Privacy policy

What we collect

Using the lookups — live status, PNR, trains between stations, station boards — requires no account and we do not attach what you searched to an identity.

If you create an account, we store:

• your phone number, and your name and email if you give them;
• your IRCTC ID if you choose to save it;
• what you save: PNRs, trains, stations, journeys and alert rules;
• a device push token, if you allow notifications;
• messages you send us through the contact form or RailAI.

What we do with it

We use it to sign you in, show your watchlists across devices, and answer your support messages. We do not sell it, and we do not share it with advertisers.

One-time passwords

Sign-in is by OTP to your phone number. OTP codes are stored hashed, expire after 10 minutes, and the row is deleted the moment a code is used. Requesting a new code invalidates the previous one. In development builds the code is also returned in the API response so the app can be tested without an SMS gateway — that behaviour is off when the app is not in debug mode.

Third parties

This build calls no third-party analytics, advertising or crash-reporting service. If a third-party railway data provider is configured, the train number, PNR or station code you look up is sent to that provider to answer the query — nothing about your account goes with it.

Retention and deletion

Account data lives until you delete the account. Deleting it removes your profile, watchlists, journeys, alerts and API tokens. Write to support@yatrasaathi.com and we will action it.

Children

TrainLive is not directed at children under 13 and we do not knowingly collect their data.

Changes

If this policy changes materially we will say so on this page and, for account holders, in the app.