Privacy Policy

1. Scope and data controller

This policy explains how RailStaff handles personal data when you use the website or installed web app. RailStaff is operated by an independent individual in India. For privacy questions, corrections, grievances or deletion requests, email dankeshvar.cs@gmail.com.

2. Information we handle

You can browse the public home page and standard tools without signing in. Depending on what you choose to use, RailStaff may handle:

• Google account data: Google account identifier, display name, email address and profile image supplied during Google sign-in.
• Profile data: name, designation, headquarters, mobile number and other details you enter.
• App content: train working entries, timings, crew and loco details, records, notes, calculator inputs, drafts, reports and settings.
• Mutual transfer requests: name, mobile number, department, pay level, present and wanted posting, and any note you submit.
• Support and service data: feedback you submit, account and subscription request/status, policy acceptance, session/activity timestamps, and technical error information needed to operate and secure the service.
• Location: precise device location only after you grant browser permission and use a station-detection or live-running feature. It is used to estimate nearby stations, movement and arrival/departure assistance. Administrator-only station tagging may save a station's derived coordinates to improve station matching.

RailStaff does not request access to your contacts, SMS or call logs, does not use third-party advertising, and does not sell personal data.

3. Why we use this information

• To authenticate you and provide the protected features you request.
• To save, sync, restore and display your records across your devices.
• To calculate estimates and generate personal working aids and reports.
• To record subscription requests and control access to features specifically labelled as premium.
• To match mutual transfer requests and enable contact between relevant users.
• To answer support requests, prevent abuse, maintain security and meet legal obligations.

4. Storage, service providers and sharing

For offline use, app data and preferences may be stored in your browser using local storage, session storage, IndexedDB and the service-worker cache. Signed-in data is also processed using Google Firebase, including Firebase Authentication, Cloud Firestore, Hosting and Cloud Functions. Google acts as a service provider for this infrastructure and may process data in locations where its services operate.

Your private journal and account data is restricted to your account and authorised administration/support access. Mutual transfer requests are different: the request details, including the mobile number you submit, are stored in a shared pool readable by signed-in RailStaff users so the app can find matches. Do not post confidential information, and remove your request when it is no longer required. Data may also be disclosed where required by law, to protect users or the service, or during a lawful transfer of the service.

5. Retention

Account and app data is generally retained while your account remains active or until you delete it. A mutual transfer request remains until you remove it or the account is deleted. Support, security and legal records may be retained only as long as reasonably necessary for those purposes. Local copies can remain on a device until you clear the app's data or browser storage.

6. Your choices, correction and deletion

You may review and correct editable profile or app information within RailStaff. You can remove individual content, remove a mutual request, or delete your account. To delete the account, sign in, open Menu → Account → Delete Account, and follow the confirmation steps. Account deletion is permanent and cannot be undone.

Your saved data is deleted only when you delete it. Apart from content you remove yourself, your workings and other saved app data are erased only when you delete your account. RailStaff does not provide a bulk "clear all data" action, and it never deletes your saved workings on its own — not during cloud sync, not when you sign in on another device, and not if you clear your browser data. A working you delete is kept in Recently Deleted for 5 days so it can be restored.

If you cannot access the in-app option, follow the instructions on the Account & Data Deletion page or email the address above from your registered Google email. We may verify identity before acting. Valid requests are normally completed within 7 days, subject to information that must be retained by law or for resolving security, fraud or dispute issues.

7. Security and data incidents

RailStaff uses HTTPS, Firebase Authentication, database security rules, restricted administrative access and other reasonable safeguards. No online system is completely secure, so keep your own backup and protect your Google account and device. If a personal-data incident requires user action, affected users will be notified through available contact or in-app channels as appropriate.

8. Children

RailStaff is intended for working adults aged 18 or older. It is not directed to children, and a child should not create an account or submit personal data.

9. Changes

This policy may be updated when the service or legal requirements change. The updated version and effective date will be posted here. Material changes may also be shown inside the app.

10. Contact and grievance handling

For access, correction, deletion, consent or privacy complaints, email dankeshvar.cs@gmail.com with the subject RailStaff Privacy Request. Include the Google email used for the account and enough detail to identify the issue. We aim to acknowledge complaints within 48 hours and resolve valid requests promptly.

11. Separate terms and disclaimer

Use of RailStaff is also governed by the Terms of Use, including the independent-app disclaimer, calculator limitations and prohibition on uploading confidential or restricted official material.