Privacy policy

TrainPot

Last update: 17.07.2025

Introduction

This Privacy Policy explains how TrainPot (“we,” “us,” or “our”) collects, uses, discloses, and retains your personal information when you download and use our mobile application (the “Service”). By using the Service, you consent to the practices described in this Policy.

Information we collect

1. Information you provide:

  • Registration Data: email address, username, password
  • Profile Data: profile photo

    • 2. Device Permissions:

  • Camera Access: only if you choose to grant it, for uploading photos
  • Push Notifications: your preference settings

    • We do not collect or process any sensitive categories of personal data (e.g., biometric, health, racial/ethnic).

    Purpose and Legal Basis for Processing

    We process your personal data for the following purposes, on the corresponding legal bases (for EU/UK users under GDPR):

  • Account creation, authentication and management: performance of a contract
  • Provision and improvement of the Service: legitimate interest (service delivery)
  • Responding to user inquiries and providing support: legitimate interest (customer service)
  • Fraud prevention and security: legitimate interest (security)
  • Compliance with legal obligations: legal obligation
  • Camera access and push notifications (with consent): your consent

    • Disclosure of personal information

    We may share your personal data with:

  • Service Providers: third-party vendors who perform services on our behalf (e.g., Firebase Authentication, Firebase Realtime Database, Cloud Functions, Expo Notifications, Google Fonts)
  • Business Transfers: parties involved in any merger, acquisition, or sale of assets

    • We will never sell your personal data or share it for third-party marketing purposes without your explicit consent.

    Data retention

    We retain your personal information only for as long as necessary to fulfil the purposes described above or to comply with applicable legal obligations. Once no longer required, we will securely delete or anonymize your data.

    Security

    We implement industry-standard administrative, technical, and physical safeguards to protect your personal information. However, no system can be guaranteed completely secure; all data transmission is at your own risk.

    Your rights

    Depending on your jurisdiction, you may have the right to:

  • Access a copy of your personal data
  • Rectify inaccurate or incomplete data
  • Request erasure of your data (“right to be forgotten”)
  • Restrict or object to processing
  • Withdraw consent at any time (where processing is based on consent)
  • (EU/UK only) Data portability; lodge a complaint with a supervisory authority

    • To exercise these rights, please contact us as described below.

    Do-Not-Track Signals

    We do not respond to browser “Do-Not-Track” signals.

    Contact information

    If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at: contact@nikicodes.com.