Privacy Policy

Tubbie does not collect, store, or transmit any personal data about you. No analytics. No third-party trackers. No advertising. Read on for the specifics.

When you view a board, Tubbie sends the chosen station id (a public NaPTAN code such as “940GZZLUBNK”) to TfL’s public API. If you have saved a personal TfL API key, that key is included as a query parameter so TfL can apply the higher per-key rate limit. Nothing else.

Your personal TfL API key (if you set one) is stored in the iOS Keychain — encrypted by iOS and accessible only to Tubbie. App preferences (chosen theme, home station, refresh interval, pinned stations) are stored in UserDefaults on your device. None of this leaves your phone.

If you tap “Suggest nearest station” or “Near me” the App asks iOS for a single location fix. The coordinates are sent to TfL’s public station-search API so it can rank nearby stations. Coordinates are not stored on your device, not logged, and not shared with anyone other than TfL. The App does not use background location.

Once a request reaches TfL’s servers, TfL processes it under TfL’s own privacy policy. Tubbie has no visibility into and no control over TfL’s processing of those requests. See: tfl.gov.uk/corporate/privacy-and-cookies.

The App ships no third-party analytics SDK, no third-party crash-reporting service, no advertising network, and no third-party tracker of any kind. Diagnostic logging via Apple’s unified logging (os.Logger) stays on your device. The App subscribes to Apple’s MetricKit so crash and hang reports the OS would already generate flow back to the developer — this rides on your existing iOS-level diagnostics opt-in (Settings → Privacy & Security → Analytics & Improvements) with no third party involved and no separate transport off your device. If you have iOS Analytics turned off, the App receives nothing.

The App is intended for general audiences and does not knowingly collect personal data from anyone — including children under 13.

Because the App does not collect personal data, there is no personal data held by us to access, correct, or delete. For data held by TfL as a result of your use of TfL’s API, exercise your rights with TfL directly via the link above.

If this policy changes in a future release, the “Last updated” date above will move. Material changes will be called out in the App’s release notes.

Tubbie is an independent project and is not affiliated with, endorsed by, or connected to Transport for London. Powered by TfL Open Data. Contains OS data © Crown copyright and database rights 2016.

Privacy questions: brunobelcastro.com.