Privacy Policy
Last updated: March 28, 2026
This privacy policy explains how TRAINAR, operated by Adam Hessel ("we", "us", "our"), collects, uses, and protects your information when you use the TRAINAR mobile application ("the App"). We are committed to protecting your privacy and being transparent about our data practices.
Contact: trainar.sweden@gmail.com
1. Information We Collect
1.1 Account Information (Optional)
You can use the core features of the App without creating an account. If you choose to create an account, you can sign up with your email address, or use Apple Sign-In or Google Sign-In. We collect:
- Your email address
- Your name (provided by you, or by Apple/Google if using those sign-in methods)
- A profile photo (if provided by your sign-in provider)
If you sign up with email, your password is securely hashed and never stored in plain text.
1.2 Location Data (Optional)
If you grant the App permission to access your device location, we use it to show nearby stations and your position on the map. Your location data is shared with Mapbox to render the map. We do not store your location in any database. The App works fully without location access.
1.3 Booking and Travel Data
When you search for or book train tickets through the App, we store:
- Journey searches (departure, destination, dates)
- Booked tickets and order history
- Saved travelers (name and age category, used to find the right ticket prices)
1.4 Preferences
We store your in-app preferences locally and in your account, including:
- Favorite stations or trains
- Push notification settings
1.5 Analytics and Diagnostics
We collect anonymous usage data to improve the App, including:
- Screens viewed and features used
- Crash and error logs
- Push notification tokens (used solely to deliver notifications you have opted into)
This data is not linked to your identity.
2. How We Use Your Information
We use the information we collect to:
- Provide and operate the App
- Show real-time train positions, departures, and traffic information
- Process train ticket searches and bookings
- Save your travelers and preferences for a faster booking experience
- Send push notifications you have opted into
- Identify and fix bugs and crashes
- Improve the App based on anonymous usage patterns
We do not use your personal data for advertising. We do not sell your data to third parties.
3. Third-Party Services
We use the following third-party services to operate the App. Each processes data as described below:
| Service | Purpose | Data shared |
|---|---|---|
| Supabase | User authentication and database hosting | Account information, booking data, saved travelers, preferences |
| Google Cloud | Backend server hosting | Requests are processed through our servers hosted on Google Cloud |
| Mapbox | Map rendering | Device location (only if you grant permission) |
| OpenAI | AI-generated traffic summaries | Traffic event data only. No personal user data is sent to OpenAI. |
| PostHog | Anonymous usage analytics | Anonymous usage events, crash logs |
| All Aboard | Train ticket booking and payments | Journey search details, traveler information for ticket purchases |
| Apple Sign-In | Authentication | Authentication tokens |
| Google Sign-In | Authentication | Authentication tokens |
Ticket Payments
All payments for train tickets are processed by All Aboard and their payment provider (Stripe). We never receive, process, or store your credit card or payment details. All Aboard's own privacy policy governs how they handle payment data.
4. Data Storage and Security
Your data is stored on servers within the European Union, hosted by Supabase and Google Cloud. We use encrypted connections (TLS/SSL) for all data transfers between the App and our servers.
We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse.
5. Data Retention
We retain your account data and booking history for as long as your account exists. Anonymous analytics data is retained in aggregated form and cannot be linked back to you.
If you request deletion of your account, we will delete all personal data associated with it. See Section 7 for how to make this request.
6. Children
The App is a general audience application. We do not knowingly collect personal data from children under 16 without parental consent. If you are under 16, please ask a parent or guardian before creating an account. If we become aware that we have collected personal data from a child under 16 without appropriate consent, we will take steps to delete that information.
7. Your Rights
Under the General Data Protection Regulation (GDPR), you have the right to:
- Access the personal data we hold about you
- Correct inaccurate personal data
- Delete your personal data
- Export your data in a portable format
- Object to or restrict certain processing of your data
- Withdraw consent at any time (for example, revoking location access in your device settings)
To exercise any of these rights, contact us at trainar.sweden@gmail.com. We will respond within 30 days.
You can delete your account and all associated data directly in the App under your profile settings.
8. Changes to This Policy
We may update this privacy policy from time to time. When we do, we will update the "Last updated" date at the top. We encourage you to review this policy periodically. Continued use of the App after changes constitutes acceptance of the updated policy.
9. Contact
If you have questions about this privacy policy or our data practices, contact us at:
TRAINAR
Operated by Adam Hessel
trainar.sweden@gmail.com
If you are not satisfied with our response, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se.