Privacy Policy

1. Who we are

Away End App Ltd ("Away End", "we", "us") runs the Away End mobile app (the "App") and the website at www.awayend.co.uk (the "Website"), including our waitlist. We are the controller of your personal data.

• Company number: 17316412, registered in England and Wales
• Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
• ICO registration number: ZC256058
• Contact: contact@awayend.co.uk

This policy explains what personal data we collect, why, who we share it with, how long we keep it, and your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018).

We don't sell your data. We make our money from Away End Plus subscriptions and from some affiliate links.

We may show adverts to users on the free plan in future. If we do, we'll update this policy and tell you before they start. We won't use your personal data to show you targeted adverts unless you've agreed to it, and Away End Plus subscribers won't see adverts.

2. Who the App is for

The App and the Website are for people aged 18 or over. We don't knowingly collect data from anyone younger. If you think someone under 18 has given us their data, email us and we'll delete it.

3. What we collect and why

If you join a group, its other members can see your username, the club you support, whether you're going to a group away day, whether your route for it follows the group's plan or is your own, and whether a visit has been recorded for you. They can't see your email address, your starting point, your location or the details of your own travel plans. Group totals, such as miles travelled, are worked out from members' plans and only ever shown as a total for the group. Anyone with a group's invite link can see the group's name, the organiser's username and how many members it has.

Where we rely on legitimate interests, we have balanced our interests against yours. You can ask us for details, and you can object at any time (see section 9).

You don't have to give us your data. Without an email address and username, though, we can't create an account.

4. Marketing

We'll send you emails about Away End news, features and offers only if you opted in, or if you're a user or waitlist member and didn't opt out when you signed up. Every email has an unsubscribe link, and you can also opt out in Settings. You'll still get essential service messages, such as account and subscription emails.

5. Who we share data with

We share data only with suppliers who help us run Away End, under contracts that limit what they can do with it. We don't let them use it for their own purposes.

Apple and Google handle sign-in (if you use "Sign in with Apple" or Google) and take payment for subscriptions. For those they act under their own privacy policies. We never see your card details. If you install the App from a group invite link on Android, Google Play passes the invite code to the App so you join the right group.

When a group invite link is shared in a messaging app such as WhatsApp, that app fetches the link to show a preview, which includes the group's name.

We use AI tools to help us work efficiently, for example to sort and summarise emails. AI doesn't make decisions about you: a person reviews anything that matters before we act on it.

We may also share data:

• with professional advisers such as accountants and lawyers;
• with the police, regulators or courts where the law requires it;
• with a buyer or investor if the business, or part of it, is sold or restructured. We'd tell you before your data became subject to a different privacy policy.

6. International transfers

The App's main database is in the UK. Some suppliers process data in the EU, which the UK recognises as giving adequate protection. Others process data in the USA. For those we rely on either:

• the UK Extension to the EU–US Data Privacy Framework (the "UK–US data bridge"), for suppliers certified to it (e.g. Loops); or
• the ICO's International Data Transfer Addendum to standard contractual clauses (e.g. RevenueCat).

You can ask us for a copy of the relevant safeguards.

7. How long we keep data

8. Security

Data is encrypted in transit. Our databases use access controls, including row-level security. Only people who need access to do their job have it, and they're bound by confidentiality. No system is completely secure. If a breach puts your rights at risk, we'll tell you and the ICO as the law requires.

9. Your rights

You have the right to:

• get a copy of your data;
• correct inaccurate data;
• have your data deleted;
• restrict how we use it;
• receive your data in a portable format;
• object to processing based on legitimate interests, and to direct marketing at any time;
• withdraw consent at any time. This doesn't affect anything done before you withdrew it.

We don't make decisions about you that have legal or similarly significant effects using automated processing alone. Waitlist ranks were calculated automatically from published rules.

To use any of these rights, email contact@awayend.co.uk. You can delete your account at any time in Profile → Delete Account or at www.awayend.co.uk/delete-account. It's free. We may need to check your identity, and we'll reply within one month (up to three months for complex requests, in which case we'll tell you).

10. Complaints

If you're unhappy with how we've handled your data, contact us first at contact@awayend.co.uk with "Data protection complaint" in the subject line. We'll acknowledge your complaint within 30 days and respond fully without undue delay.

You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

11. Cookies and similar technologies

The App uses PostHog for two things. Crash and error reporting is always on, because it's needed to find and fix technical faults. Usage analytics (which screens and features are used) is on by default so we can improve the App. You can switch analytics off at any time, free of charge, in Settings → Share usage analytics.

The Website doesn't use cookies, advertising or cross-site tracking. We use PostHog to count visits to the Website and taps on our app store links, so we can see which channels people find us through. This runs in cookieless mode: nothing is stored on your device, no profile is built about you, and visitors are counted with an anonymised, privacy-preserving hash on PostHog's servers (EU). Personal links, such as waitlist, reward or group invite links, are stripped before anything is sent.

Apart from that, the Website only uses browser storage that is strictly necessary for it to work: keeping you signed in while you delete your account (cleared when you close the tab), and remembering your waitlist link so you can check your status. If you sign in with Google or Apple, those services may set their own cookies on their sites during sign-in.

12. Links to other sites

The App links to third-party sites, such as rail and ticket sellers, clubs and hospitality-related businesses. Some are affiliate links. Those sites have their own privacy policies, and we're not responsible for them.

13. Changes to this policy

If we make significant changes, we'll tell you in the App or by email before they take effect. The date at the top shows when this policy was last updated.