Privacy Policy

Effective: April 2, 2026 · Last Updated: April 2, 2026

Railroad ("we," "us," or "our") operates the Railroad platform, including the website at therailroad.app and the Railroad mobile application (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Services.

By using Railroad, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our Services.

1. Information We Collect

Information You Provide

  • Account information — When you create an account, we collect your email address, username, display name, and password.
  • Profile information — To prevent spam and bots as much a we can, we require add a profile picture. Your bio is optional .
  • Content you create — Messages, files, images, and other content you send or upload through the Services.
  • Communications — When you contact us for support or submit feedback, we collect the information you provide.

Information Collected Automatically

  • Device information — Device type, operating system, browser type, and unique device identifiers.
  • Usage data — Pages viewed, features used, stations joined, and interactions within the Services.
  • Log data — IP address, access times, and referring URLs.
  • Push notification tokens — If you enable push notifications on the mobile app, we collect your device push token to deliver notifications.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Services
  • Create and manage your account
  • Deliver messages, notifications, and other content you request
  • Enforce our Terms of Service and community guidelines
  • Detect and prevent fraud, abuse, and security incidents
  • Respond to your support requests and feedback
  • Analyze usage trends to improve user experience
  • Send service-related announcements (e.g., maintenance, security alerts)

We do not sell your personal information to third parties.

3. How We Share Your Information

We may share your information in the following circumstances:

  • With other users — Your profile information, messages, and content are visible to other users in the stations and conversations you participate in.
  • Service providers — We use third-party services to host our infrastructure, deliver push notifications, process data, and provide analytics. These providers only access your information as needed to perform their services.
  • Legal requirements — We may disclose information if required by law, regulation, legal process, or governmental request.
  • Safety — We may disclose information when we believe it is necessary to prevent harm, protect rights, or enforce our policies.
  • Business transfers — If Railroad is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Data Storage and Security

We use commercially reasonable safeguards to protect your information, including encryption in transit (TLS) and at rest. Our infrastructure is hosted on industry-standard cloud platforms with robust security measures.

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide you the Services. If you delete your account, we will delete or anonymize your personal information within a reasonable timeframe, except where we are required to retain it for legal or regulatory purposes.

Messages and content you have posted in stations may persist after account deletion in anonymized form, as they are part of shared conversations.

6. Your Rights and Choices

Depending on your location, you may have the following rights:

  • Access — Request a copy of the personal information we hold about you.
  • Correction — Request correction of inaccurate information.
  • Deletion — Request deletion of your personal information by deleting your account.
  • Opt out of notifications — You can disable push notifications in your device settings or within the app at any time.

To exercise any of these rights, contact us at support@therailroad.app.

7. Children's Privacy

Railroad is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at support@therailroad.app.

8. Third-Party Services

Our Services may contain links to or integrations with third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party service you interact with.

We use the following third-party services in connection with the operation of our platform:

  • Supabase — Database hosting and authentication
  • Apple Push Notification Service — Delivering push notifications on iOS
  • Vercel — Web hosting

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on this page and updating the "Last Updated" date. Your continued use of the Services after any changes constitutes your acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: