Who is responsible
RailNow is operated by Nanguoyu. Privacy questions and data-rights requests can be sent to privacy@railnow.app.
Information processed by the service
- Station searches, selected endpoints, timetable requests and journey identifiers needed to return results.
- Coordinates only when you explicitly use a nearby or map-based feature.
- An anonymous device session, security signatures, request timing, error codes and limited operational metadata used to prevent abuse and diagnose reliability.
- Station sequences and timetable context sent to the separate rail-geometry service when RailNow attempts to match a travelled route to open railway data.
Why we process it
Processing is limited to delivering requested transport information, maintaining security, enforcing fair-use limits, diagnosing failures and producing aggregate service-health measurements. RailNow does not sell personal information, run advertising profiles or use third-party advertising SDKs.
Remote Live Activity updates
When you track a journey using Live Activities, the service temporarily stores an encrypted push token, the selected service segments and the compact state needed to update the activity. The token and display update are sent to Apple's Push Notification service (APNs) so the activity can update while the app is not running. A subscription lasts at most eight hours. Active subscription data and its push token are removed when stop or expiry processing completes, with bounded retries for failed final delivery. Opaque markers preventing late requests from restarting an ended activity are retained for eight hours.
App integrity
RailNow uses Apple's App Attest so the service can confirm that a request comes from a genuine, unmodified copy of the app. The app generates a key on your device; the service stores that key's identifier, its public key and a use counter, linked to the anonymous installation identifier. RailNow does not receive a hardware identifier, an Apple ID or an advertising identifier through this process.
Subscriptions
RailNow Pro is purchased through the App Store and billed by Apple. To unlock the part of Pro that runs on the server, remote Live Activity updates, the app sends Apple's signed transaction to the service. The service keeps the product identifier, the expiry date, the StoreKit environment and a one-way hash of Apple's original transaction identifier, linked to the anonymous installation identifier. No payment details, card numbers or billing addresses reach RailNow.
Providers and infrastructure
Cloudflare processes network traffic and hosts the API. Public-transport operators and timetable providers receive the minimum query needed to answer a request. Apple provides MapKit, StoreKit, notifications and Live Activities, under Apple's own privacy terms. OpenStreetMap-derived railway data is used for route geometry.
Retention
Anonymous sessions expire automatically. Detailed security and audit records, including user or query associations, follow a retention policy of 180 days in production. Public transport data versions may be retained permanently and are kept separate from user and device identifiers and personal query or session associations. Aggregate operational counts may also be retained longer.
Your choices and rights
You can deny location or notification access, or delete the app to remove the data it holds on your device. You may contact us to request access, correction, restriction or deletion of server-side information that can reasonably be linked to a request or session.
Children and changes
RailNow is a general transport-information service and is not directed at children for data collection. Material policy changes will be reflected on this page with a new effective date.