Information kept on your device
Your favourite and recent stations, board and display preferences, Time to Leave walking times and free Live Activity preview count are stored locally on your device. Deleting the app removes this local information, subject to Apple’s normal backup and restore behaviour.
Live Tube information
When you open a board, TubeBoard requests arrival predictions and line status information from Transport for London for the station and line you selected. TfL’s own terms and privacy practices apply to its services.
Location
Nearby Station is optional. If you allow location access, TubeBoard uses your coordinates on your device to match nearby Tube stations. TubeBoard does not send those coordinates to its service. You can decline or revoke access in iOS Settings and continue using the app.
Live Activities
When you start a Live Activity, the app sends the TubeBoard service a random install identifier, the activity identifier and Apple push token, the station, line and optional platform you selected, selection mode, app version, build number, environment and service timestamps.
This information is used only to update the board through Apple Push Notification service. It is not used for advertising or cross-app tracking. Active registrations last no more than eight hours. Inactive records are scheduled for automatic deletion after the 24-hour retention window. The random install identifier is not an Apple advertising, vendor or hardware identifier and is reset when the app is deleted.
Purchases
Premium purchases are processed by Apple through the App Store. TubeBoard can read your current entitlement status so it can unlock Premium, but does not receive or store your payment-card details. If you enable Premium disruption alerts in a supported build, the app sends an Apple-signed transaction to the TubeBoard service. The service verifies it with Apple’s official library, immediately discards the signed transaction, and retains only the product identifier, expiry date if applicable, and verification time for the alert registration. Apple’s purchase terms and privacy policy apply.
Premium disruption alerts
If you opt in, TubeBoard sends a random install identifier, the Apple push token, your selected lines, severity and quiet-hours preferences, time zone, resumed-service setting, app/build details and push environment. The service uses these only to decide whether to send the alerts you requested. It does not receive your location, account, favourites, notification-open history or payment details.
The service hashes the random install identifier and encrypts the push token at rest. Turning alerts off deletes the registration immediately. Apple’s invalid-token response also deletes it immediately; expired Premium access is removed at expiry; otherwise inactive registrations are deleted after 90 days. Operational logs do not contain the token, random identifier or signed purchase transaction and are retained for no more than 14 days.
Premium widget updates
Supported Premium widgets send an opaque Apple widget push token, its push environment, the names of the widget types in use and a registration revision. They do not send the station, widget configuration, location, installation identifier or travel history. An Apple-signed purchase transaction is used transiently for verification and is not persisted or logged; the widget service retains no product or payment details.
The token is encrypted at rest. Its update lease lasts no more than 24 hours and ends earlier if the verified subscription expires. An expired lease cannot receive further hints. The next normal service cycle, start or registration cleanup removes its encrypted token. Explicit removal or an invalid-token response also removes that token from the registration. A hash-only revision fence is retained for up to seven days to reject older requests, then removed by the next operating cleanup. These cleanup operations require the service to be running; they are not a promise of disk deletion while it is stopped. A same-revision registration may renew an ordinary expired lease with newly verified proof, but cannot revive an explicitly deleted revision. Apple controls when a widget hint is delivered and the widget refreshes.
Website and service logs
This website has no account, forms, advertising pixels, analytics scripts or cookies. Like most hosted services, the infrastructure may create routine security and operational logs such as request time, requested path, response status, user agent and IP address. Notification APIs also use short-lived, in-memory rate limits to protect the service from abuse. Service operational logs are kept for no more than 14 days.
Children and international use
TubeBoard is a general travel utility and does not knowingly collect children’s information. The service is operated in the United Kingdom and is intended for supported London rail departure information.
Changes and contact
This page will be updated if TubeBoard’s data practices change. Questions or privacy requests can be sent to support@tubeboard.co.uk.