US-first privacy notice

Privacy Notice

Timli keeps public PATH tools open, offers optional signed-in dashboard features, and tries to be specific about what data stays on your device versus what is shared with service providers.

Effective date

March 30, 2026

Last updated

October 11, 2026

Public PATH arrivals, alerts, maps, and station pages can be used without creating an account.
Most app preferences live in your browser unless you choose signed-in dashboard sync.
Saved dashboard data for signed-in riders is stored with Clerk so it can follow your account.
Timli Pro payments and subscription management use Stripe-hosted pages. Timli does not store raw card details.
Police and crowding reports share a station and report time with other riders for 30 minutes; your account identity is not displayed.
Precise location is requested only for weather or closest-station features.
If weather is enabled, coordinates go directly from your browser to Open-Meteo.
We use analytics and transit providers listed below to operate and improve the service.

Scope

This notice applies to www.timli.app, timli.app, their localized routes, and legacy livepathtracker.com traffic during the transition. It covers public PATH tools plus signed-in dashboard features for PATH, HBLR, and MTA riders. This notice also covers Timli Pro commute boards, subscriptions, and billing support.

Timli is the current product name. The official web address is www.timli.app; timli.app redirects there, and you may still see livepathtracker.com during the transition. Support remains available at livepathtracker@gmail.com.

Information we collect

The service handles on-device settings, account-backed dashboard and Pro board data, subscription and billing records, station reports, location signals, analytics events, and transit lookup data.

On-device settings and history

Timli stores most guest-state preferences in your browser so the app can remember how you use it between visits.

  • Theme preference, transit mode, selected stations or cards, card order, pinned PATH station, and weather visibility preference
  • QR visit history saved in browser storage for the QR landing flow
  • Banner dismissal timestamps and PWA update-dismissal state stored on your device

Account and saved dashboard data

If you sign in, Clerk processes your account and session information. Timli stores your saved dashboard settings and Pro access status in Clerk public metadata, and Pro commute boards in Clerk private metadata.

  • Saved dashboard metadata can include PATH stations, HBLR stop IDs, MTA route-and-station cards, transit mode, pinned PATH station, card style, weather preference, and snapshot version
  • Timli uses this saved dashboard metadata to sync your dashboard across signed-in sessions
  • Pro board data includes board names, selected transit cards, their order, and the active board. Pro access metadata records whether access is active and when Stripe-managed access expires.

Timli Pro subscriptions and billing

Stripe hosts Checkout and the Customer Portal for payments, invoices, payment-method updates, and subscription management. Payment details entered on those pages go to Stripe; Timli does not store raw card numbers or security codes.

  • Timli sends your account identifier to Stripe to link a Stripe Customer and Checkout to your signed-in account. Stripe processes the contact, payment, and billing information you provide on its hosted pages.
  • Timli stores the link between your account and Stripe Customer, checkout identifiers, selected plan, and billing-request retry records in durable Upstash Redis storage.
  • Stripe subscription and payment events are used to update your Pro access status and expiry in Clerk.

Police and crowding reports at stations

If you report police or crowding at a PATH or HBLR station, Timli records the transit system, station identifier, and report time set by our server.

  • The station and latest report time are shared with other riders for 30 minutes; the reporting account is not displayed
  • Clerk authenticates the submitting account, and a hashed account identifier is stored for five minutes to limit repeated submissions
  • Reports do not collect photos, descriptions of people, or precise device or person coordinates

Precise location data

Precise geolocation is requested only when you enable local weather or the closest-station feature.

  • Closest-station calculations happen in the browser
  • Timli does not store precise location on its own servers
  • When weather is enabled, the browser sends latitude and longitude directly to Open-Meteo to fetch current weather data

Usage analytics and diagnostics

We collect usage and diagnostics data so we can understand how the app performs and which features riders actually use.

  • Page views, referrers, locale, app version, display mode, and PWA install or update events
  • Feature interactions such as transit-mode changes, auth prompts, alert views, dashboard sync states, and QR campaign parameters
  • Some analytics events include route, stop, or station identifiers tied to the feature you interacted with

Transit lookup data

The app has to send selected route or stop identifiers through its APIs to load arrivals and alerts for the dashboard.

  • PATH arrivals and PATH alerts are requested by Timli servers from public Port Authority endpoints
  • Signed-in HBLR requests send selected HBLR stop IDs through Timli to NJ Transit data sources
  • Signed-in MTA requests send selected route IDs and station IDs through Timli to the configured Transiter backend

How we use data

  • Operate PATH, HBLR, and MTA arrivals, alerts, maps, and dashboard features
  • Remember browser-level preferences and sync saved dashboards for signed-in riders
  • Share recent station police and crowding reports through in-app alerts and limit repeated submissions; this feature does not send background push notifications
  • Power optional weather and closest-station features when you grant location permission
  • Measure product usage, app reliability, and performance so we can improve the service
  • Understand how riders discover the app through QR codes, referrers, and campaign parameters
  • Maintain security, detect service issues, and troubleshoot bugs
  • Process Timli Pro subscriptions, match Stripe billing events to your account, manage access, prevent duplicate billing requests, and handle billing support.

Service providers and disclosures

We use the providers below to run sign-in, Pro subscriptions, station reporting, analytics, weather, and transit lookups.

Clerk

Account authentication, saved dashboard and Pro board storage, and Pro access status.

Clerk processes account and session information, saved dashboard settings in public metadata, Pro commute boards in private metadata, and Pro access status and expiry. It also stores the account self-deletion setting used during billing.

