1. Who We Are
Developer: Balkrishna Parab (sole developer & owner)
App Name: Yatrain — Indian Railway Live Tracker
Contact: balkrishnap@me.com
Website: yatrain.com
2. Information We Collect
| Data | Why we collect it | Stored where |
|---|---|---|
| Email address | Account creation and sign-in | Supabase (encrypted) |
| Full name (optional) | Personalised greeting in app | Supabase (encrypted) |
| PNR numbers you search | Fetch your booking status from Indian Railways | Device only (not uploaded) |
| Saved trains | Show your favourites across sessions | Supabase (linked to your account) |
| Location (optional) | Show nearby stations; display your position on the live map | Never stored — used in real time only |
| App preferences | Language, alert mode, sleep alarm settings | Device only (UserDefaults) |
| Subscription status | Unlock Yatrain Pro features | Apple StoreKit — we never see payment details |
We do not collect device identifiers (IDFA), contacts, photos, microphone input, or any data beyond the above.
3. How We Use Your Information
- To authenticate you and sync saved trains across your devices.
- To query Indian Railways APIs (RapidAPI / IRCTC, RailRadar) on your behalf when you search for a train or PNR. Your query leaves your device only to reach these APIs — it is not stored on our servers.
- To send local notifications (station arrival alerts, sleep alarms) you explicitly set. These are processed entirely on-device.
- To improve the app through anonymous crash reports (Apple's standard crash reporting — no personal data included).
We never sell, rent, or share your personal information with advertisers or data brokers.
4. Third-Party Services
Yatrain uses these services to function. Each has its own privacy policy:
- Supabase — Authentication and saved-train storage. supabase.com/privacy
- RapidAPI / IRCTC — Real-time train schedules, PNR status, live position. rapidapi.com/privacy
- RailRadar — GPS-based live train tracking. railradar.in
- Apple StoreKit — In-app subscription processing. Apple handles all payment data. apple.com/legal/privacy
Your train search queries are sent to these APIs solely to return results to you. We do not log or retain these queries on our own servers.
5. Location Data
Location access is optional. If you grant permission:
- Your location is used in real time to show nearby stations and your relative position on the train map.
- Location data is never uploaded to our servers or shared with any third party.
- You can revoke location access at any time in iOS Settings → Yatrain → Location.
6. Data Retention
- Account data (email, name, saved trains) is retained until you delete your account.
- On-device data (PNR history, preferences) is deleted when you uninstall the app.
- After account deletion, all Supabase records are permanently erased within 30 days.
7. Your Rights
You also have the right to:
- Access — request a copy of data we hold about you.
- Correction — ask us to correct inaccurate data.
- Portability — receive your data in a machine-readable format.
- Object — object to processing in certain circumstances.
To exercise any right, email balkrishnap@me.com. We will respond within 30 days.
8. Children's Privacy
Yatrain is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it promptly.
9. Security
All data in transit is encrypted via HTTPS/TLS 1.2+. Authentication is managed by Supabase, which uses industry-standard encryption for stored credentials. We do not store raw passwords.
10. Changes to This Policy
We may update this policy as the app evolves. Material changes will be notified via an in-app notice. The effective date at the top of this page will always reflect the latest revision. Continued use of the app after changes constitutes acceptance.
11. Contact Us
Questions, requests, or concerns about this privacy policy:
Balkrishna Parab
balkrishnap@me.com
yatrain.com