Legal
Privacy Policy
Last updated: 22 October 2026
Who we are
The Rock & Roll Walking Museum app and this website are operated by UFO Productions Ltd (“we”, “us”), a company registered in England and Wales, number 16993689, registered office Danny House, New Way Lane, Hurstpierpoint, Hassocks, England, BN6 9BB. We are the data controller for your personal data. Contact: rock@roll.fm.
What we collect, and why
An account identifier — the app creates an anonymous account when you first open it, so your purchase and progress have somewhere to live. It holds no name or contact details. Lawful basis: performance of a contract.
Email address — only if you choose to save your account, so you can sign in again with a link we email you. We never store a password. Lawful basis: performance of a contract.
Purchase records — which tour you bought, the amount, and the store’s reference for the transaction, so we can unlock what you paid for. Tours are paid for through the Apple App Store or Google Play, and prints through Stripe; your card details go to them, never to us. Lawful basis: performance of a contract, and our legal obligation to keep accounting records.
Tour progress — which stops you have unlocked and when, so a saved account picks your walk up again after a reinstall. Lawful basis: performance of a contract.
Your Then & Now captures — photos you take are saved on your device. If you order a print, that image is uploaded so our print partner can produce it. Lawful basis: performance of a contract.
Name and delivery address — only if you order a print, shared with our print partner solely to make and ship it. Lawful basis: performance of a contract.
Crash reports — if the app crashes, a report goes to our crash-reporting service (Sentry) with the device model, operating system, app version, the technical stack trace and the first eight characters of your account identifier, so we can match it to a support request. It contains no email address, location or photographs, and your IP address is not stored. Lawful basis: our legitimate interest in keeping the app working.
Support emails — when you email us from the app, the message is pre-filled with the app version, your phone’s platform and the first eight characters of your account identifier. You can see and edit it before sending. Lawful basis: our legitimate interest in answering you.
Your preferences — whether you want arrival alerts, stored with your account so a saved account keeps it after a reinstall, and deleted with it. Lawful basis: performance of a contract.
Launch list — if you join it on this website, your email address, when you agreed and the exact wording you agreed to, so we can send you one email when the app launches. Lawful basis: your consent, which you can withdraw any time by emailing rock@roll.fm.
Theme, narration speed and distance units stay on your device. When distance units are set to Automatic, the app reads your phone’s region setting on the device to choose miles or kilometres; it is not sent anywhere.
Location — used, never stored
Your location is processed on your device only, while the app is open, to show your distance to the next stop and unlock stops as you arrive. It is never sent to our servers, never stored as a history or trail, and never shared; the map provider’s telemetry is switched off. Location access is optional — every stop can be unlocked manually.
What we don't do
We don't sell your data. We don't run advertising. We don't track you across other apps or websites. This website sets no cookies, runs no analytics and loads nothing from anyone else; like any web host, ours keeps standard server logs of requests. The one exception is the launch-list form: submitting it sends your email address to Supabase, our database provider.
Who we share data with
Only the processors needed to run the service, each under contract and only on our instructions: Supabase (database and sign-in), Resend (sending sign-in emails), our print partner (prints only), Sentry (crash reports), Mapbox (map tiles), Google Workspace (our support inbox) and Hostinger (this website).
Apple and Google (app store purchases) and Stripe (print payments) process your payment as independent controllers, under their own privacy policies. Deleting your account with us does not delete their records; ask them directly.
Retention
Account data, progress and email are kept while your account exists and deleted with it. A launch-list entry is deleted once the launch email has gone out, or sooner if you ask. Records of purchases and print orders are kept for six years because tax law requires it, including after you delete your account. Support emails stay in our inbox, and crash reports in Sentry, only as long as we need them to deal with the issue; ask and we will delete them. A delivery address is kept only as long as we need it to deliver the print and deal with any problem with it. Captures on your device stay under your control.
Your rights
Under UK GDPR you can access, correct, export or delete your personal data, object to or restrict processing, and withdraw consent. Email rock@roll.fm, or see how to delete your account. You can complain to the Information Commissioner’s Office (ico.org.uk) if you’re unhappy with how we handle your data.
Children
The service is not directed at children under 13, and we do not knowingly collect their data.
Changes
If we change this policy we’ll update this page and, for material changes, tell you in the app or by email.