Privacy Policy
Access Compass · accesscompass.uk · last updated 2 October 2026
Access Compass is a free directory of disability support services, accessible places and how-to guides. It is run by ADAI Digital Ltd ("we", "our" or "us"). This page says what information Access Compass uses, where it goes, how long we keep it and what your rights are. It covers every edition of the app, including our UK editions and our Victoria, Australia edition.
- There are no accounts and no login. Access Compass sets no cookies and has no analytics. Place photos load from Wikimedia, which may set its own cookie.
- Your settings and saved items stay on your device. They are not sent to us.
- We receive information when you send us a correction or report a video.
- When the app opens, and about every 5 minutes while it is open, it asks our server how many reports each video has had. Like any request, it passes through Firebase Hosting, which sees your internet address.
- Maps, place photos, videos, the weather and some searches come from other services. Your device asks them directly, so they see your internet address too.
1. Who we are
Access Compass is run by ADAI Digital Ltd. We decide how this information is used. In data protection law this makes us the "data controller" (the organisation responsible for it).
ADAI Digital Ltd
Company number: 17242851
Registered in England and Wales
Registered office: Suite A, 82 James Carter Road, Mildenhall, England, IP28 7DE
Email: admin@adaidigital.co.uk
Check our official Companies House record
We are registered with the Information Commissioner's Office (ICO), the UK's data protection regulator. Our registration number is ZC208103. Check our ICO registration.
We have not appointed a data protection officer. Questions about privacy go to our data protection lead at ADAI Digital, at admin@adaidigital.co.uk.
2. What stays on your device
Access Compass works in your web browser. It saves these things in your browser's storage, on your device:
- Your display choices, such as theme, text size and reading font.
- Your access profile, saved items, your own places, trips, bookings, memberships and notes.
- Journey support plans, assistance requests, mobility aid details and booking references.
- Reports that are waiting to be sent. If a report cannot reach us, it stays on your device until it is sent. This copy includes any name and contact details you typed.
- A list of the videos you have reported, so the app can say "You reported this video".
- The Access Mate files, if you choose to download them.
We cannot see any of this. You can delete all of it at any time by clearing this site's data in your browser settings.
If you share a saved list or a trip, the link you share carries the information inside it. It is not stored on our server. If you share a journey support plan, only the sections shown in its preview go to the people you choose. If you press "Share my location" on the map, your browser asks your permission first. Your location goes into a Google Maps link that you share. We never receive it.
3. What we receive, and why
Corrections you send
You can tell us when a listing or a guide is wrong. When you send a correction, our server receives:
- what you wrote, the kind of problem you chose, and your answers to the optional questions
- which listing or guide it is about, and the address of the page you were on
- the time it arrived
- your name and a way to reply to you, only if you add them. If you leave out a name, the report is saved as "Anonymous reporter".
Please do not include a diagnosis, case details, safeguarding information, booking details or anyone else's personal information.
Why we use it: to check and fix our information, and to reply if you gave us a way to. Our lawful basis (the legal reason we can use it) is our legitimate interests: keeping Access Compass accurate, and answering you.
How long we keep it: we delete correction reports 6 months after they arrive. You can ask us to delete yours sooner (see section 9).
If a correction cannot be sent, the form offers to send it by email instead. Emails are covered below.
Reporting a video
Each video has a "Report this video" button. The report form says: "We keep what you tick, any note you write and the page you were on. A scrambled code made from your connection lets us count each person once. We never store your address. We delete it after 90 days." This is the full detail of what our server keeps when you report a video:
- Your ticks, any note, the time, which video, which place, and the address of the Access Compass page you were on. These are deleted 90 days after they arrive.
- No name and no contact details. We do not save your internet address with the report.
- For a video that was found automatically, a scrambled code made from your internet address and the video. It means your reports about that video count only once. It is deleted up to 30 days after your last report about that video, or sooner if we decide about the video.
- For every video report, a second scrambled code made from your internet address and the date. It stops one connection sending more than 20 video reports in a day. It is deleted after 2 days.
- Both codes are made with a secret key, so they do not show your internet address.
If the app cannot match your report to a YouTube video and a place, the report is kept in the same way as a correction instead, still with no name or contact details.
Please do not put personal details in the note. Some videos are found automatically and not checked by a person. They say so. If people report one of these, the app can hide it. Your device remembers which videos you reported, only so it can say "You reported this video".
Our lawful basis is our legitimate interests: keeping the videos accurate and suitable, counting each person once, and stopping misuse.
The video report count check
To know which automatic videos to hide, the app asks our server how many reports each video has had. It asks when the app opens and about every 5 minutes while it is open. This happens for every visitor, whether or not you look at a video.
This request sends no cookies, nothing you have saved and not the page you are reading. The answer holds counts only, never anyone's reports. Like any request, it passes through Firebase Hosting, which sees your internet address and your browser type (see "Server logs" below). Many of these requests may be answered by Google's cache, so they never reach our server.
Our lawful basis is our legitimate interests: hiding a reported automatic video quickly.
Server logs
Google's Firebase Hosting sends you the Access Compass pages, and our server runs on Google Cloud Run. Firebase Hosting, the Google service that sits in front of our server, sees your internet address. It keeps internet addresses for a few months, as Firebase states. The log on our server itself shows Firebase Hosting's address, not yours, for requests that come through it.
Google Cloud keeps a standard log of each request that reaches our server, such as a report or the count check. The log can include your browser type and the address your device asked for. We keep these logs for 30 days, which is Google Cloud's standard setting.
Why we use it: to deliver the website and keep it working and secure. Our lawful basis is our legitimate interests in running a safe, working service.
