US-first privacy notice

Privacy Notice

Timli keeps public PATH tools open, offers optional signed-in dashboard features, and tries to be specific about what data stays on your device versus what is shared with service providers.

Effective date

March 30, 2026

Last updated

March 30, 2026

Public PATH arrivals, alerts, maps, and station pages can be used without creating an account.
Most app preferences live in your browser unless you choose signed-in dashboard sync.
Saved dashboard data for signed-in riders is stored with Clerk so it can follow your account.
Precise location is requested only for weather or closest-station features.
If weather is enabled, coordinates go directly from your browser to Open-Meteo.
We use analytics and transit providers listed below to operate and improve the service.

Scope

This notice applies to www.timli.app, timli.app, their localized routes, and legacy livepathtracker.com traffic during the transition. It covers public PATH tools plus signed-in dashboard features for PATH, HBLR, and MTA riders.

Timli is the current product name. The official web address is www.timli.app; timli.app redirects there, and you may still see livepathtracker.com during the transition. Support remains available at livepathtracker@gmail.com.

Information we collect

The service handles a mix of on-device settings, account-backed dashboard data, location signals, analytics events, and transit lookup data.

On-device settings and history

Timli stores most guest-state preferences in your browser so the app can remember how you use it between visits.

  • Theme preference, transit mode, selected stations or cards, card order, pinned PATH station, and weather visibility preference
  • QR visit history saved in browser storage for the QR landing flow
  • Banner dismissal timestamps and PWA update-dismissal state stored on your device

Account and saved dashboard data

If you sign in, Clerk processes the account and session information needed to authenticate you, and Timli stores a saved dashboard snapshot in Clerk publicMetadata.

  • Saved dashboard metadata can include PATH stations, HBLR stop IDs, MTA route-and-station cards, transit mode, pinned PATH station, card style, weather preference, and snapshot version
  • Timli uses this saved dashboard metadata to sync your dashboard across signed-in sessions

Precise location data

Precise geolocation is requested only when you enable local weather or the closest-station feature.

  • Closest-station calculations happen in the browser
  • Timli does not store precise location on its own servers
  • When weather is enabled, the browser sends latitude and longitude directly to Open-Meteo to fetch current weather data

Usage analytics and diagnostics

We collect usage and diagnostics data so we can understand how the app performs and which features riders actually use.

  • Page views, referrers, locale, app version, display mode, and PWA install or update events
  • Feature interactions such as transit-mode changes, auth prompts, alert views, dashboard sync states, and QR campaign parameters
  • Some analytics events include route, stop, or station identifiers tied to the feature you interacted with

Transit lookup data

The app has to send selected route or stop identifiers through its APIs to load arrivals and alerts for the dashboard.

  • PATH arrivals and PATH alerts are requested by Timli servers from public Port Authority endpoints
  • Signed-in HBLR requests send selected HBLR stop IDs through Timli to NJ Transit data sources
  • Signed-in MTA requests send selected route IDs and station IDs through Timli to the configured Transiter backend

How we use data

  • Operate PATH, HBLR, and MTA arrivals, alerts, maps, and dashboard features
  • Remember browser-level preferences and sync saved dashboards for signed-in riders
  • Power optional weather and closest-station features when you grant location permission
  • Measure product usage, app reliability, and performance so we can improve the service
  • Understand how riders discover the app through QR codes, referrers, and campaign parameters
  • Maintain security, detect service issues, and troubleshoot bugs

Service providers and disclosures

We use the providers below to run sign-in, analytics, weather, and transit lookups.

Clerk

Account authentication and account-backed dashboard storage.

If you sign in, Clerk processes account details such as your email address, authentication or session data, and the saved dashboard snapshot that Timli stores in Clerk publicMetadata.

Clerk privacy policy

Plausible Analytics

Privacy-focused website analytics.

Receives pageview-level analytics such as page URL, referrer, and browser or device metadata used to measure site traffic.

