Last updated August 10, 2026. This policy describes the current Stay On
Track website and launch app, including what stays on your device,
what we receive when you contact us, and what the current release
configuration does.
The short version
Stay On Track is local-first. You do not need an account, and the
current launch production build does not send your railway progress,
session history, or account identity to us. It does send a limited
product-analytics event stream to PostHog and crash and diagnostic
reports to Sentry. We do not sell personal information, run
advertising networks, or use data for cross-service behavioral
advertising. We receive information when you choose to email
support and may receive ordinary technical request data through
website hosting.
Who this policy covers
This policy applies to the Stay On Track website at
getstayontrack.app, the
Stay On Track mobile application, and support communications. In
this policy, “Stay On Track,” “we,” “us,” and “our” mean the
operator of the service. You can contact us at
hello@getstayontrack.app.
Information we receive
Website information
The current waitlist form is frontend-only: submitting it shows a
local confirmation and does not transmit or store your email address
with us. If we connect that form to an email service, we will update
this policy and the form notice before collecting addresses for that
purpose.
If you email support, we receive your email address, message,
attachments, and any other information you choose to include. The
app’s feedback composer may add the app version, build number, and
operating-system version to the message. We use this information to
respond, troubleshoot, and improve support. Your email provider and
our mailbox or email service may process the message as part of
delivering it.
The website is hosted on Cloudflare Pages. Like most websites, the
hosting and security systems may process technical request data,
such as an IP address, browser or device information, request time,
and security events, to deliver and protect the site. We do not use
that information to build an advertising profile.
App information
The app stores your railway progress and preferences on your device.
This can include stations discovered, routes, session timestamps,
trip history, fare and reputation, achievements, selected train,
notification preferences, haptics and distance-unit preferences,
onboarding status, and the optional iOS app-blocking preference.
These records are not synced to an account or sent to us in the
current launch production build.
The app also creates a randomly generated identifier and a small
local event log so its local records can be kept separate and
diagnosed on the device. When configured in the launch build,
PostHog receives a limited product-event taxonomy, such as the
selected entry path and feedback category. PostHog autocapture and
app-lifecycle capture are disabled. The app uses the SDK’s default
device-scoped identifier, but never calls identify() and does not
send your name, email address, account identity, session IDs,
railway progress, or support-message contents to PostHog.
When configured in the launch build, Sentry receives crash and
diagnostic reports. Those reports may include technical app,
operating-system, device, stack-trace, and error context needed to
diagnose failures. The app does not attach account identity or
railway progress to Sentry reports.
Arrival alerts and daily reminders are optional local notifications
scheduled by your operating system. They do not require location
access, and we do not receive a push token through these features.
If you enable iOS app blocking, Apple’s Family Controls framework
keeps the selected app and category tokens on your device. Stay On
Track receives only a count for its interface; we do not receive the
names of selected apps, app usage history, or Screen Time reports.
Information we do not request
The current app does not request or collect, through its normal
features, your precise or coarse location, contacts, photos or
videos, microphone or audio, health or fitness information,
financial or payment information, advertising identifier, browsing
history, or biometric information. Please do not put sensitive
information in a support message. There are no ads, ad networks, or
cross-app tracking technologies in the launch build.
How we use information
-
To provide, maintain, secure, and support the website and app.
-
To respond to messages you send us and troubleshoot problems.
-
To understand product use and improve the service through the
limited PostHog analytics described above, and to troubleshoot
crashes and reliability issues through Sentry.
-
To comply with legal obligations and enforce our agreements.
Legal bases where required
If the GDPR, UK GDPR, or a similar law applies to you, our legal
basis depends on the context. We process information to provide a
feature or respond to a request you make; for our legitimate
interests in operating, securing, supporting, and improving the
service where those interests are not overridden by your rights; to
comply with legal obligations; or with your consent when consent is
required, such as for certain optional analytics or marketing. You
can withdraw consent at any time, but withdrawal does not affect
processing that already occurred lawfully.
