MBTA Rail MBTA Rail

Privacy Policy

Last updated May 15, 2025.

The developer of MBTA Rail (iOS) and Boston Rail (Android) ("we," "us," or "our") respects the privacy of our users ("user" or "you"). This Privacy Policy covers both the MBTA Rail and Boston Rail mobile applications (collectively, the "Application"), which are the same underlying app distributed under different names on iOS and Android respectively. It explains how we collect, use, disclose, and safeguard your information when you use the Application. Please read this Privacy Policy carefully. IF YOU DO NOT AGREE WITH THE TERMS OF THIS PRIVACY POLICY, PLEASE DO NOT USE THE APPLICATION.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the "Last updated" date of this Privacy Policy. Your continued use of the Application after any changes are posted constitutes your acceptance of the revised Privacy Policy.

This Privacy Policy does not apply to the App Store or Google Play Store from which you download the Application, which have their own privacy policies and data practices.

Collection of your Information

We collect information in the following ways when you use the Application:

Anonymous Device Identifier

We generate an anonymous identifier for your device using a one-way hash of your device's unique ID. This identifier cannot be used to identify you personally. It is used to associate your trip reports, reactions, and preferences within the Application, and to distinguish your content from other users' content.

User-Generated Content

The Application allows you to post text reports about specific MBTA trips and to react to reports posted by other users. When you submit a report, we collect the report text, any nickname you choose to display, and the trip it is associated with. Reports and reactions are visible to other users viewing the same trip.

Mobile Device Data

We may collect information about your mobile device, including device model, manufacturer, operating system version, and app version. This information is used for crash reporting and to improve the Application.

Usage Data

We collect information about how you use the Application, such as which screens you visit, features you use, and actions you take. This data is collected in aggregate and used to understand usage patterns and improve the Application.

Crash and Error Data

When the Application encounters an error, we collect diagnostic information including the error details, a log of recent in-app navigation, your device identifier, and in some cases a screenshot of the Application at the time of the error. This information is used solely to identify and fix bugs.

Push Notifications

If you opt in to push notifications, we collect a push notification token to deliver alerts about routes and trips you follow. You can opt out at any time in your device's settings or within the Application.

Purchase and Subscription Data

If you purchase a subscription, payment processing and subscription management are handled by RevenueCat. We do not store your payment card information. We receive purchase status information (e.g., active or expired subscription) to unlock premium features.

Use of your Information

We use the information we collect to:

Disclosure of your Information

Visible to Other Users

Trip reports you submit and reactions you add are visible to other users of the Application who are viewing the same trip. Your reports are displayed with your chosen nickname and a color derived from your anonymous identifier.

Third-Party Service Providers

We share data with the following third-party service providers to operate the Application:

These providers are only given access to information necessary to perform their services and are not authorized to use it for other purposes.

By Law or to Protect Rights

We may disclose your information if required to do so by law or in response to valid legal process, or if we believe disclosure is necessary to protect the rights, property, or safety of MBTA Rail, our users, or the public.

Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change by updating this Privacy Policy.

Security of your Information

We use technical and administrative measures to help protect your information. However, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

Policy for Children

The Application is not directed to children under the age of 13. We do not knowingly collect information from children under 13. If you believe we have inadvertently collected such information, please contact us so we can delete it.

Your Choices

You may opt out of push notifications at any time through your device's settings. Because user reports are associated with an anonymous device identifier rather than a personal account, we cannot link historical data to a specific individual. If you have questions about your data, please contact us.

Contact

If you have questions or comments about this Privacy Policy, please contact us at info@mbtarail.app.