Your train plans should stay personal.

What stays on your device

Your station choices, saved settings, schedule cache, active trip, and alarm settings are stored locally on your device by default. Hopaboard does not require an account to plan a trip or read public schedule data.

Location

Hopaboard requests foreground location permission only when you choose a location-based station feature. It uses your current location on your device to suggest or orient a nearby station. You can always select stations manually, and Hopaboard does not request background location access for the public production app.

Schedule and prediction data

Hopaboard downloads public GTFS schedule data and, when you enable Live Predictions, public prediction batches. Those public reads do not send your selected From or To stations, an account identity, an advertising identifier, or an app-instance identifier to the prediction service.

Live Activities and protected delivery

If you create an active trip, Hopaboard can show its timing on supported Apple system surfaces. When server-delivered Live Activity updates are available, the app sends an opaque activity push token and the canonical identifiers for that selected train segment. They are used only to deliver updates for that activity, not for advertising or profiling.

The push token is encrypted in transit and at rest. It is cleared when the activity ends, changes, or becomes invalid; inactive delivery registrations are removed within 24 hours. Apple App Attest may be used to create a short-lived, purpose-limited security session for this protected delivery. Security material is kept separate from product data and is not used to identify you across services.

What the public app does not do

The public App Store and TestFlight build does not include Ride Timing, continuous raw GPS collection, device-motion recording, ride observation sharing, advertising, or cross-app tracking. Hopaboard does not sell personal information or use your information for targeted advertising.

Your choices and deletion

You can manage location permission in your device settings, turn off Live Predictions in Hopaboard, and use Clear All Data in the app to remove locally stored schedules, settings, active-trip information, alarms, and system presentations. Because Hopaboard has no user account, there is no account profile to access or delete. Ending an active trip also ends its associated delivery registration.

Service providers and public data

Hopaboard uses public transit schedule and realtime data to provide the app’s core schedule experience. Apple provides device permission, notification, and Live Activity services. Cloudflare provides hosting and delivery infrastructure for Hopaboard services and this website. These providers process information only as needed to provide their services and under their own privacy commitments.

This website

Hopaboard.app has no accounts, forms, analytics, advertising, cookies, or tracking pixels. Like most websites, its hosting provider processes standard technical request information, such as IP address and request metadata, to deliver, secure, and troubleshoot the site.

Changes and contact

We may update this policy when Hopaboard’s practices change. We will post the updated version here and revise the effective date. For privacy questions or requests, email support@hopaboard.app.