of their personal email when Apple supplies it. Apple may provide a name only during initial authorization. Guest use can create an anonymous authentication account with an assigned identifier; "guest" does not mean that all activity is anonymous.

Where offered by our related services, email/password or magic-link sign-in is handled through our authentication infrastructure. The current mobile sign-in screen offers Apple and Google, not a password form. We use account information to authenticate users, synchronize their choices, control access and protect the service.

Location and crossing reports

With device permission, the app uses location to display nearby crossings and check whether a report or confirmation is within approximately one-quarter mile of a crossing. Coordinates are transmitted to the backend to service nearby-crossing and proximity-validation requests. Report records store the selected crossing's coordinates, status, time and account association, rather than writing the submitted raw GPS coordinates into the report record. This is not a promise that network services never process or log location-related requests.

Reports and confirmations contribute to information shown to other users. A report can reveal that its contributor was near a particular crossing at a particular time. Crossing data and associated pseudonymous identifiers should not be treated as private or anonymous merely because email addresses are not displayed.

The map loads OpenStreetMap tiles and Leaflet assets from external services. Those providers receive network requests, including IP and device/browser information; tile requests identify the displayed map area and can correspond to your location. See the OpenStreetMap Foundation privacy policy. You can change location permission in device settings; proximity-dependent reporting may then be unavailable. Train TRACK does not use background location.

Saved crossings, commutes and notifications

We store followed crossings, saved place labels/addresses, commute endpoints and preferences, schedules where used, and notification choices associated with your account. Some information is cached on your device. Saved home/work addresses and commute choices can reveal personal places even without a GPS history.

If notifications are enabled, we process push tokens, platform/account bindings, preferences, alert-delivery records and related operational information. Expo's push service and Apple Push Notification service help deliver iOS notifications. Delivery can be delayed or fail. You can manage app preferences and device notification permission separately.

Plus purchases

Apple processes App Store subscription payments. We receive and retain purchase-verification information such as product and transaction identifiers, a random account-linking token, subscription status, renewal status and expiry information to provide and restore Plus and protect purchase ownership. The app does not collect your full payment-card details for Apple subscriptions. Deleting a Train TRACK account does not cancel an Apple subscription. Manage it through Apple subscription settings.

Eggs-Press

We process game profiles, chosen display names, online runs and scores, and information needed to validate results. Eligible submitted leaderboard names and scores are public. Choose a nickname if you do not want your real name shown. Reports and hidden-player preferences support moderation. Some game preferences and scores are stored on the device.

Train TRACK displays local advertising and game scenery billboards. Free users may voluntarily choose a local sponsor video; successful completion can grant one extra Eggs-Press egg. Videos are not automatically offered as a mandatory activity, and there is no Google advertising or Google rewarded-video fallback in Train TRACK. Plus removes display ads on Map/Home and My Crossings and provides one free bonus egg per run without video; game scenery billboards remain.

We process campaign/creative identifiers, impression and click events, timestamps, a pseudonymous installation identifier/hash, and campaign-specific HMAC-derived account/session identifiers to deliver and measure ads, count views and unique viewers, and administer campaign budgets. Rewarded-video sessions include account-linked progress/completion information to validate the reward. These identifiers are pseudonymous, not a guarantee of anonymity. Advertisers receive aggregate counts such as Views, Unique viewers and Remaining views, not viewer identities.

Our advertising system does not combine these records with activity from other companies' apps or websites for targeted advertising or advertising measurement. Following an advertiser's external website, call or directions link connects you to that destination, whose own practices apply.

Advertisers and support

For advertiser services, we process business/contact details, account and invitation information, campaign orders, uploaded artwork/video, destination links, approval information and delivery totals. Advertiser checkout uses Stripe; this is separate from consumer Plus purchases through Apple.

If you contact us, we process the information in your message to respond. Support and advertising email use Resend infrastructure and forwarding to Withamedia LLC’s Google/Gmail mailbox. Do not send passwords, payment-card details or unnecessary sensitive information.

Service providers and operational records

Supabase provides authentication, database, storage and backend services. Other services include Expo/Apple for push, Apple and Google for sign-in, Apple for consumer in-app purchases, Resend/Google for relevant email, Stripe for advertiser checkout, Vercel for our public and advertiser websites, and OpenStreetMap/UNPKG and their delivery infrastructure for map resources. Providers process relevant data needed to supply their services and may maintain security or operational logs under their own terms. These arrangements can involve processing outside your country.

We and our providers process operational/security information to run the service, investigate failures, prevent abuse and support accounts. This can include request metadata, IP addresses, device/platform information, timestamps and error/delivery records. This policy does not promise that all such information disappears when a report expires.

Retention and deletion

Different records have different lifecycles. Account information and saved choices are retained while used to provide the service. Report freshness windows, expiring ad tokens and signed-media links control usefulness or access; they are not automatic deletion schedules. No single fixed retention period applies to all information, and we do not apply an automatic age-based purge across all records.

Normal and guest accounts can initiate deletion in Account → Delete account. The implemented flow removes user-owned cloud data, follows, commutes, preferences and push bindings, deletes the authentication identity/session, and clears relevant local account data. Report author/resolver associations are removed while crossing evidence is retained for system integrity. Limited aggregate advertising totals, pseudonymous display-measurement records, deletion/retry receipts and other operational records can remain. Apple purchase records retain a random token and transaction history after the Train TRACK account association is detached; this is not deletion of Apple's records.

Advertisers can initiate deletion through Account → Delete account in the advertiser portal or through the app. We remove the personal login and sessions, revoke portal access, and deidentify invitation and email-based access records. Business profiles and contact details, campaign content and assets, orders, purchased or complimentary allowances, delivery history, and accounting records transfer to a non-login system record. They remain available to authorized administrators for operating campaigns, accounting, fraud prevention, audit and service integrity. Active campaigns may continue. A new account does not automatically regain ownership of retained business records. Administrators must transfer their role before deleting their personal account.

We retain limited operational, security, pseudonymous measurement, accounting and legal records as reasonably necessary for security, fraud prevention, accounting, legal obligations and operation of the service. Support messages, provider logs and backups have separate lifecycles; deleting an account does not immediately erase every backup, message or aggregate record. Contact us about information outside the self-service deletion flow, including personal information in retained advertising content.

Your choices and requests

You can control device permissions, manage followed crossings and notification preferences, choose whether to view a sponsor video, and initiate account deletion. Contact support@gettraintrack.com for access, correction, deletion or privacy questions. Depending on where you live, you may have additional rights to access, correct or delete personal information, subject to applicable exceptions. We may need to verify that a request concerns your account.

Audience

Train TRACK is a general-audience service and is not specifically directed to children. Initial App Store availability is intended for the United States. If you believe a child has provided personal information that needs our attention, contact support@gettraintrack.com.

Policy updates

We may update this policy as the service changes. The published page will show its effective date. Material changes will be handled as required by applicable law.