Privacy Policy

1Who we are

iRam Rail Maps ("iRam Maps", "the app", "we", "us") is operated by Brett Norman of Western Australia.

This policy explains how we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. It covers the iRam Rail Maps mobile apps, the web app at app.irammaps.com.au, and this website.

iRam Rail Maps is an independent product. We are not operated by, affiliated with, or endorsed by the Public Transport Authority of Western Australia, Transperth, or any rail network owner or operator.

2What we collect

We collect only what the app needs to work and to keep access restricted to rail industry workers.

We do not collect payment information, because the app is free and there is nothing to pay for. We do not use advertising identifiers and we do not run advertising or marketing trackers.

3Location data

The app asks for location permission so it can show where you are on the map and work out which access gate is nearest to you. Your device works this out. We do not record a history of your movements, and we do not store a log of where you have been.

When you ask for directions, the app hands the destination to your device's own maps application. From that point Google Maps or Apple Maps handles the journey under their own privacy terms, not ours.

You can refuse or withdraw location permission at any time in your device settings. The app still works — you just have to find yourself on the map manually, and "nearest gate" will not be available.

4Why we collect it

• To create and run your account.
• To verify you hold a valid RIW number and are located in Australia, so asset information stays within the industry.
• To show asset locations, run searches, and keep your saved list in sync.
• To diagnose crashes and faults, and to understand which features are actually used.
• To contact you about the app — outages, significant changes, or a problem with your account.
• To meet our legal obligations, and to protect the app and its users from misuse.

We do not use your information for any other purpose without telling you first.

5RIW numbers

Your Rail Industry Worker number is a credential issued by the RIW scheme. We ask for it for one reason: iRam Maps displays the locations of assets on a live rail network, and that information should stay with people who work there.

We use your RIW number to check eligibility at sign-up and to review accounts where misuse is suspected. We do not use it to build a profile of you, and we do not disclose it to third parties except as described in section 6.

If your RIW number lapses, is suspended, or is found to be invalid, we may suspend or remove your access.

6Who we share it with

We do not sell your personal information. We do not disclose it for advertising or marketing, by anyone, ever.

We disclose personal information only in these circumstances:

• Service providers. Hosting, database, authentication, crash reporting and email delivery providers who process data on our behalf under contract. Currently: Google Firebase (authentication, database and crash reporting), Hosting.com (website hosting) and Cloudflare (content delivery and security).
• Mapping. The app displays Google Maps. Google receives technical data needed to serve map tiles and is governed by the Google Privacy Policy.
• App stores. Apple and Google collect their own data when you download or update the app, under their own privacy policies. We receive only aggregate, de-identified statistics from them.
• Where the law requires it. In response to a valid legal request, subpoena, warrant, or where disclosure is required or authorised by law.
• Safety and misuse. Where we reasonably believe disclosure is necessary to prevent a serious threat to life, health or safety, or to investigate suspected unlawful access to the rail reserve. This may include disclosure to a rail operator or the relevant authority.

7Overseas disclosure

Some of our service providers store or process data outside Australia, including in Singapore. Where that happens we take reasonable steps to ensure the recipient handles your information consistently with the Australian Privacy Principles.

By using the app you consent to your information being disclosed to those providers for the purposes described in this policy.

8Storage and security

Data is held on servers operated by Google Firebase. Traffic between the app and our servers is encrypted in transit. Passwords are stored as one-way hashes and are never readable by us or anyone else.

We limit administrative access to the small number of people who need it to run the service. We review access periodically.

No system is completely secure. We cannot guarantee that information transmitted over the internet is absolutely safe, and we ask you not to share your login with anyone. If we become aware of a data breach that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

9How long we keep it

We keep account information for as long as your account is active. If you delete your account, or if it is inactive for 24 months, we delete or de-identify your personal information within a reasonable period.

Some records are kept longer where we are required to by law, or where they are needed to resolve a dispute or enforce our Terms & Conditions. Crash and usage data is retained in de-identified form.

10Access, correction, deletion

You can ask us to:

• give you a copy of the personal information we hold about you;
• correct anything that is wrong or out of date;
• delete your account and the personal information attached to it.

Email support@irammaps.com.au from the address on your account. We will respond within 30 days. There is no charge. If we refuse a request we will tell you why in writing.

Deleting your account removes your login, your RIW number and your saved assets. It does not remove asset location data, which is not personal information and is sourced from publicly available records.

11Children

iRam Maps is a tool for working rail professionals and is not directed at children. Accounts require a valid RIW number, which children do not hold. We do not knowingly collect personal information from anyone under 18. If you believe a child has created an account, contact us and we will remove it.

12Complaints

If you think we have mishandled your personal information, email support@irammaps.com.au with the details. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.

If you are not satisfied with our response, you can take the matter to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

13Changes

We may update this policy as the app changes. The version number and dates at the top of this page will tell you when it last changed. If a change materially affects how we handle your information, we will tell you in the app or by email before it takes effect.

Continuing to use iRam Maps after a change takes effect means you accept the updated policy.

14Contact

Privacy questions, requests and complaints:

Brett Norman
Email: support@irammaps.com.au

See also our Terms & Conditions.