The Unknown Dev
Privacy
What our apps do and don't do with your information, in plain terms.
Last updated: 3 November 2026
The short version. Our apps are built to work on your phone, not on our servers. We don't have accounts, we don't run analytics or advertising, and we don't sell anything to anyone. Where an app does need the internet to be useful, it's named below along with exactly what it sends.
Who we are
The Unknown Dev Ltd, a company registered in England and Wales (no. 17469763), registered office 71–75 Shelton Street, Covent Garden, London WC2H 9JQ. We are the data controller for anything described here. Email [email protected].
This website
This site runs no analytics, advertising tags or tracking scripts, and we don't set cookies ourselves. It is hosted by Cloudflare, which handles your IP address and the usual request details to deliver the pages and keep the site secure. If you arrived from one of our adverts, the page address may carry campaign labels such as utm_source. The page copies them into the Google Play link so that Google Play can show us which source an install came from, and nothing else is stored or sent from here. If you email us, we use your address only to reply.
Our apps
NotMyScuff Out now
Records the condition of a rented home so a tenant can defend their deposit.
Nothing leaves your phone unless you send it. Photos, videos, notes, meter readings, repair logs, documents and your name all live in the app's private storage on your device. There is no account and no cloud copy, and we never receive any of it.
- Camera and microphone are used only for photos and walkthrough videos you take in the app. They're saved in the app's own storage, not your gallery.
- Notifications: the app asks for notification permission so reminders about deposit deadlines and your dispute window can reach you. The reminders are worked out on your phone from dates you entered, and nothing is sent to us.
- Emails and exports — the evidence pack, the ZIP of originals, the housemate file and the letters the app drafts — are created on your phone and handed to whichever app you choose to send them with. What happens next is between you, that app and the recipient.
- Deleting a property removes its records and files. Uninstalling, or clearing the app's storage, removes everything. We can't recover it, because we never had it.
- Backups: the app opts out of Android's automatic cloud backup. Use the ZIP export to keep your own copy.
FleetWatch Out now
Live UK train journeys and alerts before your stop.
What stays on your phone
Your home and favourite stations, recent journeys, alert settings, alarm choice, Delay Repay claims and whether you have full access are stored in the app's own settings on your device. There is no account, no sign-in and no profile. Uninstalling the app removes all of it.
What the app sends
FleetWatch needs the internet to be useful. When you search, view a board or track a journey, the app asks our own service, PushPort, for live departure and service information, which PushPort obtains from National Rail. Those requests contain the stations, services and times you're asking about. They don't contain your name, an account or an advertising identifier.
Two things are different, and both are anonymous. If you turn on journey alerts, the app sends PushPort the trains you are watching, a random ID the app generates for itself, and a notification token from Google's Firebase Cloud Messaging so we can message you. We use them only to send those alerts, and they stop when you turn the alerts off. For the free trial, the app sends a one-way hash of your Android ID (an identifier that is reset by a factory reset), which cannot be turned back into the ID. PushPort stores that hash and the date the trial began, so that uninstalling and reinstalling does not restart the trial.
PushPort runs on a server we rent from Hetzner Online GmbH in Germany. Like any web server, it keeps standard access logs, which include the IP address the request came from, for security and fault-finding. These are kept for a short period and then deleted automatically. We don't build journey histories or profiles from them.
Location and permissions
FleetWatch never asks for or uses your location. Journey tracking works from the live timetable, not from where your phone is. The app runs a foreground service only while you're actively tracking a journey, so it can alert you before your stop, and it stops when the journey ends. It asks for notification permission so those alerts can reach you.
Paying for full access
FleetWatch offers a 14-day free trial, after which some features need a yearly subscription through Google Play. Google handles the payment; we never see your card details. The app asks Google Play whether your subscription is active and remembers the answer on your device, so it keeps working offline.
Shift O'Clock Out now
An alarm clock that follows a shift pattern or rota.
Your alarms stay on your phone. Alarms, groups, rotas, alarm pictures, history and settings are stored in the app's private storage on your device. There is no account and no cloud copy, and we never receive any of it. The app has no analytics, advertising or crash reporting.
- Backups: Back up writes a file to a place you choose with Android's file picker, and Restore reads one you choose. The app does not upload it. The app opts out of Android's automatic cloud backup.
- Pictures and sounds: an alarm picture is chosen with Android's photo picker, so the app never gets access to your photo library. An alarm sound is chosen from the sounds already on your phone.
- Permissions: notifications, exact alarms, full-screen alerts, display over other apps, vibration, wake lock and start-after-restart are used only to ring your alarms and timers on time. Nothing is collected through them, and the app never asks for your location, contacts, camera or microphone.
- Purchase: shift patterns, rotas of three weeks or more and widget customising need a one-off purchase through Google Play. The app asks Google Play whether the purchase exists on your Google account and remembers the answer on your device. We never see your card details.
- Deleting: deleting an alarm removes it. Uninstalling removes everything.
PocketProof In development
Keeps receipts findable for returns, warranties and claims.
Your receipts stay on your phone. The photographs and everything read from them (the shop, date, totals, VAT, items, and the last four digits of a card where one is printed) are stored in the app's private storage on your device. Text recognition runs on the device itself, so photographs are never uploaded. There is no account and no cloud copy, and we never receive any of it.
- The one request the app makes: if you ask for a shop's logo, the app sends the website address you entered to a third-party service over HTTPS to fetch the icon. Nothing from your receipts is sent with it. The app makes no other network requests.
- Exports: the ZIP and CSV files are created on your phone and saved or shared where you choose. What happens next is between you and that app or recipient.
- Deleting a receipt removes its record and its photograph. Uninstalling removes everything.
- Backups: if Android's automatic backup is switched on, your archive may be included in your own Google account backup. That is a Google service, covered by Google's privacy policy, and we don't receive it. The ZIP export gives you a copy of your own.
LifeStash In development
A place for insurance, pensions, ISAs and the rest of life's admin, with renewal reminders. This section will be completed before release.
Payments
Where an app charges for something, the purchase is handled by Google Play. We never see your card details. The app asks Google Play whether a purchase exists on your Google account and remembers the answer on your device so it works offline. Google's own privacy policy covers what they do with payment information.
What we collect, at a glance
| Thing | Who has it |
|---|---|
| Your photos, videos, notes and documents in NotMyScuff | Your phone only |
| Your receipt photos and what's read from them in PocketProof | Your phone only, plus your own Google backup if you've switched it on |
| Your alarms, groups, rotas and pictures in Shift O'Clock | Your phone only |
| Analytics, advertising identifiers, tracking | Nobody — we don't use any |
| Accounts, email addresses, passwords | Nobody — our apps have no sign-in |
| Crash reports | Only if you send one through Google Play; we see no personal content |
| Purchase status | Google Play, and a yes/no cached on your phone |
| Visits to this website | Cloudflare (hosting), standard server logs; no analytics or cookies from us |
| Live rail data requests (FleetWatch) | Our PushPort service (server in Germany) and National Rail |
| Web server access logs, including IP address (FleetWatch) | PushPort, kept briefly then deleted |
Children
Our apps are made for adults and aren't directed at children.
Your rights
Under UK data protection law you can ask what personal data an organisation holds about you, and ask for it to be corrected or erased. For the apps that keep everything on your device, we hold nothing to give you — but you're welcome to ask, and we'll tell you plainly. If you're unhappy with our answer you can complain to the Information Commissioner's Office.
Changes
If this policy changes, the new version appears here with a new date. If an app ever starts sending data somewhere, this page will say so before that version is released.