Privacy Policy
Last updated November 4, 2026
The short version. Metrove has no ads, no tracking and no analytics, and no server or account of its own. What it keeps stays on your iPhone and in your own iCloud, where we can't see it. The only things anyone else sees are what you choose to share on your friend card, and a report if you send one.
On your iPhone
Location
Metrove uses your location to show the stations near you, to stamp the station you're at, to note each station you pass while you record a commute, and to center its widgets near you. It asks first, and works without it: you can pick a home station instead.
Steps
If you tap to count your steps, Metrove reads them from your iPhone's motion sensor for the day's walking mission. They stay on your phone unless you share your friend card (see below).
Notifications
Notifications you turn on are scheduled on your iPhone. For gift notifications, iCloud keeps a subscription so it can tell your phone when a gift arrives.
In your iCloud
If you're signed in to iCloud, Metrove keeps a copy of these in your private iCloud database, so a new phone or a reinstall gets them back:
- your passport: the stations you've stamped and on which days, and the landmarks you've unlocked
- your commutes: the stations passed, their times, the lines you picked, and where your phone was at each station
- your rewards: tokens, check-ins, medals, missions and your model railway
- your friends list: the codes you've added and anyone you've blocked
Only you can read your private iCloud database. We can't see it, and Apple keeps it under its own privacy policy.
What you can share
Your friend card
Friends is optional, and Metrove asks before it shares anything. If you share your card, it's kept in Metrove's public iCloud database, where anyone with your friend code can see:
- your name, if you give one, your icon and frame, and how your character looks
- this week's and last week's stamps, steps and tokens
- your streak, your medals and the number of stations you've stamped
- the friend codes you've added
- your model railway
The card also carries an identifier iCloud makes for your account in Metrove alone (not your Apple Account or email), so no one else can change your card. It never includes where you are, which stations you've been to, or your commutes.
Stop sharing at any time under Friends. Stopping deletes your card.
Hearts
A heart you send is kept in the public database with your friend code, theirs and the day you sent it.
Blocking and reporting
Blocking someone is private: it's kept with your friends list, on your iPhone and in your iCloud. If you report someone, Metrove sends a report with your friend code, theirs, the reason you picked and the time. Only you and the developer can read it, and it's used only to deal with abuse.
Live train data
Metrove downloads train times directly from the MTA, the Port Authority of New York and New Jersey (PATH), the MBTA and BART. Like any website you visit, they see your IP address with each request. Metrove sends them nothing else.
If you email us, we use your message and address only to reply and to fix what you tell us about.
Children
Metrove isn't made for children under 13, and we don't knowingly collect personal information from them.
Deleting your data
- Deleting Metrove removes everything it keeps on your iPhone.
- To delete the copy in iCloud, open Settings, tap your name, then iCloud, then Manage Storage, and delete Metrove's data.
- To delete your friend card, stop sharing it under Friends.
- For anything else, email hello@metrove.app.
Changes
If this policy changes, the new version will be posted here with a new date.
Contact
Questions about privacy: hello@metrove.app