Privacy Policy
Last updated: 28 March 2026
1. Who we are
EndMile ("we", "us", "our") operates the journey planning service at endmilerouting.co.uk and app.endmilerouting.co.uk. We are the data controller for the personal data described in this policy.
Contact: privacy@endmilerouting.co.uk
2. What data we collect
| Data | Purpose | Legal basis |
|---|---|---|
| Anonymised usage analytics (pages visited, features used, session duration) | Improve the product | Consent (cookie banner) |
| Hashed IP address (SHA-256 with daily rotating salt) | Rate limiting and abuse prevention | Legitimate interest |
| Journey search parameters (origin/destination as distance buckets, not raw coordinates) | Aggregate statistics on transport patterns | Legitimate interest |
| Error and crash reports (no personally identifiable information) | Fix bugs and improve reliability | Legitimate interest |
| Local storage preferences (theme, saved routes, mode preferences) | Remember your settings between visits | Necessary for the service |
We do not collect names, email addresses, phone numbers, precise home or work addresses, or payment information.
3. Cookies and tracking
We use PostHog (hosted in the EU) for product analytics. PostHog sets cookies to distinguish users between sessions. These cookies are only set if you accept analytics via the cookie consent banner.
If you reject cookies, no analytics cookies are set and no usage data is sent to PostHog.
You can change your preference at any time via the "Usage analytics" toggle in the app's profile settings.
4. Third-party services
We use the following third-party services to provide and improve EndMile:
| Service | Purpose | Data shared |
|---|---|---|
| PostHog (EU) | Product analytics | Anonymised usage events (consent required) |
| Sentry | Error monitoring | Error reports with PII scrubbed |
| National Rail (OJP API) | Train routing and fares | Journey origin/destination coordinates |
| TfL Unified API | London transit routing | Journey origin/destination coordinates |
| Photon (OpenStreetMap) | Address search / geocoding | Search query text |
| OpenMeteo | Weather forecasts | Coordinates (no API key) |
We do not sell or share your data with advertisers or data brokers.
5. Data retention
- Analytics event data: 30 days, then automatically purged
- Journey aggregate statistics: 90 days, then automatically purged
- API call logs (hashed IP, endpoint, duration): 30 days
- Error reports (Sentry): retained per Sentry's default policy (90 days)
- Local storage data: stored on your device until you clear it
6. Your rights (UK GDPR)
Under the UK General Data Protection Regulation, you have the right to:
- Access — request a copy of any personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data
- Restriction — ask us to limit how we use your data
- Portability — receive your data in a machine-readable format
- Object — object to processing based on legitimate interest
To exercise any of these rights, email privacy@endmilerouting.co.uk. We will respond within 30 days.
7. Data transfers
Your data is processed within the UK and EU. PostHog is hosted in the EU (Frankfurt). We do not transfer personal data outside the UK/EEA.
8. Children
EndMile is not directed at children under 16. We do not knowingly collect data from children.
9. Changes to this policy
We may update this policy from time to time. Material changes will be communicated via the app. The "last updated" date at the top indicates the most recent revision.
10. Complaints
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).