← Back to app

Privacy Policy

Last updated: 20 July 2026

1. Introduction

TrainSpot UK ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your personal information when you use our website and services (collectively, the "Service"). By using TrainSpot UK, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect the following types of information:

  • Account Information: When you create an account, we collect your email address, password, and optional display name. If you sign in with Google, we receive your name, email address, and profile picture from Google in accordance with their privacy policy.
  • Location Data: With your permission, we access your device’s geolocation to show nearby train stations and relevant train information. You can disable location access at any time through your device settings.
  • Usage Data: We collect information about how you interact with the Service, such as the pages you visit, features you use, and the time spent on the platform.
  • Train Sightings & Favourites: Any train sightings you log or stations you mark as favourites are stored and associated with your account.
  • Device & Log Data: We automatically collect device information (browser type, operating system, IP address) and server logs to maintain security and troubleshoot issues.

3. How We Use Your Information

We use your information for the following purposes:

  • To provide, maintain, and improve the Service
  • To personalise your experience (e.g., showing nearby stations)
  • To authenticate your identity and secure your account
  • To store and display your train sightings and favourite stations
  • To analyse usage trends and improve our features
  • To comply with legal obligations

4. Legal Basis for Processing

For users in the European Economic Area (EEA) and United Kingdom, we process personal data under the following legal bases:

  • Performance of a contract: Processing necessary to provide the Service you requested
  • Consent: Where you have given explicit consent (e.g., for location data or marketing communications)
  • Legitimate interests: For security, fraud prevention, and service improvement, provided these interests are not overridden by your rights
  • Legal obligation: Where required by applicable law

5. Data Sharing & Third Parties

We do not sell your personal data. We may share information with the following categories of third-party service providers:

  • Supabase: Our backend infrastructure and database provider. Data is stored on Supabase’s secure servers. See Supabase’s Privacy Policy.
  • Google: We use Google OAuth for authentication and Google AdSense for advertising. Google may collect and process data in accordance with Google’s Privacy Policy.
  • Analytics: We may use analytics providers to understand how users interact with the Service.

We may also disclose information if required by law, to protect our rights, or in connection with a business transfer (e.g., merger or acquisition).

6. Advertising

TrainSpot UK displays advertisements served by Google AdSense. Google and its partners may use cookies and similar technologies to serve ads based on your prior visits to our Service and other websites. You can opt out of personalised advertising by visiting Google Ads Settings.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymise your personal data within 30 days, except where retention is required for legal compliance, dispute resolution, or enforcement of our agreements.

8. Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS/SSL) and at rest, secure authentication practices, and access controls. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request that we correct inaccurate or incomplete data
  • Deletion: Request deletion of your personal data ("right to be forgotten")
  • Restriction: Request that we limit how we use your data
  • Portability: Receive your data in a structured, machine-readable format
  • Objection: Object to processing based on legitimate interests or for direct marketing
  • Withdraw Consent: Withdraw consent at any time where we rely on it

To exercise any of these rights, please contact us using the details below. We will respond within one month.

10. Children's Privacy

TrainSpot UK is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it promptly.

11. International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction, including the United States, where our service providers operate. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses, to protect your data during such transfers.

12. Cookies & Similar Technologies

We use cookies and similar technologies to maintain your session, remember your preferences, and analyse usage. Essential cookies are required for the Service to function. You can manage cookie preferences through your browser settings. Third-party advertisers may also use cookies as described in their respective privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.

14. Your Data Deletion Rights

You have the right to request the deletion of your personal data and account at any time. To submit a deletion request, please visit our Request Data Deletion page. We will process verified requests within 30 days.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

TrainSpot UK

Email: privacy@trainspotter.uk