Privacy Policy — TrainNap
Last updated: 9 August 2026
This Privacy Policy explains what information the TrainNap mobile app (“the app”, “we”, “us”) collects, how it is used, and the choices you have.
- Your location never leaves your phone. It is compared with your destination station on the device and then discarded. We do not upload it, store it, or share it with anyone.
- The app works without an account. If you choose to create one, only your saved commutes are synchronised — station names and the days you travel.
- There is no advertising, no analytics, and no tracking of any kind.
- Searching for a station sends the text you type to OpenStreetMap services, because that is where station data comes from.
Information we collect
Location. The app reads your device’s location while a trip is armed, including while the screen is off and the app is closed. Each reading is compared with your destination and then discarded. Location is never transmitted off your device, never written to any server of ours, and never shared. It is not retained after a trip ends.
Saved commutes. The stations you save, their geometry, and the days and hours you travel are stored on your phone. If you sign in, this — and only this — is copied to your account so it appears on your other devices.
Account details. If you create an account, we store your email address and an encrypted password, or the account identifier your sign-in provider returns. If you use the app without an account, we hold nothing about you at all.
Station searches. When you search for a station, the text you type is sent to the OpenStreetMap services listed below so they can return matching stations. If you use “stations near me”, an approximate position is included in that request so the results are useful.
Diagnostics you choose to send. If you use the feedback link, whatever you write in that form is sent to us, along with your app version and phone model so a report can be acted on. Sending feedback is entirely optional.
How we use information
- To ring an alarm before you reach the station you chose.
- To start that alarm by itself when you leave your usual departure station, if you have set up a two-way commute.
- To show your saved commutes on your other devices, if you have signed in.
- To answer feedback you send us.
We do not use any of it for advertising, profiling, or analytics, and we do not sell it.
Who we share information with (service providers)
- Supabase — hosts accounts and the synchronisation of saved commutes. Used only if you sign in. supabase.com/privacy
- Photon by Komoot and Overpass API — OpenStreetMap services that turn a station name into a location. They receive your search text, and an approximate position when you ask for nearby stations. komoot.com/privacy · osmfoundation.org
- Google — only if you choose “Continue with Google”, in which case Google handles the sign-in and tells us your email address. policies.google.com/privacy
- Google Forms — only if you open the feedback link and submit it.
Your GPS position is not shared with any of them.
Data retention and your choices
- Use the app without an account. Everything stays on your phone, and nothing reaches us.
- Delete a commute in the app and it is removed from your device and from your account.
- Sign out at any time from Settings. Your commutes remain on the phone.
- Delete your account and everything in it — see how to request deletion. Requests are actioned within 30 days.
- Uninstalling removes all data held on the device.
- Location data has no retention period because it is never stored.
Permissions we request
- Location (precise and approximate) — to measure how far you are from your destination.
- Location “Allow all the time” — the alarm has to keep measuring while your screen is off and the app is closed, because that is the point at which you are asleep. This is the only permission setting Android offers for that.
- Notifications — to show the alarm, and the notice confirming a trip is being watched.
- Foreground service (location) — keeps the measurement running for the length of a journey, with a notification visible throughout.
- Foreground service (media playback) — lets the alarm sound play while your phone is locked.
You can refuse or withdraw any of these in Android’s settings. The alarm cannot function without location.
Children
TrainNap is not directed at children and we do not knowingly collect information from children under 13.
Security
Traffic between the app and our service provider is encrypted with HTTPS. Accounts are protected by row-level security, so a signed-in user can reach only their own records. Because your location never leaves the device, there is no store of it anywhere to be breached.
International transfers
If you create an account, your saved commutes are held by Supabase and may be processed on servers outside your country. Appropriate safeguards are applied for transfers out of the European Economic Area. Using the app without an account involves no transfer at all.
Deleting your account
To have your account and all associated data deleted, follow the instructions on the account deletion page, or email the address below. There is no charge, and it does not require the app to be installed.
Changes to this policy
We will update this page if the app’s handling of data changes, and revise the date at the top. Material changes will also be announced in the app.
Contact
For any privacy question or to request deletion of your data, contact: