Privacy, in plain language.
No account means there isn't much to collect. Here's the honest, complete list of what Railora actually does with your data.
Last updated September 2026
There is no account
Railora has no sign-up, no login, no password, no email address tied to a profile. Open the app and it works. There is nothing to create, so there is nothing about "you" stored anywhere to begin with.
Your trips stay on your device
The trains you log, your routes, your history — all of it is stored on your iPhone and synced across your own devices through your private iCloud account. Railora's servers never see it, never store it, and can't read it.
Onboard Live Mode reads the train's GPS, not yours
The app never asks for your location permission. When you join a train's onboard Wi-Fi, Railora reads the train's own GPS system and shows that position on your screen. It's displayed on your phone and never sent to any server — Railora has no record of where you've physically been.
Push notifications use a device token, not an identity
To send you a delay alert, Railora needs a way to reach your phone. iOS provides this through Apple's Push Notification service (APNs): every install gets a device token, and that token — not your name, email, or account, because none of those exist — is the only thing my backend stores to deliver a notification.
Friends is opt-in, and stays between you and them
If you add a friend, a lightweight identity (just the name you chose in the app) is shared between the two of you through Apple's CloudKit. Railora's own servers never store your friend list — it lives in your iCloud, same as your trips.
The website
If you leave your email on railora.app for launch news, I store that email to send you updates — nothing else. No analytics, no ad pixels, no tracking cookies. Cloudflare, who hosts the site, may log basic request data (IP, timestamp) for security and reliability, the same as any web server on the internet.
Where live delays come from
Departure times, delays, and platforms come from each operator's own public real-time feed (SNCF, Renfe, SBB, and others). That data describes trains, not passengers — it was never about you.
The full list of third parties
Apple (push notifications and the iCloud sync you already control), Cloudflare (hosting), and each rail operator's public real-time feed. That's the entire list. Railora runs no analytics SDK, no crash-reporting-with-tracking, no ad network.
You're always in control
Delete any trip, or all of them, anytime, from Settings. Unsubscribe from the newsletter with one tap in any email it sends. There's no account to delete and nothing to "export" — because nothing left your device in the first place.
Questions
Anything unclear? Email us — a real person (Quentin) reads and answers it. contact@quentinaslan.com