Away End App Ltd
Privacy Policy
Last updated: 24 September 2026
1. Who we are
Away End App Ltd ("Away End", "we", "us") runs the Away End mobile app (the "App") and the website at www.awayend.co.uk (the "Website"), including our waitlist. We are the controller of your personal data.
- Company number: 17316412, registered in England and Wales
- Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
- ICO registration number: ZC256058
- Contact: contact@awayend.co.uk
This policy explains what personal data we collect, why, who we share it with, how long we keep it, and your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018).
We don't sell your data. We make our money from Away End Plus subscriptions and from some affiliate links.
We may show adverts to users on the free plan in future. If we do, we'll update this policy and tell you before they start. We won't use your personal data to show you targeted adverts unless you've agreed to it, and Away End Plus subscribers won't see adverts.
2. Who the App is for
The App and the Website are for people aged 18 or over. We don't knowingly collect data from anyone younger. If you think someone under 18 has given us their data, email us and we'll delete it.
3. What we collect and why
| What | Examples | Why we use it | Legal basis |
|---|---|---|---|
| Account details | Email address, sign-in method (Apple, Google or email), unique username | To create and run your account | Contract |
| Profile and preferences | Club you support, when you last changed it, default starting point for directions, onboarding status | To personalise fixtures, guides and away day plans | Contract |
| Away day plans | Fixture, start and end places, arrival time, transport mode, maximum walking time, stops, car park | To build and save your travel plans | Contract |
| Accessibility preference | Whether you've switched on accessibility mode for routes | To give you accessible routes | Your explicit consent, which you can withdraw by switching it off |
| Ground Passport | Grounds visited, visit dates, notes, photos you add | To keep your personal record of grounds visited | Contract |
| Votes, feedback and suggestions | Pub and venue votes and ratings, matchday feedback, corrections you suggest to ground information | To improve guides for all fans (shown to others only as combined, anonymous results) | Legitimate interests |
| Messages to us | Feedback and support messages sent in the App or by email, and forms on the Website | To reply and to improve Away End | Legitimate interests |
| Subscription and rewards | Away End Plus status, purchase and renewal records (from Apple, Google and RevenueCat), reward claim codes, refund records | To provide Away End Plus, deliver rewards and keep financial records | Contract; legal obligation (tax and accounting records) |
| Waitlist data | Email address, club, referral code and referrals, ranking actions, final rank, badges | To run the waitlist competition, award ranks and badges, and deliver rewards | Contract (competition rules); legitimate interests |
| Notifications | Device push token, platform, notification history | To send the fixture and travel notifications you've switched on | Consent (via your device's notification permission) |
| Location | Your device's location, if you allow it | To show where you are on maps and give directions. It's used on your device and is not stored against your account unless you save it as a starting point | Consent (via your device's location permission) |
| Usage and diagnostics | App screens used, features tapped, device and OS type, crash and error reports | To fix bugs and understand which features are used | Legitimate interests. Crash and error reports are always on because they're needed to find and fix faults. Usage analytics is on by default, and you can switch it off at any time in Settings |
| Business reporting | Account, sign-up and subscription records, with our own team's accounts filtered out | To measure how Away End is growing (reports use totals, not individual profiles) | Legitimate interests |
| Security data | A hashed (scrambled) IP address and attempt logs on the reward claim page | To prevent fraud and abuse | Legitimate interests |
Where we rely on legitimate interests, we have balanced our interests against yours. You can ask us for details, and you can object at any time (see section 9).
You don't have to give us your data. Without an email address and username, though, we can't create an account.
4. Marketing
We'll send you emails about Away End news, features and offers only if you opted in, or if you're a user or waitlist member and didn't opt out when you signed up. Every email has an unsubscribe link, and you can also opt out in Settings. You'll still get essential service messages, such as account and subscription emails.
