YarraTrak Privacy Policy

Last updated 20 October 2026

YarraTrak is a Pebble smartwatch app that shows live Melbourne train, tram and V/Line departures. It talks to a server run by Netcavy Media at ptv.netcavy.net. This page explains what that server receives and what happens to it. In short: it uses your data only to answer your requests. It doesn't build a profile of you and it doesn't keep logs that identify you.

What stays on your phone and watch

  • Your favourite stations, directions, display settings and theme.
  • Your OpenRouter API key, if you enable the AI assistant.
  • A list of the last few stops you looked up, used to speed up AI answers.
  • A random ID that the app generates when it's installed. It isn't linked to your name, Pebble account, phone or email.

Uninstalling the app, or clearing its settings, deletes all of this.

What the server receives

  • Live departures: the stop, route type, direction and destination for each favourite, plus the random app ID. The server needs these to fetch and push departure times to your watch.
  • Find Nearest (only when you use it): your phone's current location (latitude and longitude), used to find stops within 500 m of you. The app asks your phone for your location only when you open Find Nearest. It never tracks your location in the background.
  • AI assistant (optional, off by default): the text of your question, your recent stops and your OpenRouter API key.
  • Network details: like any internet service, the server sees your IP address while you're connected.

How it's used, and for how long

  • Departure requests are held only in memory while your watch is connected, and are dropped when it disconnects.
  • The random app ID and your IP address are used only in memory to apply rate limits, which stop any one device from overloading the service. They also replace your old connection when you reconnect. They aren't written to disk, logged or shown on any dashboard.
  • Your location is used once, to look up nearby stops, and then discarded. It isn't stored, cached, logged or linked to your app ID.
  • AI questions are kept briefly in memory so you can ask a follow-up question. They're never written to disk, and they're gone when the server restarts. Your API key is used only to send your question to OpenRouter and is never stored or logged.
  • The server keeps aggregate load statistics: totals such as how many watches are connected, request counts, cache hit rate and how many requests were rate-limited. These statistics contain nothing that identifies a person or device. They're kept in memory for up to 7 days.
  • The server doesn't keep access logs. Error logs can record technical details of a failure, but they don't include IP addresses, app IDs, locations or what you asked.

Third parties

  • Public Transport Victoria (PTV). The server asks the PTV Timetable API for departures at the stops you've chosen. When you use Find Nearest, it also sends your location to PTV to find nearby stops. These requests come from the Netcavy Media server, so PTV never receives your IP address, app ID or anything else about you or your device.
  • OpenRouter. Only if you use the AI assistant. Your question and stop context go to OpenRouter using your own API key, and from there to the AI model provider. Their handling is covered by OpenRouter's privacy policy and your OpenRouter account settings.
  • Cloudflare. Traffic to ptv.netcavy.net passes through Cloudflare, which processes requests (including IP addresses) under its own privacy policy.
  • Pebble / Rebble. The app is installed and configured through the Pebble mobile app, which has its own policies.

Nothing is sold, shared for advertising, or used to track you across other apps or websites.

Settings page

The settings page (ptv.netcavy.net/pebble-config.html) loads the public station list from the server. Your choices go straight back to the app on your phone. The page doesn't use cookies or analytics.

Self-hosting

YarraTrak is open source. If you point the app at a third-party server in its settings, that server's operator is responsible for how it handles your data, and this policy doesn't cover it.

Children

YarraTrak isn't aimed at children, and Netcavy Media doesn't knowingly collect personal information from anyone.

Changes and contact

If this policy changes, this page will be updated and the date above will change. For questions or requests, contact Netcavy Media.