Privacy Policy — Rail Ticket Alert

Rail Ticket Alert ("the app") is an independent ticket-availability notification app for Bangladesh Railway. It is not an official Bangladesh Railway or Shohoz app, and it does not sell tickets or complete purchases — it only helps you find out when a ticket becomes available.

What this app does NOT do

• It does not have its own server or backend. There is no company or third party that receives your data from this app.
• It never sees, stores, or transmits your Railway (Rail Sheba) account password. When you connect your account, you log in directly on Bangladesh Railway's own official login page inside the app; your password goes straight to their server, never to us.
• It does not sell your data to anyone.

What is stored, and where

Everything the app stores lives only on your own device:

• Your Railway session token and device key — issued by Bangladesh Railway/Shohoz's servers after you log in, so the app can check ticket availability on your behalf. Stored encrypted on-device (AES-256, Android Keystore-backed) and never leaves your device except when the app itself queries Bangladesh Railway's servers using it.
• Your ticket alerts — the route, date, train, and class you asked to be notified about. Stored locally in the app's own database on your device.
• A random per-install device identifier — generated on your device, sent to Bangladesh Railway's servers as part of the standard request identification their API requires (the same way their own app identifies a device). It is not tied to your name, phone number, or any hardware identifier like IMEI or advertising ID.

Notifications

If you grant notification permission, the app uses it only to alert you when a ticket becomes available for an alert you created. Notifications are generated entirely on your device.

Third-party services

To check ticket availability and station/train information, the app communicates directly with Bangladesh Railway's own ticketing backend (operated by Shohoz), using the credentials from your own account. That request goes directly from your device to their servers — this app is only a client, not an intermediary that stores or forwards this traffic elsewhere.

Advertising (Google AdMob)

This app shows ads served by Google AdMob to support free access to the app. AdMob may collect and process data such as your advertising ID, IP address, general (non-precise) location, device information, and app usage/interaction data, in order to deliver and measure ads, including personalized ads where permitted. This processing is carried out by Google, not by us — we do not receive or store this data ourselves.

You can review how Google collects and uses this data at policies.google.com/technologies/partner-sites, and manage ad personalization for your Google account at adssettings.google.com. On Android, you can also reset or limit your advertising ID from your device's Settings › Privacy › Ads.

Your choices

• You can disconnect your Railway account at any time from Settings, which deletes the stored session token and device key from your device immediately.
• You can delete an alert at any time, which removes it from the app's local database.
• Uninstalling the app removes all locally stored data.

Children's privacy

This app is not intended for children. We don't knowingly collect personal information from children. If you believe a child has shared personal information with us, contact us at pixelperklabs@gmail.com and we'll remove it — since everything the app stores lives only on-device (see "What is stored, and where" above), that means disconnecting the Railway account and deleting alerts from that device, which you can already do at any time from Settings.

Changes to this policy

If this policy changes, the updated version will simply replace this page.

Contact

Questions about this policy can be sent to: pixelperklabs@gmail.com