Privacy Policy
Effective 5 November 2026
In short: Tube Saver (also known as Travel Saver / TfL Saver) keeps your journeys and claim history on your phone. You sign in directly on TfL's own website, we never see your password or journeys, and the app contains no ads, analytics or tracking.
How the app works
Tube Saver helps you view your Transport for London (TfL) contactless journey history, spot delayed journeys and fill in TfL's service delay refund form. All journey analysis happens locally on your device. It is an independent companion app and is not affiliated with, endorsed by, or connected to Transport for London (TfL).
TfL sign-in and journey sync
- Sign-in stays with TfL: When you sign in or submit a claim, the app opens TfL's official website (
contactless.tfl.gov.ukandaccount.tfl.gov.uk) in an on-device browser view. Your password, SMS verification codes and session cookie values are never read, stored or logged by us. - Syncing journeys and refunds: When you sync, the app fetches your monthly journey CSV statements, payment/billing CSV statements (used to match paid service delay refunds) and submitted refund history directly from your signed-in TfL session into local storage on your phone. It also reads the last 4 digits, expiry date and reference number of the cards listed on your TfL account so you can choose which cards to include.
- Submitting claims: When you claim a refund, the app pre-fills the journey details on TfL's claim page on your phone. You always review the form, complete the security check (CAPTCHA) and press Submit yourself.
Network requests and optional feedback
Tube Saver does not have user accounts and never sends your journeys, payment cards or personal details to us. Aside from connecting directly to TfL when you sign in, sync or claim, the app only makes these requests:
- TfL Unified API (
api.tfl.gov.uk): to look up public single fares and expected travel times between station pairs. - Line-status archive: to check whether a delay happened during a refundable disruption, the app downloads the public London line-status log for the calendar date of a delayed journey (
/day/YYYY-MM-DD). Only the date is requested—your stations, journey times and cards are never sent. - Optional in-app feedback: if you choose to use Send feedback, the app sends only what you submit—your message, an optional reply email address, an optional screenshot attachment (which you can remove or replace before sending), the app version and platform (
androidorios)—to our feedback worker so it can be emailed to us. Nothing is stored in a database, and IP addresses are never logged.
Storage, backups and deletion
Your synced journeys, claim outcomes, card selection and settings are stored locally on your device. If you have operating-system backups enabled (such as Google Backup on Android or iCloud Backup on iOS), your cached journeys and app settings may be included in your phone's backup; your TfL sign-in session is never backed up.
You can sign out of your TfL web session at any time in More → Sign out of TfL (which clears the in-app browser cookies and cache), and you can delete all cached journeys and settings in More → Clear data or by uninstalling the app.
Permissions
- Notifications (optional): used only to schedule local on-device reminders (such as weekly sync reminders) after your first sync if you allow them.
- Photo library (optional): accessed only if you choose to pick an image attachment when sending feedback.
Children
Tube Saver does not knowingly collect personal information from anyone, including children under 13.
Changes
If this policy changes, we'll update this page and the date at the top.
Contact
Questions about Tube Saver (Travel Saver) or this policy? Write to [email protected].