Privacy policy
Last updated 1 November 2026
Delayd tells you about delays, cancellations and disruption on the train, Tube and DLR journeys you choose. This policy explains what personal data Delayd uses to do that, why, who else is involved, how long it is kept and the rights you have. We collect as little as the app needs, we never sell your data, and Delayd has no adverts and no advertising or analytics trackers.
Who we are
Delayd is provided by Demersys Technology Ltd, a company registered in England and Wales (company number 13845074), 135 Drayton Road, Sutton Courtenay, Abingdon-on-Thames, OX14 4HA. We are the controller of the personal data described here. For anything about your data, email support@delayd.uk.
What we collect and why
| Data | Why we use it | Legal basis |
|---|---|---|
| Your account: your email address, how you sign in (an email link, Google or Apple), and the identifier your sign-in provider gives us. With Sign in with Apple you can choose to share a private relay address instead of your real one. | To create your account, sign you in, and send the one-time sign-in links you ask for. | Contract |
| Your routes and settings: the stations you follow, the days and times you travel, which alerts you want, notices you dismiss, and whether you have muted notifications. | To show your routes and decide which alerts to send you. | Contract |
| Your devices: an identifier Delayd creates for each device you sign in on, the device's push notification address (from Apple or Google), and which signed-in devices you have. | To deliver alerts to your phone, and to let you see and sign out other devices. | Contract |
| Alerts we have sent you: which train an alert was about and when. | To avoid telling you the same thing twice and to show today's alerts in the app. | Contract |
| Proof that the app is genuine: for iPhones, a key from Apple's App Attest; for Android, a verdict from Google Play Integrity that the app and device have not been tampered with. | To keep Delayd's service and data available only to the genuine app, and to prevent abuse. | Legitimate interests |
| Subscriptions: whether you have a subscription or free trial, which plan, when it renews or ends, and the store's reference for it. Payments are handled entirely by Apple or Google; we never see or store your card details. | To give you the features of the full version you are entitled to. | Contract |
| Technical records: the internet address a sign-in link was requested from (kept for a few minutes), and service logs containing your account identifier and the requests your app made. | To stop sign-in links being requested in bulk, keep the service secure, and fix faults. | Legitimate interests |
Location
Location is optional, and the app asks for it only with an explanation first. If you allow it, your phone uses your location on the device to work out which way you are travelling on a route (and, if you turn on “Mark journeys done automatically”, when you arrive at one of your stations). Only the result — which route and direction — is sent to us. Your location itself never leaves your phone, and we never store it.
What we do not do
We do not sell or rent your data, show adverts, build advertising profiles, or use third-party analytics or tracking. We do not make decisions about you by automated means that have legal or similarly significant effects.
Who else is involved
We use these providers to run Delayd. They process data on our behalf or, for sign-in and app stores, under their own terms:
- Amazon Web Services (Amazon Web Services EMEA SARL): hosts Delayd's servers and database in London, and sends our sign-in emails.
- Apple: Sign in with Apple, push notifications to iPhones, App Attest, and App Store purchases.
- Google: Sign in with Google, push notifications to Android (Firebase Cloud Messaging), Play Integrity, and Google Play purchases.
Train and Tube information comes from National Rail and Transport for London. We send them nothing about you. We may disclose data if the law requires it, or to protect the rights and safety of our users or others.
International transfers
Our servers and database are in the United Kingdom. Apple and Google may process data in other countries, including the United States, when they deliver notifications, sign you in or handle purchases. Where personal data leaves the UK, it is protected by the safeguards UK data protection law requires, such as adequacy regulations or the UK International Data Transfer Agreement or Addendum.
How long we keep it
- Your account, routes and settings: for as long as you have an account.
- Deleting your account: you can delete it in the app (Account › Delete account). It is locked straight away and permanently erased after 30 days; until then you can cancel. Erasure removes your account, routes, settings, devices, alerts and subscription records.
- Alerts sent to you: only for the current day.
- Sign-in request addresses: a few minutes. Service logs: 30 days.
Deleting your account does not cancel a subscription with Apple or Google — cancel it in your App Store or Google Play settings.
Your rights
Under UK data protection law you have the right to access your personal data, to have it corrected, to have it erased, to restrict or object to our use of it, and to receive it in a portable form. To use any of these rights, email support@delayd.uk; we will reply within one month. You can also delete your account yourself in the app at any time.
If you are unhappy with how we use your data, please tell us first. You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint.
Children
Delayd is not intended for children under 13, and we do not knowingly collect their data.
Security
Data is encrypted in transit and at rest, access to our systems is restricted, and the app must prove it is genuine before it can use Delayd's service. Delayd uses no passwords: you sign in with a one-time email link, Google or Apple.
Changes to this policy
If we change this policy we will update the date at the top, and tell you in the app if a change is significant.