When information is shared
We do not sell personal information and do not share it for
cross-context behavioral advertising. We may share limited
information with service providers that help us host and secure the
website, deliver or manage support email, provide PostHog product
analytics, provide Sentry crash diagnostics, or provide another
service you request. Those providers may process information only as
needed for their services and may be located in countries other than
yours. PostHog and Sentry data may be subject to the project
settings and retention practices configured in those services.
We may also disclose information when reasonably necessary to comply
with law, respond to valid legal process, protect people or the
service, investigate abuse, or support a merger, acquisition, or
other business transfer. We may disclose information to Apple or
Google when a platform feature you choose requires the platform to
process it. We do not control those companies’ separate privacy
practices.
Remote analytics and crash diagnostics
The current launch release sends limited product events to PostHog
and crash diagnostics to Sentry when those services are configured.
We do not use either service for advertising, cross-app tracking, or
behavioral advertising. The exact retention period can depend on the
provider project settings and plan; we review those settings as part
of release operations and delete or de-identify data when it is no
longer reasonably needed, where practical.
Retention
App progress and settings remain on your device until you delete the
app, clear its data, or otherwise remove them through your operating
system. Device backups may retain copies under your platform’s
backup settings. Support messages and ordinary hosting or security
records are retained only for as long as reasonably needed for
support, security, legal, accounting, dispute-resolution, or
legitimate business purposes, and then deleted or de-identified when
practical. PostHog analytics and Sentry diagnostic records are
retained only as long as reasonably needed for product analysis,
troubleshooting, security, legal, or legitimate business purposes,
subject to the applicable provider project settings and plan.
Cookies and technical records
The website does not use advertising or analytics cookies. Your
browser and our hosting provider may still create or retain strictly
necessary technical records for delivery and security.
Your choices and privacy rights
You can turn notifications and iOS app blocking on or off in the
app. You can keep using the core app without either feature. Because
launch progress is local-only, we cannot access or delete that
progress remotely; delete the app or clear its storage to remove the
local copy, subject to any device backup you control.
Depending on where you live, you may have rights to access, know
about, correct, delete, export, restrict, or object to the use of
personal information, withdraw consent where processing is based on
consent, and receive equal service when exercising those rights.
California residents may also have rights to opt out of the sale or
sharing of personal information and to limit certain uses of
sensitive personal information. We do not sell or share personal
information for targeted advertising.
To make a privacy request, email
hello@getstayontrack.app
with “Privacy Request” in the subject and describe what you need. We
may ask for information needed to verify the request and may decline
or limit a request where the law permits. Please do not send
passwords or other sensitive information by email. Where applicable,
you may also complain to your local data protection authority.
California-specific disclosures
If the California Consumer Privacy Act applies to us, during the
preceding 12 months we may have collected these categories: (1)
identifiers and contact information, such as an email address you
include in a support message and technical identifiers handled by
website hosting, PostHog, or Sentry; and (2) internet or other
network activity, such as browser, device, app-interaction, request,
crash, and security information. We collect these categories
directly from you or receive them through the app, your browser,
hosting, and service providers, and use them for support, site
delivery, analytics, security, troubleshooting, and legal or
business operations. We may disclose them to hosting, security,
email, PostHog, and Sentry service providers for those purposes. We
have not sold or shared personal information for cross-context
behavioral advertising in the preceding 12 months.
International processing
If you contact support or use the app’s remote analytics and crash
diagnostics, your information may be processed in the United States
or another country where we or a service provider operates. Where
required, we use appropriate safeguards for cross-border transfers.
Security
We use reasonable administrative, technical, and organizational
measures for the information we handle. No device, email service,
network, or storage system is completely secure, so we cannot
guarantee absolute security.
Children
Stay On Track is a general-audience service and is not directed to
children under 13. We do not knowingly request personal information
from children under 13. If you believe a child has sent us personal
information, contact us and we will take reasonable steps to delete
it as required by applicable law.
Changes to this policy
We may update this policy when our practices, features, providers,
or legal obligations change. We will post the revised policy here,
update the date above, and provide any additional notice required by
law. Your continued use after an update means the revised policy
applies to the extent permitted by law.
Questions
Reach us at
hello@getstayontrack.app, or visit the Support page.