Privacy policy

My Travel Flow only works because you tell it where you live and how far you'll go. That's personal information, so we keep it minimal, we don't sell it, and we don't run advertising. This policy says exactly what we hold and why.

1. What we collect

• Account data: your email address, display name and the identifier supplied by a sign-in service if you choose that option. We never receive the password for that service.
• Planner data: your home label and address, your travel rules (which modes you'll use, drive and walk limits), your followed events and your saved trips.
• Journey data: the start and end points of journeys you search, so results and saved trips work. We don't track where you actually go.
• Payment data: your subscription status, plan and billing history. Payment credentials are handled by the service through which you subscribe — we never see or store them.
• Technical data: device, browser and app version, error reports and basic usage counts, so we can find and fix faults.

2. Why we use it

• Performing our contract with you — planning journeys, remembering your rules, showing your trips, taking payment.
• Our legitimate interests — keeping the service secure and reliable, diagnosing faults, understanding which features are used so we build the right things.
• Your consent — marketing emails. You can withdraw it at any time using the unsubscribe link in any message, and it won't affect the app.
• Legal obligation — tax and accounting records for the payments you make.

3. Who we share it with

• Google Maps Platform — to geocode addresses and calculate driving, walking and public transport routes. Google processes those locations under its own privacy policy and terms.
• Public transport data providers — rail, tube and bus timetable and live-status feeds, which receive the station or line you're asking about.
• Billing services — to process a subscription, issue receipts, handle tax and manage cancellations or refunds when you choose a paid plan.
• Infrastructure providers — hosting, database and email services that store data for us under contract, in the UK or in countries the UK considers adequate.

We don't sell or rent your personal data, we don't share it with advertising networks, and we only disclose it to police or courts when we're legally required to.

4. How long we keep it

Account, planner and trip data is kept while you have an account. If you delete your account, that data is removed within 30 days. Billing records are kept for seven years because tax law requires it. Error logs are kept for a short period and are never used to profile you.

5. Security

Access to your data is scoped so you can only see your own rows, passwords are stored hashed, and all traffic is encrypted in transit. No system is perfect — if a breach ever puts your data at risk, we'll tell you and the Information Commissioner's Office where the law says we must.

6. Your rights

Under UK data protection law you can ask to access, correct or delete your data, restrict or object to processing, receive your data in a portable format, or withdraw consent. Email contact@myflowlimited.com and we'll handle it within one month. Many of these you can do yourself from your profile, including deleting your account.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ico.org.uk).

7. Children

The service isn't aimed at children under 13, and we don't knowingly hold their data. If you think a child has given us information, tell us and we'll remove it.

8. Cookies

We use only the storage needed to keep you signed in and to remember basic display choices. No advertising or cross-site tracking cookies.

9. Changes

If this policy changes in a way that affects how we use your data, we'll tell you in the app and by email before it takes effect, and this page will show a new "last updated" date.

10. Contact

My Flow Limited is responsible for this data. Email contact@myflowlimited.com for any privacy request — access, correction, deletion or a question.