Emails
If you email us at admin@adaidigital.co.uk, we receive your email address, your message and anything else you put in it. Emails to us arrive in our Google Workspace mailbox. We use your email to reply to you. Our lawful basis is our legitimate interests in answering you. We delete emails we no longer need. We review them at least once a year.
4. Other services your device uses
Some parts of Access Compass come straight from other services. Your device connects to them directly, so each one sees your internet address and your browser type. Each one gets only what it needs for that part of the app, as listed here. Each has its own privacy notice.
- OpenFreeMap: the map pictures. Your device asks when a map is on screen. It receives which part of the map you are looking at. OpenFreeMap privacy policy.
- Wikimedia Commons: photos of places. The place photos come from Wikimedia Commons under their open licences. They load from Wikimedia's servers, which may set their own cookie (WMF-Uniq). Your device asks for them when a place with a photo is shown. Wikimedia privacy policy.
- YouTube (Google): video pictures and videos. Your device asks for the picture when a place or guide with videos is shown. A video loads only when you press it. Most videos then open on the YouTube website. Some guide videos play inside the guide, in YouTube's privacy-enhanced mode (youtube-nocookie.com). YouTube receives which video. Google privacy policy.
- Open-Meteo: the 5-day weather. Your device asks when you open a place that has a map position. It receives the place's position. Open-Meteo terms and privacy.
- Overpass API (OpenStreetMap data): accessible toilets, parking, hearing loops and similar places nearby. Your device asks only when you turn on the live accessible places map layer, or press "Find accessible facilities nearby". It receives the map area. We could not find a privacy notice for this service. About Overpass API.
- Photon by komoot: finds where a booking is. Your device asks only when you choose to use a booking as a base for planning. It receives the place name from that booking. komoot privacy policy.
- postcodes.io by Ideal Postcodes: finds where a postcode is. Your device asks only when you look up a postcode while adding your own place to the map. It receives the postcode. We could not find a privacy notice for postcodes.io itself. This is the policy of the company that maintains it. Ideal Postcodes privacy policy.
- Hugging Face and GitHub: the Access Mate files. Your device asks only if you choose to download Access Mate. They receive which files you download. Access Mate then runs on your device. Your questions stay on your device. Hugging Face privacy policy and GitHub privacy statement.
Links to other websites, such as councils, charities, Google Maps, Waze or what3words, open only when you tap them. Those websites have their own privacy notices.
Some links go to our company website, adaidigital.co.uk. That website counts visits with Cloudflare Web Analytics. Cloudflare says this does not use cookies. The website's own privacy notice explains this.
5. Cookies and analytics
Access Compass sets no cookies. It has no analytics, no advertising and no tracking. The place photos load from Wikimedia's servers, which may set their own cookie (WMF-Uniq). We do not set it and we cannot control it. See the Wikimedia privacy policy. If you press play on a video, YouTube may store information on your device. See our cookies and local storage page for more.
6. Who else gets your information
Google provides our website hosting, our server, our database, our server logs and our email inbox. Google handles this information for us under its contract with us. In data protection law, Google is our "processor" (a company that handles information for us).
We do not pass the reports you send us to anyone else. Our server sorts new reports by how urgent they look using fixed rules, not an AI service.
7. Where your information is kept
Our server runs in London, in Google Cloud's europe-west2 region. Reports are stored in Google's database (Firestore), which is in London too.
Google may handle some information outside the UK, for example to send you pages quickly from a place near you. Google's data processing terms say that when Google sends information to a country the UK does not treat as adequate, it uses an approved safeguard that it tells us about, or standard contractual clauses. We have accepted Google's data processing terms for this project.
The services in section 4 may be outside the UK. Your device connects to them directly, under their own privacy notices. If you use our Victoria, Australia edition, reports you send are stored in the UK.
8. How long we keep it
| Information | How long we keep it |
|---|---|
| Correction reports | 6 months, then deleted automatically |
| Video reports (ticks, note, time, video, place and page) | 90 days, then deleted automatically |
| Scrambled code for one person and one automatic video | Up to 30 days after your last report about that video, or sooner if we decide about the video |
| Scrambled code for one connection and one day | 2 days |
| Our server's request logs | 30 days |
| Emails | We delete emails we no longer need. We review them at least once a year. |
| Everything saved on your device | Until you delete it |
Automatic deletion is not instant. Google says it usually happens within 24 hours after the time is up.
9. Your rights
If you are in the UK, UK GDPR gives you the right to:
- get a copy of the information we hold about you
- have it corrected if it is wrong
- have it deleted
- ask us to limit how we use it
- object to us using it
- get it in a form you can take elsewhere, in some cases
Everything saved on your device you can see, change and delete yourself. For anything we hold, email admin@adaidigital.co.uk. If you sent a report, tell us the receipt number the app showed you, so we can find it. We will reply within one month.
If you are unhappy with how we use your information, please tell us first, so we can try to put it right. You can also complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, or call 0303 123 1113. In Australia, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
10. Do you have to give us information?
No. Corrections and video reports are optional, and so is a name or contact on a correction. You can use every part of Access Compass without sending us a report. Any website needs your internet address to send you its pages, and the video report count check shows it to Firebase Hosting.
11. Decisions made by computer
We do not make decisions about you by computer alone that have legal effects, or similar serious effects, on you. The app can hide an automatic video when people report it. That is a decision about the video, not about you.
12. Which law applies to you
In the UK, UK GDPR and the Data Protection Act 2018 apply, and the ICO is the regulator. For our Victoria, Australia edition, the Australian Privacy Principles apply, and the OAIC is the regulator. Our data protection statement has more detail, including information for organisations.
13. Changes to this page
We will update this page when Access Compass changes what it collects, and change the date at the top.