Last updated 14 September 2026
Privacy policy
This policy explains what the Platted app and this website collect, why, where it is kept, and what you can do about it. We only hold what we need to track your trains.
The short version
- No advertising, no tracking, no selling data, no analytics SDKs.
- Your location, if you allow it, stays on your phone.
- Booking emails and ticket photos are deleted automatically after 30 days. Only the journey details are kept.
- Your data is stored with Amazon Web Services in London.
- You can delete your account, and everything tied to it, from Settings at any time.
Who we are
Platted is made by Weftworks. Weftworks is the controller of your personal data under UK data protection law. You can reach us at platted@weftworks.co.uk.
What we collect and why
Your account
You sign in with Apple. Apple gives us an identifier for your account and an email address. If you chose to hide your email, the address is a private relay address that Apple forwards to you. There is no password. We use these to identify your account and keep your journeys yours.
Your journeys
For each journey we keep the stations, the dates, the train times and the train we matched it to. If your booking shows them, we also keep the booking reference, the retailer and your seat reservation. We keep the platform and timing updates for those trains. We use all of this to show your board and send your alerts.
Booking emails and ticket photos
When you forward a booking email or photograph a ticket, we store it with Amazon Web Services in London and read it automatically to find the journey.
- Text in photos and attachments is recognised by Amazon Textract.
- A language model, Anthropic's Claude, running inside Amazon Bedrock in the EU, reads the text to pick out the journey details.
- Your emails and photos are not used to train any model.
- Raw emails and photos are deleted automatically after 30 days. We keep only the journey details taken from them.
Your location, and photos of platform boards
If you allow it, Platted reads your location once, on your phone, when you scan a platform board or ask for the next train from where you are. It uses it only to find the nearest stations, from a list kept on the phone. Your location is never sent to us or kept. Only the codes of the nearest stations are sent.
A photo of a platform board is sent to us with those station codes, read by Claude inside Amazon Bedrock in the EU to find the trains on it, and dropped at once. It is not stored and not used to train any model.
Notifications and the Lock Screen
We keep your device's push token and Live Activity tokens. We use them only to send you platform, delay and cancellation alerts and to update your train on the Lock Screen.
Subscriptions
Apple handles subscriptions and payment. We receive your subscription status and when it expires. We never see your card details.
Train history
Platted keeps its own record of how trains run: which platforms they used and when they ran. It is about trains, not people, and contains no personal data.
What we do not do
- We do not show advertising.
- We do not track you across other apps or websites.
- We do not sell your data.
- We do not put analytics or advertising SDKs in the app.
Why we are allowed to use it
We use your data to provide the service you asked for: tracking the trains you add and telling you about them. Under UK GDPR, that is processing necessary for our contract with you.
Where your data is and who handles it
Your data is stored with Amazon Web Services in the London region (eu-west-2). When an email or photo is read, its text is processed by Amazon Bedrock in the EU, as described above. The UK recognises the EU as giving personal data adequate protection.
We use two processors:
- Amazon Web Services, which hosts and stores Platted and runs the text recognition and language model described above.
- Apple, for Sign in with Apple, notifications and subscriptions.
Platted gets live train times and platforms from a live train data provider. That provider receives no personal data, only the identifiers of the trains we ask about.
How long we keep it
- Raw booking emails and ticket photos: deleted automatically after 30 days.
- Everything else tied to your account: removed when you delete your account.
Deleting your account
In the app, go to Settings and tap Delete account. This removes your account and everything tied to it straight away, including your journeys, emails and photos. It cannot be undone. You can also email platted@weftworks.co.uk and we will delete it for you.
Deleting your account does not cancel an Apple subscription. Cancel that in iPhone Settings, under your Apple ID, Subscriptions.
Your rights
Under UK GDPR you have the right to:
- see the personal data we hold about you
- have it corrected
- have it deleted
- object to how we use it
To use any of these rights, email platted@weftworks.co.uk. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
Children
Platted is not directed at children under 13.
This website
This website sets no cookies and runs no analytics or tracking scripts. Its fonts are loaded from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). To fetch them, your browser contacts Google, which receives your IP address as part of that request.
Changes to this policy
If we change this policy, we will update this page and the date at the top.
Contact
Weftworks, platted@weftworks.co.uk.