Last updated April 2026
This policy applies to FirstCoach, the web service we operate at firstcoach.app.
FirstCoach is built to do one job with minimal data. We do not sell your information, run advertising, or use third-party analytics trackers in the app. Data you enter is used only to operate sessions and is deleted automatically after a short time.
When someone hosts a session, we store trip-related details needed for the feature (for example trip number, line, coach, optional host display name, and schedule fields shown in the UI). When guests join, we store a display name (or a random generated name if they leave it blank), optional coach and boarding stop, and a random secret so only that browser can update their row.
This data lives in short-lived server storage (for example Cloudflare KV in production) with an expiration of about four hours from when it is written, after which it is removed automatically. We do not use it for marketing or profiling.
To keep the UI working without a login system, the app may save small pieces of data in your browser: for example the active session id in session storage, and for guests a participant id and secret in local storage so your device can send updates securely. You can clear site data in your browser settings at any time.
The server fetches schedules, train, and coach information from Metrolinx (including General Transit Feed Specification data and related APIs) to power the app. Our use of that data is subject to Metrolinx's Access and Use Agreement; we do not claim ownership of the data. Metrolinx may change or stop providing data at any time.
Those requests may be cached briefly on the server (on the order of seconds to a few minutes) to reduce load and improve performance. That cache does not build a profile of you; it stores transit feed payloads keyed by trip or cache keys, not by your identity.
Data used in this product or service is provided with the permission of Metrolinx. Metrolinx makes no representations or warranties of any kind, express or implied, with respect to the Data and assumes no responsibility for the accuracy or currency of the data used in this product or service.
We use infrastructure providers (such as Cloudflare) to host the app and store ephemeral session data as described above. We do not sell or rent personal information. We may disclose information if required by law.
The service is not directed at children under 13. If you believe we have collected data from a child inappropriately, contact us and we will delete it where required.
We may update this privacy policy at any time without notice. Continued use of the service after changes means you accept the updated policy.
For privacy questions, see the Contact page.