Privacy Policy

Account details — display name, username, password (stored only as a salted hash by our authentication provider), role, employee number and the train operator you nominate.

Billing details — your contact email address and the accounts email address of your operator, used to issue and send invoices.

Operational data — route assessments you run, saved fleet entries and train identifiers, and, when you explicitly start speed tracking, timestamped location, speed and accuracy samples from your device.

Messages — content and metadata of messages you send in the backup communication rooms or direct messages.

To provide the risk assessment tool, generate weather and maintenance advisories, operate the backup communication network, maintain the registered user directory for your operator, issue invoices, and keep the platform secure and reliable.

Speed tracking uses your device's geolocation and only runs after you press the tracking control. Your browser asks for permission first, and you can stop tracking or clear a train's speed log at any time from the fleet log. Speed logs recorded in the browser are stored locally on your device.

Signed-in users can see limited directory details about other registered users — name, username, role, operator and employee number. Contact and accounts email addresses are visible only to you and to control room staff. Communication rooms are restricted to their members, and direct messages are visible only to the sender and recipient. Access is enforced by row-level security rules in our database, not just in the interface.

We use a managed cloud database, authentication and hosting provider to run the platform, and third-party weather and elevation data services to enrich assessments. Route coordinates are sent to those data services; your identity is not. Map tiles are loaded from OpenStreetMap.

We keep account, assessment, message and invoice records for as long as your account is active and while needed for operational, safety or accounting purposes. You can ask us to delete your account and associated personal information at any time; some invoice records may be retained where record-keeping obligations apply.

Data is transmitted over encrypted connections and stored with a managed cloud provider. Access to application data is controlled by authentication and per-row database policies. No system is perfectly secure, so please report any suspected issue to us promptly.

To request access to your information, correct it, or raise a privacy concern, email scottyjfox@gmail.com or call 0492 921 058. We will respond within a reasonable period.