Privacy

Privacy Policy

How Trainfolio collects, uses, protects, and deletes account, journey, device, invite, and railway data.

Summary

Trainfolio collects the information needed to run a personal rail passport: your account, journey records, app settings, friend connections, and railway data you submit or verify. Trainfolio does not sell your personal data.

Who Is Responsible

Trainfolio is an independent app operated by its developer. For privacy requests, use the support route in the app or the support page on this website. A dedicated privacy contact address will be published before public launch.

Information We Collect

Account details such as display name, handle, profile image, sign-in provider, provider account identifier, and verified email where provided by Apple or Google.
Journey records such as stations, dates, times, routes, operators, service identifiers, cancellation or delay details, rolling stock class, unit numbers, mileage, and manually entered corrections.
Cloud sync data such as saved journeys, preferences, friends, invites, leaderboard profile details, and account session records.
Device and app details such as device name, device identifier generated for Trainfolio, app version, and basic request metadata needed for security and troubleshooting.
Rail data reports you submit, including train allocation reports and corrections.
Location information only when you use a feature that needs it, such as nearby stations or live journey context. Trainfolio should not use location in the background unless a feature clearly asks for it.

How We Use Information

To provide the app, cloud sync, account sign-in, journey history, passport cards, stats, maps, and friend features.
To verify identity tokens from Apple or Google and keep private account data behind Trainfolio sessions.
To match journeys against live or historic rail data and improve service, route, and unit allocation accuracy.
To detect abuse, protect accounts, investigate errors, and keep the service reliable.
To respond to support, privacy, deletion, or correction requests.

Lawful Basis

Where UK GDPR or similar laws apply, Trainfolio normally relies on contract to provide the app and cloud account features, legitimate interests to secure and improve the service, consent for optional features where required, and legal obligation where the law requires records to be kept or disclosed.

Sharing

Trainfolio may share data with infrastructure providers that host the app, database, storage, analytics, or security systems. Apple or Google process sign-in information when you choose their sign-in methods. Public or social features may show the profile, handle, stats, journeys, or invite details that you choose to share. Trainfolio may disclose information if required by law or to protect users, the app, or the public.

Retention

Journey records are kept while your account is active so your passport and history remain available. Session, security, diagnostic, and deleted-account records may be kept for a limited period where needed for security, abuse prevention, legal compliance, or backup recovery. You can request deletion of your account and associated personal data, subject to limited records that must or may be kept for legal, security, or operational reasons.

Your Rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data. You may also have the right to complain to a data protection authority. In the UK, that is the Information Commissioner's Office.

Rail Data Accuracy

Trainfolio combines user records with railway data sources that may be incomplete, delayed, changed, or unavailable. Do not rely on Trainfolio as the only source for travel, ticketing, accessibility, safety, or disruption decisions.