Privacy at Takto.

Last updated: 18 September 2026

Who is responsible

SDF13 Holding UG (haftungsbeschränkt)
Straße des Friedens 13
04769 Mügeln OT Kemmlitz, Germany
Email: info@genhtis.com

Your journal on your device

Takto stores journey dates, stations, train details, fares and notes on your device. You can use the journal without an account. Ticket PDFs are processed on the device; the app does not upload the original ticket document to its backend. Journey details you save can be included in optional cloud sync.

Optional accounts and cloud sync

If you create an account, Supabase provides authentication and stores your email address, account identifier and authentication records. Sync uploads your complete saved journey records, including notes and fares, to your account. The project’s database is located in Frankfurt, Germany. Processing these records is necessary to provide the account and sync service you request (Article 6(1)(b) GDPR).

Cloud journeys are retained until you delete them or your account. Sync keeps deletion markers so another device cannot accidentally restore a deleted journey; markers no longer contain the journey itself. Account deletion removes the account and its cloud journal. Exported files and copies kept on other devices remain under your control.

Train information and maps

Loading a shared journey sends the link identifier to Deutsche Bahn. Requests for train information include stations, services and travel times. Map display uses Apple Maps. Approximate railway routing uses BRouter and OpenStreetMap-based railway data. These providers receive the requests and network information required to respond, including an IP address. Takto does not request your GPS location or track your position.

Live Activities and background updates

Live Activities display a journey on the Lock Screen and Dynamic Island. Current test builds may update only while the app is open. The planned optional background service sends a minimal trip schedule and an activity-specific push token to the backend, then delivers train updates through Apple’s push service. It does not require ticket PDFs, fares or journal notes. This service will be enabled only after testing; this policy will be updated before public release.

Support and service operation

If you email support, we use your email address and the information you provide to handle the request. Please share only what is needed. Hosting and service providers process technical connection information to operate the service and prevent abuse. The legal basis for these operational purposes is our legitimate interest in a secure, functioning service (Article 6(1)(f) GDPR). Support correspondence is retained for as long as necessary to resolve the request and meet applicable legal obligations. This website is hosted through OpenAI Sites and Cloudflare. Their infrastructure processes technical access data such as IP addresses, request times and browser information to deliver and secure the pages. We do not add analytics or advertising cookies to the site.

Service providers and international processing

The app uses Supabase for optional accounts and cloud data, Deutsche Bahn for train information, Apple for maps and device services, and BRouter and OpenStreetMap-based services for approximate route information. Requests made directly by the app to a third-party provider are also subject to that provider’s privacy information. Although the journal database is in Germany, this does not mean all provider support, security or infrastructure processing stays in Germany. For questions about the providers, data-processing arrangements or any safeguards relevant to your use, contact us.

Provider information: Supabase, Apple, Deutsche Bahn, OpenAI and Cloudflare.

No advertising or location tracking

Takto’s current app has no advertising SDK or cross-app tracking. This website includes no analytics scripts, advertising pixels or embedded third-party media.

Your choices and rights

You can export your journal, stop using cloud sync, and delete your account in Settings. Depending on the applicable circumstances, you have rights to access, correct, erase, restrict or port your personal data and to object to processing based on legitimate interests. Contact info@genhtis.com to exercise these rights. You may also complain to a data-protection supervisory authority, including the authority in your EU country of residence or workplace.

Changes

We will update this page when the app’s services or data practices change. Background train updates are currently in development; we will revise this information before enabling them for the public release.