Privacy, in plain language.
No account means there isn't much to collect. Here's the honest, complete list of what Railora actually does with your data.
Last updated October 2026
There is no account
Railora has no sign-up, no login, no password, no email address tied to a profile. Open the app and it works. There is nothing to create, so no profile about "you" exists anywhere.
Your trips stay on your device
The trains you log, your routes, your history — all of it is stored on your iPhone and synced across your own devices through your private iCloud account. To send you live alerts, my backend only keeps what it needs to watch a train: its number, its stations and its date, attached to your device token — never your name or your history. Separately, each train added is counted once (number, stations, date, operator) with no token or identifier attached, so I can see which lines matter.
Onboard Live Mode reads the train's GPS, not yours
The app never asks for your location permission. When you join a train's onboard Wi-Fi, Railora reads the train's own GPS system and shows that position on your screen. It's displayed on your phone and never sent to any server — Railora has no record of where you've physically been.
Push notifications use a device token, not an identity
To send you a delay alert, Railora needs a way to reach your phone. iOS provides this through Apple's Push Notification service (APNs): every install gets a device token, and that token — not your name, email, or account, because none of those exist — is what my backend uses to deliver a notification.
Friends is opt-in, and stays between you and them
Friends is off until you turn it on. Then my backend keeps the name you chose, an opaque iCloud identifier (not your Apple ID or email) and the list of who you're connected to, so it can tell your friends when your train moves. Remove a friend and the link is deleted; turn Friends off and your profile goes with it.
The website
If you leave your email on railora.app for launch news, I store that email to send you updates — nothing else. Visits are counted with Cloudflare Web Analytics, which sets no cookie and doesn't follow you from site to site. No ad pixels, no tracking cookies. Cloudflare, who hosts the site, may log basic request data (IP, timestamp) for security and reliability, the same as any web server on the internet.
Where live delays come from
Departure times, delays, and platforms come from each operator's own public real-time feed (SNCF, Renfe, SBB, and others). That data describes trains, not passengers — it was never about you.
The full list of third parties
Apple (push notifications, crash reports and the iCloud sync you already control), Cloudflare (hosting, and storage for the usage statistics below), OVH (the server that holds device tokens, the Friends graph and train counts, in France), and each rail operator's public real-time feed. That's the entire list. No third-party analytics SDK, no ad network, no data sold or shared.
Usage statistics
To know which features are worth improving, the app counts how it's used: which screens are opened, which buttons are tapped, which stations are searched (the typed text, lowercased), how trains are added, whether Live Activities start, and crash reports from Apple's MetricKit. These events carry a random identifier created by the app, never linked to your device token, your iCloud account or your trips, and renewed every 13 months. The detailed events are deleted after 3 months; only daily totals with no identifier, and crash reports, are kept. Turn it off anytime in Settings → Share usage statistics, and the identifier is erased.
You're always in control
Delete any trip anytime — its live alerts stop with it. In Settings → Your data, export every trip to a file and import it back whenever you like, delete them all, or use “Delete everything”: trips, Friends profile and everything our servers keep for your notifications. Unsubscribe from the newsletter with one tap in any email it sends.
Questions
Anything unclear? Email us — a real person (Quentin) reads and answers it. contact@quentinaslan.com