Privacy Policy

We keep things simple: collect only what’s needed, keep it secure, and give you control.

Last updated: October 2025

Controller & Contact

The controller of your personal data is Ahmed Ramzi Muthana, Berlin, Germany (WagonDash project).

Project Status

WagonDash is currently a personal project and not a registered company. All legal obligations as data controller are fulfilled by the individual named above.

Scope

This notice covers the WagonDash website and web app, the Chrome extension, early mobile builds (e.g., TestFlight), and WagonDash Business displays.

Personal (routines, notifications, dashboard)
Business (shared boards for offices/co-working/residential)
Support, waitlists, and contact forms

During the public beta, we do not collect any payment or billing data, since WagonDash is free to use.

Data We Collect

We aim to minimize personal data. Depending on how you use WagonDash, we may collect:

Account & Contact — Name, email, authentication tokens, language/region, and settings (e.g., accessibility options).
Routines & Preferences — Named routines (e.g., “Home ↔ Office”), selected stops/lines (U/S-Bahn, Tram, Bus), filters, automations, and notification preferences.
Location — Approximate location from your device or browser when you enable it for features like walking-time prompts and nearby stops. You can disable this any time.
Device & Technical — Browser type, OS, device identifiers (non-sensitive), IP address (short-term), app version, and performance data required for security and troubleshooting.
Usage — Feature interactions (e.g., creating a routine, enabling an automation), timestamps, and aggregate metrics to improve reliability.
Communications — Messages you send via contact forms, support requests, or feedback surveys; email preferences and waitlist status.

How We Use Data

Provide and operate the service (show live departures/alerts, run automations, send important notices).
Improve reliability and performance (debug issues, measure availability).
Communicate with you about your account, features, and changes to our terms/policies.
Protect our users and services (fraud and abuse prevention, Turnstile checks, security monitoring).
Comply with legal obligations and enforce our terms.

Legal Bases (GDPR)

Performance of a contract (Art. 6(1)(b) GDPR): to create your account, store routines, and deliver the service you request.
Consent (Art. 6(1)(a) GDPR): for optional things like marketing emails, precise location access, and cookies beyond strictly necessary.
Legitimate interests (Art. 6(1)(f) GDPR): to secure our services, prevent abuse, and understand aggregate product usage (balanced against your rights).
Legal obligation (Art. 6(1)(c) GDPR): when we must retain or disclose information to comply with applicable law.

Cookies & Local Storage

We use strictly necessary cookies/local storage for authentication and settings, plus optional cookies for analytics.

Necessary: session/authentication, language, accessibility, security (cannot be switched off).
Preferences: remember view/board options on your device.

Analytics & Logs

We analyze high-level usage (e.g., which features are used) and collect server logs to detect errors and protect the service. Logs typically include IP address and timestamps and are retained for a limited period.

Location Data

Some features use your approximate location (e.g., start-walking prompts, nearby stops). You control this in your device or browser. If disabled, those features may be limited.

Mobile (iOS/Android): the app may request foreground/precise location permission; we show purpose strings that explain why.
Browser: you’ll see a permission prompt; you can deny or revoke it later.
We do not constantly track your location in the background unless you explicitly enable a feature that requires it.

Chrome Extension

The extension surfaces the same routine data from your account and may store lightweight settings locally for quick access. It follows this policy.

WagonDash Business

Shared boards display transit information for many people at once. They typically do not show personal account data, but admins may configure which stops/lines appear. Admin names and contact details are processed for account administration.

Data Retention

We keep personal data only as long as necessary for the purposes described above (for example, while you have an account). Routine and account data are deleted when you delete your account, subject to limited backups and legal retention requirements.

Security

We use industry-standard security practices including encryption in transit, access controls, and bot-protection. No method is 100% secure, but we work continually to protect your data.

Your Rights

Access: request a copy of your personal data.
Rectification: correct inaccurate or incomplete data.
Erasure: request deletion of your data.
Restriction: ask us to limit processing in certain cases.
Portability: receive your data in a structured, commonly used format.
Object: object to processing based on legitimate interests or to direct marketing.
Complain: you can lodge a complaint with your local supervisory authority. In Berlin: Berliner Beauftragte für Datenschutz und Informationsfreiheit.

Children

WagonDash is not directed to children under 4. If you believe a child has provided us personal data, contact us and we will take appropriate steps.

Changes to this Policy

We may update this policy to reflect improvements or legal requirements. We will post the new version and change the “Last updated” date; for significant changes, we may provide additional notice.

Delete Your Account

You can delete your account from within the app (Settings → Account → Delete) or by emailing hello[at]wagondash.com . Deletion removes routines and personal settings after a short grace period; limited backups may persist briefly before automatic purge.

Contact

Questions about privacy or your rights? Email us at info@wagondash.com.

This policy is provided for transparency and does not constitute legal advice.