Clerk privacy policy

Upstash (Redis)

Storage for temporary station reports and separate durable Timli Pro billing records, accessed through Timli servers.

Station report records contain transit system and station identifiers, report times, and temporary hashed account identifiers, without your name or email. Billing records separately contain account and Stripe Customer identifiers, checkout and plan identifiers, and request-retry records. Billing records are not anonymous station reports.

Stripe

Hosted subscription checkout, payment processing, invoices, and the Customer Portal.

Receives your Timli account identifier and the contact, billing, and payment information you provide on Stripe-hosted pages. Stripe sends Timli subscription and payment events so we can manage Pro access. Timli does not store raw card details.

Stripe privacy policy

Plausible Analytics

Privacy-focused website analytics.

Receives pageview-level analytics such as page URL, referrer, and browser or device metadata used to measure site traffic.

Plausible data policy

OpenPanel

Product analytics for feature usage and app behavior.

Receives event names and properties such as locale, app version, transit mode, station count, QR campaign parameters, feature usage, and some selected station or route identifiers tied to your interactions.

OpenPanel privacy

Vercel Web Analytics

Site traffic and performance analytics.

Receives aggregated usage and performance data such as page views, referrers, browser, operating system, device category, and geography-derived analytics under Vercel's service.

Vercel analytics privacy

Open-Meteo

Weather data provider used only when weather is enabled.

When you turn on weather, your browser sends latitude and longitude directly to Open-Meteo to retrieve current weather conditions.

Open-Meteo terms

Port Authority PATH APIs

Public PATH arrival and alert data.

Timli servers request public PATH arrivals and alerts from Port Authority endpoints. These requests do not include your account data or precise device location.

PATH official website

NJ Transit

HBLR station metadata and schedule or arrival data for signed-in HBLR riders.

Timli servers send requested HBLR stop identifiers and standard server or network metadata needed to retrieve HBLR station or schedule and arrival data.

NJ Transit website

MTA Transiter backend

Configured backend used to fetch signed-in MTA metadata, arrivals, and route-scoped alerts.

Timli servers send selected route IDs and station IDs to the configured Transiter backend to load route catalogs, stops, arrivals, and alerts for your MTA cards.

Transiter project

Cookies, local storage, and similar technology

Timli uses localStorage and sessionStorage to remember app preferences such as dashboard choices, QR visit history, banner dismissals, and update-dismissal state on your device.

If you use account features, Clerk may use essential cookies or similar session technologies to keep sign-in working. We do not use your personal information for cross-context behavioral advertising, and we do not load third-party ad network tags on this page.

How long data is kept

Retention depends on whether the data lives in your browser, with an account provider, or with analytics or infrastructure vendors.

Browser-stored data

Preferences stored in localStorage or sessionStorage remain until you clear site data, overwrite the setting, or your browser removes the data.

Account-backed dashboard data

Saved dashboard metadata in Clerk remains until you change it, delete the account, or ask us to delete account-backed data.

Subscription and billing records

Billing account-to-customer links and billing-request retry records have no automatic expiration. Canceling Pro does not automatically delete these records or your saved boards. Processed Stripe event identifiers expire after 30 days. Stripe retains its own payment and invoice records under its policies. Contact support to request review or deletion of account-linked billing data.

Station reports and submission limits

The latest report for each station expires from live storage after 30 minutes. A fresh report replaces it and starts a new 30-minute period. Hashed account identifiers used for submission limits expire after five minutes. These periods apply to live application storage; infrastructure logs and backups follow provider policies.

Precise location data

Timli does not retain precise geolocation on its own servers. Weather lookups may be logged by Open-Meteo under its own policies.

Analytics and operational logs

Analytics and infrastructure records are retained according to vendor settings and our operational or security needs.

Your choices and privacy rights

You can use core PATH features without an account. You also have browser-level controls and can email us about account-backed data.

Your choices and privacy rights

  • Use public PATH arrivals, alerts, maps, and station pages without creating an account.
  • Clear browser-stored preferences by clearing site data or local browser storage.
  • Revoke geolocation permission through your browser or device settings and continue using the app without weather or closest-station features.
  • Update or remove saved dashboard cards while signed in, or email us to request deletion or correction of account-backed data.
  • When Timli prepares a subscription checkout, account self-deletion is disabled to avoid leaving a paid subscription without a login. To delete an account used for billing, contact support. Support first closes open checkouts and cancels active subscriptions, then handles account deletion. Canceling a subscription in Settings does not itself delete your account.

California residents

  • You may request to know the categories of personal information we collect, the categories of sources, the purposes for collection, and the categories of third parties we disclose to.
  • You may request access to or deletion of account-backed saved dashboard data we can reasonably verify as linked to you, subject to legal exceptions.
  • You may request correction of saved dashboard data we maintain through your account if it is inaccurate.
  • You may ask whether we sell or share personal information. As currently configured, Timli does not knowingly sell personal information or use it for cross-context behavioral advertising.

To make an access, deletion, or correction request, email us at livepathtracker@gmail.com and include enough detail about the account or device context for us to verify the request.

Timli does not knowingly sell personal information or use personal information for cross-context behavioral advertising.

Children's privacy

Timli is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child provided personal information through the service, email us and we will work to remove it.

Changes to this notice

We may update this notice as features, providers, or legal obligations change. When we do, we will update the last-updated date on this page and revise the effective date when needed.

Contact

For privacy questions, California requests, or account-backed data requests about Timli, email:

livepathtracker@gmail.com