1. Privacy at a glance
Scratch Rail saves the account details, map progress and journeys needed to provide the app. Your live map location is not stored, and marketing emails are optional. The sections below explain your choices, rights and how to contact us.
2. Information we use
We process your account identifier, email address, display name, account and marketing preferences, map selections, earned cards and journeys you choose to log. Journey records may contain a service identifier, travel date, approximate times, route, calling points, operator, mileage and duration. Our service providers may also process IP address, device, security and diagnostic information. If you purchase Premium, we receive a store purchase identifier, product, status and expiry; Apple or Google handles your payment details. We do not currently use advertising trackers or sell personal data.
3. Why we use it
Account, map, journey and entitlement data are used to provide, sync, secure and restore Scratch Rail under our contract with you. Limited security and diagnostic data are used under our legitimate interests in preventing abuse and keeping the service reliable. Optional marketing email relies on your separate consent. The signup marketing box is unticked by default, your choice is recorded, and you may withdraw consent in Profile or by emailing us. Essential account and service messages are separate from marketing. Your email and account identifier are needed to create and secure an account; adding journeys and marketing consent are optional.
4. Your live map location
Location is off by default. If you press Show my location and grant device permission, your device supplies a live position and accuracy estimate solely to place a marker on the map. Scratch Rail does not save this position, create a location history or upload it to your account. Tracking stops when you hide the marker, leave the map or switch to the London Underground map.
5. Processors and sources
Supabase provides authentication, database and server functions. Cloudflare may deliver the website. Resend may receive the email address and message content needed to send opted-in marketing emails, with delivery, bounce and complaint information. Apple and Google process in-app purchases and may share purchase status with us. Railway information comes from OpenStreetMap, Transport for London, Rail Data Marketplace and Network Rail; your Scratch Rail profile and diary are not sent to the railway-data sources.
6. International processing
Some providers may process information outside the UK. We only use an applicable UK adequacy regulation or an appropriate transfer mechanism, such as the UK International Data Transfer Agreement or UK Addendum, where required. Email us for information about the safeguards used for a particular provider. Provider locations and agreements are reviewed before public release and when providers change.
7. How long we keep information
We keep account, map, journey, card and entitlement records while your account exists so progress can be restored after a subscription ends. You can remove individual journeys. When you delete your account, we delete its live profile, map and journey records; processor backups may remain until their routine expiry. We retain only records needed for a legal obligation or a genuine dispute for the period that obligation or dispute requires. Marketing choices are retained while the account exists and as needed to honour an unsubscribe request. We review retention when providers or legal requirements change.
8. Your rights
You can change your display name, remove journeys, reset progress and delete your account in the app. You may also ask to access, correct, erase, restrict or receive a copy of your personal data. You can object to processing based on legitimate interests. You can withdraw marketing consent at any time without affecting account access. Contact scratchrail@gmail.com; we may need to verify that the account is yours. You can complain to the Information Commissioner’s Office.
9. Children and changes
Scratch Rail is not directed at children under 13. If you think a child under 13 has created an account, contact us. We will update this page and its effective date if our processing changes materially.
10. Operator and contact details
Scratch Rail is operated by Isaac Innes Jackson as a sole trader. For privacy questions or requests, email scratchrail@gmail.com.