Privacy Policy

Just Tracks · last updated 24 August 2026

Just Tracks watches your Amtrak train and puts a countdown on your lock screen before it leaves. This page describes everything it stores about you, which is not much, and everywhere that goes.

There is no account

There is nothing to sign into. No email address, no password, no phone number, no name. The app has no field to type any of them into.

The first time you open it, the app asks the server for an anonymous identifier — something like rider-4f2a9c81 — and keeps a token for it in the iOS Keychain. That token is the whole of your identity here. It says which trips are yours, and nothing else about you.

What is stored on the server

• The trips you choose: the stations, the departure times, and which days of the week repeat.
• The push tokens Apple issues, which are what let the server raise and update a Live Activity on your lock screen.
• The identifier iOS gives this app for your device (Apple's identifier for vendor), used to tell one of your devices from another so a token from a deleted install stops being used. It is specific to this app rather than to the hardware, and iOS resets it when you delete the app.
• Timestamps: when the anonymous account was created, and when the app last spoke to the server.
• A record of the cards sent to you, and the train times looked up to build them, so the delay estimates can be checked against what actually happened.

What is never collected

• Your location. The app never asks for it and does not use it. It contains no location code at all. The stations it knows are the ones you picked from a list.
• Contacts, photos, calendars, health data, or anything else iOS would ask your permission for.
• Analytics, advertising identifiers, or trackers. There are no third-party SDKs in the app of any kind.
• Payment details. The app is free and sells nothing.

Your IP address

The server sees it while answering a request, as every web server does. It is held in memory for one hour, to limit how many accounts a single address can create, and then forgotten. It is not written to the database and it is not linked to your trips. The hosting provider keeps its own request logs, as hosting providers do.

Who else sees any of this

• Apple. Live Activity updates travel through the Apple Push Notification service, so what is on the card — train number, station names, times, delay — passes through Apple on its way to your lock screen.
• Railway, which hosts the server.
• The train data feeds. Times come from Amtrak's published timetable and from two public Amtrak tracking feeds, at transitdocs.com and amtraker.com. The server downloads them on a schedule, and asks transitdocs.com about a particular train when somebody looks one up whose journey is already over. Nothing about you is sent to any of them: they are asked about trains, never about people, and they have no idea you exist.

Deleting everything

In the app, tap the gear beside My Trips, then Reset app. That erases your trips, your repeats, your recent searches, your push tokens and the anonymous account itself from the server. It cannot be undone, and there is no way to prove afterwards that the trips were yours.

Deleting the app does not delete anything here. iOS keeps the token in the Keychain even after an app is removed, and it does not tell the server that the app has gone — so your trips stay on the server, and reinstalling on the same device picks up the same account with the same trips still on it. That is deliberate: rebuilding or reinstalling should not lose your commute.

It also means deleting the app is not a way of erasing anything. If you want your trips actually gone, use Reset app before you delete it, or reinstall and use it then.

Children

The app is not directed at children under 13, and it collects nothing that would identify one.

Changes to this policy

Any change will be posted on this page, with a new date at the top.

Contact

Questions about any of this: get in touch.