Privacy Policy for Subwhere London
Last updated: 1 October 2026
This Privacy Policy describes how Subwhere London ("Subwhere" on your Home Screen; "the App", "we", "us") handles information when you use the App and its widgets on iOS and Android.
Subwhere London is published by AppLand (Stefan Almqvist), based in Sweden.
Contact: hello@applandapps.com
Short version
The App does not collect personal data. There are no accounts, no analytics, no advertising and no tracking. Your location and your camera image are never sent to us. To show live trains, the App downloads Tube data through a small service we run. Those requests contain no account, no identifier and no location coordinates, and we keep no record of them. The augmented reality view uses Apple's or Google's AR services, which handle data as described under "Apple services" and "Google services".
What the App uses on your device
Camera feed. Used by your device's augmented reality framework (Apple's ARKit on iPhone and iPad, Google Play Services for AR on Android) to show the augmented reality view and to recognise the buildings around you, so the trains line up with the street. The App never records, saves or sends the camera image to us. On Android, Google processes camera data to power the AR session (see "Google services").
Location. Used to place trains relative to where you are standing, to find your nearest station and point the way to it, and on iPhone and iPad to choose the station the widget shows. The App uses your location on your device. It is never sent to us, never stored as a location history, and never shared or sold. On Android, Google processes location data to power the AR session (see "Google services").
Device motion and compass heading. Used for the AR view and the station compass. Processed on your device only.
Data kept on your device. So the widget can work without opening the App, the App keeps the list of Tube stations, the latest departures for your nearest station and your widgets' stations, TfL timetables for recent nearest and chosen stations, and the latest line status. It also remembers whether you have seen the introduction. None of this is sent to us, and it is deleted when you delete the App.
We do not use analytics, tracking SDKs, advertising, crash-reporting services or any other third-party data collection. The App does not use an advertising identifier and does not track you across other companies' apps or websites.
Widgets
Subwhere London offers optional widgets that show upcoming departures.
On iPhone and iPad, the Home Screen and Lock Screen widgets show either a station you choose or, by default, the station nearest you. To find the nearest station a widget reads your device's location on your device, including while the App is closed. As in the App, your location is used only on your device to work out which station is nearest. It is never stored as a history, sent to us, shared or sold.
On Android, the home-screen widget shows a station you choose. It does not use your location.
Live train data
Train positions, departures, timetables and line status come from Transport for London's open data. The App does not contact TfL itself. It asks a small service that AppLand runs on Cloudflare, which fetches the data from TfL and passes it on. This keeps our TfL access key out of the App and the load on TfL low.
These requests contain no account, no device identifier and no location coordinates. Most ask for the trains on the whole network or the status of every line, which is the same for everyone. When the App or a widget needs departures or a timetable for a single station, the request names that station and nothing else about you. For the nearest-station badge, and for the widget's default mode on iPhone and iPad, that is the station nearest you.
Like any internet connection, a request reaches our service with your device's IP address, which is needed to send the answer back. We do not keep logs of requests or IP addresses, and we do not use them to identify or follow anyone. Cloudflare processes this connection data on our behalf to deliver and protect the service, under its privacy policy: https://www.cloudflare.com/privacypolicy/
TfL receives requests only from our service, never from your device, so it does not see your IP address.
Apple services (iPhone and iPad)
The AR view uses Apple's ARKit location anchors (geotracking). To line up the scene, ARKit downloads Apple Maps localisation data for the area you are in and matches it against the camera image on your device. Apple states that no camera images are sent to Apple. The live map is Apple Maps (MapKit).
Apple may collect data through these services, the App Store and TestFlight as described in its privacy policy: https://www.apple.com/legal/privacy/
Google services (Android)
On Android, the App runs on Google Play Services for AR (ARCore), which is provided by Google and governed by the Google Privacy Policy. The AR view uses ARCore's Geospatial API to find exactly where you are standing: to power this session, Google processes sensor data (such as camera and location). Google explains how Google Play Services for AR handles your data here: https://support.google.com/ar?p=how-google-play-services-for-ar-handles-your-data
The live map is Google Maps (Maps SDK for Android).
Google may collect data through these services and Google Play as described in its privacy policy: https://policies.google.com/privacy
Beta testing
If you test a beta version through TestFlight, Apple shares some information with us: crash logs and usage information from the beta, your name and email address if we invited you by email (not if you joined through a public link), and any feedback and screenshots you choose to send. Apple explains TestFlight's data handling here: https://www.apple.com/legal/privacy/data/en/test-flight/
If you test a pre-release version through Google Play, we know the email address we added to the tester list, and we receive any feedback you choose to send.
We use this information only to test and improve the App, and we do not share it with anyone.
Crash and performance reports
Apple and Google may give us crash and performance reports about the App from people who have turned on diagnostics sharing in their device settings. These reports describe the problem and the type of device, not who you are. We use them only to fix problems in the App.
If you email us, we receive your email address and your message, and use them only to reply. We delete them on request.
Permissions
The App will ask for permission to use:
Camera - needed for the AR view.
Location - needed to place trains around you and to find your nearest station. On iPhone and iPad it is also used by the widget's nearest-station mode.
You can change these at any time: on iPhone and iPad in Settings under Subwhere, and on Android in Settings under Apps, Subwhere, Permissions.
Your rights
AppLand is responsible for the personal data described in this policy. Where we handle any (the connection data, beta testing information, crash reports and emails described above), we do so because it is needed to run, test and support the App. We keep so little that there is usually nothing for us to access, correct or delete, but you can ask us about any of it at the address below.
If you are in the EU or the UK, you can also complain to a data protection authority: in Sweden, where AppLand is based, the Swedish Authority for Privacy Protection (IMY); in the UK, the Information Commissioner's Office (ICO).
Children
The App is not directed at children under 13, and it does not collect personal data from anyone.
Changes to this policy
If we change this policy, we will update the "Last updated" date above.
Contact
Questions? E-mail hello@applandapps.com.