Privacy

Your choices

Dixi is free. We never sell personal data. Rail partners may receive genuinely anonymous, combined insight, such as “the 07:43 is usually busy in coach D”. Only insight assessed as genuinely anonymous may be shared—not your personal journey or protected identifiers. Home station, usual destination and walk settings stay on your device. Precise coordinates and audio are not stored in passenger contribution records.

Optional reports use protected, pseudonymous identifiers to prevent duplicates and improve advice. Reports appear to passengers only as combined information. Five independent contributors are needed for insights. Raw contributions are retained for up to 90 days; combined anonymous summaries may last up to two years. You can stop sharing and delete linked reports in contribution settings.

On-train tools being tested in the Lab

You choose your train; location is optional and only available while journey mode is on. Dixi does not store a location trail or use GPS to prove which train you boarded. Coach choice stays with the current journey.

A private journey link shows train, stations, expected time and status—not your exact location. Anyone you forward the link to can view it with Lab access. It ends on confirmed arrival, when you end or revoke it, or after three hours if arrival is not confirmed. Expired records are removed during private cleanup.

With your contribution consent and the private impact switch on, we measure which consenting devices view active reports to estimate passengers helped. Repeated and self views are excluded. A view does not prove boarding or benefit. View records and optional Dixi Plus interest are kept for up to 90 days and deleted when you withdraw consent. No named leaderboards or payments.

Feedback and quality checks

Sending feedback saves your note, the answer and broad station/service details privately. Optional quality sharing records playback timing and browser family, answer predictions, feed observations and outcomes you choose to report. No audio or coordinates are collected. These records are kept up to 90 days. Turning off quality sharing deletes linked quality records. Do not include names or ticket details in notes or screenshots. Tester invitations expire and early features are individually controlled.