Privacy Policy - Train Mate

1. Introduction

Train Mate ("we", "our", "us") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal information when you use our mobile application and associated services.

2. Information We Collect

Account Information

When you create an account, we collect your email address and password (stored securely using industry-standard hashing).

Location Data

With your permission, Train Mate uses your device's location to provide geofence-based notifications when you arrive at your registered stations. Location data is processed on-device and is not continuously tracked or stored on our servers.

Route and Journey Data

We store your saved routes, journey searches, and travel preferences to provide personalised services and commute notifications.

Device Information

We collect a device identifier and push notification token to deliver notifications to your device.

Usage Patterns

The App learns your commute patterns (typical travel times per route and day of week) locally on your device to provide smarter notifications. This data is not uploaded to our servers.

3. How We Use Your Information

To provide real-time train information and departure notifications
To send disruption alerts for your saved routes
To deliver push notifications about your commute
To manage your account and premium subscription
To improve and maintain the App

4. Data Sharing

We do not sell your personal data. We may share limited information with:

Apple (App Store & APNs) — for subscription management and push notification delivery
Adapty — for subscription and entitlement management
National Rail / Darwin — station codes are sent to retrieve live departure data (no personal information is shared)

5. Data Storage and Security

Your data is stored on servers located in the United Kingdom. We use encryption in transit (TLS) and at rest, and follow industry best practices to protect your information. Pattern learning data and commute history are stored locally on your device.

6. Data Retention

We retain your account data for as long as your account is active. Journey search history is retained for 90 days. You may request deletion of your account and associated data at any time.

7. Your Rights

Under UK data protection law (UK GDPR), you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Object to processing of your data
Request portability of your data
Withdraw consent at any time

To exercise any of these rights, please contact us.

8. Children's Privacy

Train Mate is not intended for children under 13. We do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes through the App or via email. Your continued use of the App after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this privacy policy or our data practices, please contact us.