Privacy
Draft for the private test. It will be reviewed before the app is public.
In short
- No accounts, no cookies, no adverts and no tracking.
- Your travel profile (for example pushchair, pregnancy or wheelchair) is health information. It is saved only on your phone.
- Your location and searches are used to plan that journey, then forgotten.
Your location
Your phone asks before sharing your location. The map dot stays on your phone. When you plan a journey, your start point (rounded to about 10 metres) is sent to our server to find routes. It is never put in a web address, never written to our logs, and never stored.
Map pictures (tiles) for the area on screen are loaded by your phone from OpenFreeMap, like any map app, so OpenFreeMap sees which part of London is shown and your internet address.
To draw walks along real streets, the start and end of each walk (rounded to about 10 metres) are sent to the OpenStreetMap walking router run by FOSSGIS. Nothing else is sent with them.
Home, recent places and last location
Your home, your recent places and your last known location (used when there’s no signal, for example underground) are saved only on this phone. You can remove them in Profile, or by clearing your browser data.
What you type
Postcodes are looked up with postcodes.io. Place and business names are looked up with Photon (OpenStreetMap, run by komoot) and, when switched on, Foursquare. Only the text you type is sent, searching around central London rather than around you. We keep recent searches in memory for up to an hour to save repeat lookups, then they are gone.
Your profile
Your profile is stored in your browser on this phone. It is sent with each journey search so the routes suit you, and is not stored by us. Clearing your browser data deletes it.
Data we fetch for everyone
Live lifts, lines, trains and buses (TfL), timetables (TfL and Network Rail) are fetched by our server for London as a whole. Nothing about you is sent with those requests.
Reports you send us
If you report a problem or tap “Still correct?” on a station page, we store what you chose, the station, any step count and note you typed, and the time. There are no accounts and no photos, so please don’t put your name or contact details in the note. To limit spam we also keep a scrambled fingerprint of your internet address (it changes every day and can’t be turned back into your address), and we delete it after a week. We read every report ourselves before changing anything on the site.
Advertising
A small card on the start page and the results page may carry an advert, always labelled “Ad”. We sell these ourselves. There is no advertising network and no tracking, and adverts are never chosen using your travel profile, your location or what you search for: everyone sees the same one. If you tap an advert you go to the sponsor’s own website, which has its own privacy policy.
Hosting
The app runs on Vercel. Like any web host, Vercel handles your internet address to deliver the pages. Our own code does not log what you search for.