RailNow

Your data, explained clearly

Privacy Policy

RailNow is designed to work without an account. We collect only what is needed to provide transport information, protect the service and improve reliability.

Last updated 3 September 2026

Who is responsible

RailNow is operated by Nanguoyu. Privacy questions and data-rights requests can be sent to privacy@railnow.app.

Information stored on your device

Favorites, custom place names, recent stations, app preferences, active-journey state and your Journal are stored locally on your Apple device. RailNow does not create a consumer account or upload your Journal for synchronization.

Information processed by the service

  • Station searches, selected endpoints, timetable requests and journey identifiers needed to return results.
  • Coordinates only when you explicitly use a nearby or map-based feature.
  • An anonymous device session, security signatures, request timing, error codes and limited operational metadata used to prevent abuse and diagnose reliability.
  • Station sequences and timetable context sent to the separate rail-geometry service when RailNow attempts to match a travelled route to open railway data.

Why we process it

Processing is limited to delivering requested transport information, maintaining security, enforcing fair-use limits, diagnosing failures and producing aggregate service-health measurements. RailNow does not sell personal information, run advertising profiles or use third-party advertising SDKs.

Providers and infrastructure

Cloudflare processes network traffic and hosts the API. Public-transport operators and timetable providers receive the minimum query needed to answer a request. Apple provides MapKit, StoreKit, notifications and Live Activities under Apple's own privacy terms. OpenStreetMap-derived railway data is used for route geometry.

Retention

Anonymous sessions expire automatically. Detailed security and audit records are retained for up to 90 days in production unless a longer period is required to investigate abuse or comply with law. Aggregate operational counts and public timetable observations may be retained longer because they are not used to identify an app user.

Your choices and rights

You can deny location or notification access, remove favorites and Journal records in the app, or delete the app to remove local data. You may contact us to request access, correction, restriction or deletion of server-side information that can reasonably be linked to a request or session.

Children and changes

RailNow is a general transport-information service and is not directed at children for data collection. Material policy changes will be reflected on this page with a new effective date.