5. Who we share data with
We share data only with suppliers who help us run Away End, under contracts that limit what they can do with it. We don't let them use it for their own purposes.
| Supplier | What they do | Where the data is processed |
|---|---|---|
| Supabase | App database, sign-in and file storage | UK (London). Waitlist and Website forms: EU (Frankfurt) |
| PostHog | App analytics and crash reports | EU |
| RevenueCat | Manages Away End Plus subscriptions | USA |
| Loops | Sends our emails | USA |
| Google Maps Platform | Place search, maps and route calculation | USA and other countries |
| Netlify | Hosts the Website | USA and other countries |
| Google Workspace | Our email and documents, including emails you send us | USA and other countries |
| n8n | Runs our internal automations, such as sorting and summarising emails you send us | EU |
| Anthropic | AI that helps us sort and summarise emails you send us. It doesn't use your data to train its models | USA |
Apple and Google handle sign-in (if you use "Sign in with Apple" or Google) and take payment for subscriptions. For those they act under their own privacy policies. We never see your card details.
We use AI tools to help us work efficiently, for example to sort and summarise emails. AI doesn't make decisions about you: a person reviews anything that matters before we act on it.
We may also share data:
- with professional advisers such as accountants and lawyers;
- with the police, regulators or courts where the law requires it;
- with a buyer or investor if the business, or part of it, is sold or restructured. We'd tell you before your data became subject to a different privacy policy.
6. International transfers
The App's main database is in the UK. Some suppliers process data in the EU, which the UK recognises as giving adequate protection. Others process data in the USA. For those we rely on either:
- the UK Extension to the EU–US Data Privacy Framework (the "UK–US data bridge"), for suppliers certified to it (e.g. Loops); or
- the ICO's International Data Transfer Addendum to standard contractual clauses (e.g. RevenueCat).
You can ask us for a copy of the relevant safeguards.
7. How long we keep data
| Data | How long |
|---|---|
| Account, profile, passport, photos and messages | Until you delete your account. Deletion is immediate, and copies in our backups are gone within 7 days |
| Votes, feedback, suggestions and away day plans | Anonymised when you delete your account, so the combined results can stay |
| Subscription, refund and reward records | 6 years after the transaction (tax and accounting law) |
| Waitlist data | Until 30 June 2027, once rewards have been claimed or expired. Your Founder badge stays on your App account |
| Messages and Website form submissions | 2 years after we last hear from you |
| Analytics and crash data | 12 months |
| Reward claim security logs | 90 days |
| Push tokens | Until you sign out, turn off notifications, or the token stops working |
8. Security
Data is encrypted in transit. Our databases use access controls, including row-level security. Only people who need access to do their job have it, and they're bound by confidentiality. No system is completely secure. If a breach puts your rights at risk, we'll tell you and the ICO as the law requires.
9. Your rights
You have the right to:
- get a copy of your data;
- correct inaccurate data;
- have your data deleted;
- restrict how we use it;
- receive your data in a portable format;
- object to processing based on legitimate interests, and to direct marketing at any time;
- withdraw consent at any time. This doesn't affect anything done before you withdrew it.
We don't make decisions about you that have legal or similarly significant effects using automated processing alone. Waitlist ranks were calculated automatically from published rules.
To use any of these rights, email contact@awayend.co.uk. You can delete your account at any time in Profile → Delete Account or at www.awayend.co.uk/delete-account. It's free. We may need to check your identity, and we'll reply within one month (up to three months for complex requests, in which case we'll tell you).
10. Complaints
If you're unhappy with how we've handled your data, contact us first at contact@awayend.co.uk with "Data protection complaint" in the subject line. We'll acknowledge your complaint within 30 days and respond fully without undue delay.
You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
11. Cookies and similar technologies
The App uses PostHog for two things. Crash and error reporting is always on, because it's needed to find and fix technical faults. Usage analytics (which screens and features are used) is on by default so we can improve the App. You can switch analytics off at any time, free of charge, in Settings → Share usage analytics.
The Website doesn't use cookies, analytics, advertising or tracking. It only uses browser storage that is strictly necessary for it to work: keeping you signed in while you delete your account (cleared when you close the tab), and remembering your waitlist link so you can check your status. If you sign in with Google or Apple, those services may set their own cookies on their sites during sign-in.
12. Links to other sites
The App links to third-party sites, such as rail and ticket sellers, clubs and hospitality-related businesses. Some are affiliate links. Those sites have their own privacy policies, and we're not responsible for them.
13. Changes to this policy
If we make significant changes, we'll tell you in the App or by email before they take effect. The date at the top shows when this policy was last updated.
Working with us as a club, venue, partner, investor, supplier, researcher or journalist? See our Privacy Notice for Business Contacts.