Plausible data policy

OpenPanel

Product analytics for feature usage and app behavior.

Receives event names and properties such as locale, app version, transit mode, station count, QR campaign parameters, feature usage, and some selected station or route identifiers tied to your interactions.

OpenPanel privacy

Vercel Web Analytics

Site traffic and performance analytics.

Receives aggregated usage and performance data such as page views, referrers, browser, operating system, device category, and geography-derived analytics under Vercel's service.

Vercel analytics privacy

Open-Meteo

Weather data provider used only when weather is enabled.

When you turn on weather, your browser sends latitude and longitude directly to Open-Meteo to retrieve current weather conditions.

Open-Meteo terms

Port Authority PATH APIs

Public PATH arrival and alert data.

Timli servers request public PATH arrivals and alerts from Port Authority endpoints. These requests do not include your account data or precise device location.

PATH official website

NJ Transit

HBLR station metadata and schedule or arrival data for signed-in HBLR riders.

Timli servers send requested HBLR stop identifiers and standard server or network metadata needed to retrieve HBLR station or schedule and arrival data.

NJ Transit website

MTA Transiter backend

Configured backend used to fetch signed-in MTA metadata, arrivals, and route-scoped alerts.

Timli servers send selected route IDs and station IDs to the configured Transiter backend to load route catalogs, stops, arrivals, and alerts for your MTA cards.

Transiter project

Cookies, local storage, and similar technology

Timli uses localStorage and sessionStorage to remember app preferences such as dashboard choices, QR visit history, banner dismissals, and update-dismissal state on your device.

If you use account features, Clerk may use essential cookies or similar session technologies to keep sign-in working. We do not use your personal information for cross-context behavioral advertising, and we do not load third-party ad network tags on this page.

How long data is kept

Retention depends on whether the data lives in your browser, with an account provider, or with analytics or infrastructure vendors.

Browser-stored data

Preferences stored in localStorage or sessionStorage remain until you clear site data, overwrite the setting, or your browser removes the data.

Account-backed dashboard data

Saved dashboard metadata in Clerk remains until you change it, delete the account, or ask us to delete account-backed data.

Precise location data

Timli does not retain precise geolocation on its own servers. Weather lookups may be logged by Open-Meteo under its own policies.

Analytics and operational logs

Analytics and infrastructure records are retained according to vendor settings and our operational or security needs.

Your choices and privacy rights

You can use core PATH features without an account. You also have browser-level controls and can email us about account-backed data.

Your choices and privacy rights

  • Use public PATH arrivals, alerts, maps, and station pages without creating an account.
  • Clear browser-stored preferences by clearing site data or local browser storage.
  • Revoke geolocation permission through your browser or device settings and continue using the app without weather or closest-station features.
  • Update or remove saved dashboard cards while signed in, or email us to request deletion or correction of account-backed data.

California residents

  • You may request to know the categories of personal information we collect, the categories of sources, the purposes for collection, and the categories of third parties we disclose to.
  • You may request access to or deletion of account-backed saved dashboard data we can reasonably verify as linked to you, subject to legal exceptions.
  • You may request correction of saved dashboard data we maintain through your account if it is inaccurate.
  • You may ask whether we sell or share personal information. As currently configured, Timli does not knowingly sell personal information or use it for cross-context behavioral advertising.

To make an access, deletion, or correction request, email us at livepathtracker@gmail.com and include enough detail about the account or device context for us to verify the request.

Timli does not knowingly sell personal information or use personal information for cross-context behavioral advertising.

Children's privacy

Timli is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child provided personal information through the service, email us and we will work to remove it.

Changes to this notice

We may update this notice as features, providers, or legal obligations change. When we do, we will update the last-updated date on this page and revise the effective date when needed.

Contact

For privacy questions, California requests, or account-backed data requests about Timli, email:

livepathtracker@gmail.com