TrainKothai is a mobile application that provides Bangladesh Railways train information, live train tracking, and schedule lookup. This policy explains what data is collected, why, and how it is handled.
The following data is stored only on your device and never uploaded:
| Data | Storage | Purpose |
|---|---|---|
| Station list cache | Encrypted local storage | Makes station search instant; expires after 15 days |
| Onboarding status | Encrypted local storage | Remembers whether you have completed setup |
| Location permission state | Encrypted local storage | Avoids re-prompting each launch |
| Notification permission state | Encrypted local storage | Avoids re-prompting each launch |
Train timetables, seat classes, running status, and delay information are fetched from our backend servers. This data is public railway information. No personal data is involved.
We work with the following categories of third-party service providers. Each processes only the data necessary for their function and is contractually bound to protect it.
| Category | Purpose |
|---|---|
| Cloud backend provider | Stores and serves live train data; receives anonymised location pings |
| Analytics & crash reporting provider | Records app usage events, errors, and screen sessions to improve reliability |
| App distribution platform | Distributes the app to your device (Google Play / Apple App Store) |
We do not sell your data to any third party.
| Permission | Why it is needed |
|---|---|
ACCESS_FINE_LOCATION | GPS coordinates for crowdsourced train tracking |
ACCESS_COARSE_LOCATION | Fallback location when GPS is unavailable |
POST_NOTIFICATIONS | Train delay and arrival alerts (Android 13+) |
INTERNET | Fetching live train data from our servers |
| Data | Retention |
|---|---|
| Location pings (server) | 30 days, then automatically deleted |
| Crash reports | 1 year |
| Session replays | 30 days |
| Local device cache | Until app is uninstalled or cache expires |
TrainKothai is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided data through this app, contact us and we will delete it promptly.
All data in transit is encrypted via HTTPS/TLS. Local storage is isolated to the app sandbox and not accessible to other apps. Our backend servers enforce strict access controls to restrict data access.
You may at any time:
We will respond to deletion requests within 30 days.
We may update this policy when new features are added. The effective date at the top will be updated. Significant changes will be announced via an in-app notice.
For any privacy questions or requests: