Privacy policy

Last updated: 28 October 2026

Trackbak helps you keep track of your UK rail journeys, check whether a train arrived late or was cancelled, and keep a record of the Delay Repay claims you make. This policy explains what information the app holds about you, why, who else is involved, and what you can do about it.

Who is responsible

Trackbak is run by an independent UK sole trader ("we", "us"), who is the data controller for the information described here. We are registered with the UK Information Commissioner's Office (ICO) as a data controller, registration number ZC212583. You can contact us at hello@trackbak.app.

What we collect

Your account. Your email address and a password. Passwords are stored by our authentication provider in hashed form; we never see them. We also send you a one-time code by email to confirm your address and to reset your password.

Your journeys. The journeys you save: origin and destination stations, date, departure and scheduled arrival times, ticket price and ticket type (single or return), and whether the journey repeats.

Delay and claim records. For each journey we check: the actual arrival time, how late it was, whether the train was cancelled, the train operator, the compensation the journey may qualify for, and any claim reference and claim status you record in the app.

Technical records. Our hosting provider keeps short-lived service logs (for example, sign-in attempts and the IP address they came from) to run and secure the service.

We do not collect your name, phone number, location, contacts or payment details. Trackbak has no advertising and no analytics or tracking tools, and we do not sell or share your information for marketing.

Why we use it

We use your information only to provide the app: to sign you in, store your journeys, look up how those trains actually ran, and work out whether you may be owed compensation. The legal basis is that this is necessary to provide the service you asked for (UK GDPR Article 6(1)(b)). We use the technical records to keep the service secure, which is in our legitimate interests (Article 6(1)(f)).

Who else is involved

• Supabase hosts our database, sign-in and server functions. Your data is stored in Supabase's London (UK) region. Supabase acts on our instructions under a data processing agreement.
• Our email provider sends your sign-in and password-reset codes, and so receives your email address for that purpose only.
• Rail Data Marketplace (National Rail data). To check a journey we send the station codes, date and times to National Rail's data services. We do not send your email address or anything else that identifies you.

Trackbak does not submit Delay Repay claims for you. When you follow a link to a train operator's claim page, anything you enter there is handled by that operator under its own privacy policy.

How long we keep it

We keep your account, journeys and delay records for as long as you have an account. When you delete your account they are permanently deleted straight away. Copies may remain in our hosting provider's encrypted backups for up to 7 days before those backups expire.

Deleting your account

You can delete your account at any time in the app: open Settings and tap Delete account. This removes your account and everything linked to it. If you no longer have the app, see how to delete your account by email.

Your rights

Under UK data protection law you can ask for a copy of your information, ask us to correct or delete it, object to or restrict how we use it, and ask for it in a portable format. Email hello@trackbak.app and we will reply within one month. If you are unhappy with how we handle your information you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.

Security

Data is encrypted in transit and at rest. Each user can only read and change their own journeys and records.

Children

Trackbak is not intended for children under 13 and we do not knowingly collect their information.

Changes to this policy

If we change this policy we will update the date at the top, and tell you in the app if the change is significant.