Skip to content

Privacy Policy

Last updated

This policy explains what Roam Guru collects, why, who else can see it, and how to get rid of it. It describes the app as it is actually built today, not as it might work later.

The short version

Roam Guru stores the trips, lists and menus you create, and the account details needed to sign you in. It does not track you, does not show ads, contains no third-party analytics or advertising SDKs, and never sells your data. There is no paid tier yet, so no payment information is collected at all.

You can permanently delete your account and its data from inside the app at any time — Settings → Account → Delete account.

What we collect

Account information

  • Email address — used to sign you in, to let friends find you by exact address, and to contact you about the beta.
  • Password — handled entirely by Google Firebase Authentication. It is never sent to or stored on our own servers, and we cannot read it.
  • Display name, and an optional username if you choose one.
  • Avatar choice — a short text “seed” used to generate a cartoon avatar. It is not a photograph, and you cannot upload one.
  • Account dates — when the account was created and last updated, and whether it joined the early-tester group.

Things you create in the app

  • Trips — names, dates, status, categories, the location or meetup point you enter, and planning settings such as hydration choices.
  • Gear lists and items, including any weights or volumes you record.
  • Menus and their meal slots.
  • Checklist activity — which gear item was checked off, by which person, and when.
  • Categories you create or customise.

People and invitations

  • Friend connections and pending friend requests.
  • Trip invitations, including any note the inviter writes. When you are invited to a trip you can see the inviter’s display name and email address, and they can see yours — this is how you know who is asking.
  • Finding people — searching for a friend matches an exact email address or username. This means someone who already knows your exact address can confirm you have an account.

Activity records

Because trips are shared, the service keeps a record of actions that change a shared trip — who removed a participant, who unchecked a gear item, who changed a role, and when. This exists so a group can answer “what happened to that?”, and so we can investigate support requests and abuse.

These records deliberately store identifiers only. They do not contain text you typed — trip names, notes and messages are excluded — and they do not contain precise coordinates.

Preferences

  • Measurement units, colour accent, and safety-threshold settings.

What we do not collect

  • Your device’s location. The app never asks for location permission and does not read GPS. Trip locations are only what you type in.
  • Advertising identifiers. There are no ads, no ad networks, and no tracking of you across other apps or websites.
  • Analytics or behavioural tracking. No analytics SDK is present in the app today. If that changes, this policy changes first.
  • Payment details. There is nothing to buy.
  • Photographs, contacts, calendar, microphone or health data.

Who else processes your data

We use a small number of third-party services. They act on our instructions and are listed here so you know where your data goes.

  • Google Firebase and Google Cloud Platform — authentication and the database. Everything described above is stored here, currently in the United States.
  • Google Maps Platform — when you search for a trip location, the text you type is sent to Google Places to return suggestions. Map imagery is also served by Google.
  • what3words — if you enter a what3words meetup address, those three words are sent through our server to what3words to resolve them into a location.
  • DiceBear — avatars are images generated from your avatar seed and fetched by your device, which means your device makes a request to DiceBear and its IP address is visible to them.
  • Apple — distributes the app through TestFlight and the App Store, and may collect crash and usage data according to your device settings, which you control in iOS.

We do not sell your personal information, and we do not share it with anyone for advertising.

Deleting your account

Settings → Account → Delete account permanently deletes your account. This is a real deletion, not a deactivation, and it cannot be undone. There is no restore window.

What is removed:

  • Your sign-in credentials and profile.
  • Your gear lists, gear items, menus and custom categories.
  • Your preferences, awards and username reservation.
  • Your friend connections and pending requests.
  • Your membership of any trip you were part of.

Trips with other people on them are not destroyed. If you own a trip that other participants are still part of, ownership passes to the longest-standing senior member rather than deleting everyone else’s plans along with your account. A trip nobody else is on is deleted with you.

Content you contributed to a shared trip — a gear list you attached, a checklist item you ticked — remains part of that trip’s record for the people still using it.

Activity records described above are retained after deletion, since their purpose is to explain what happened on a shared trip. They hold identifiers rather than your content.

Retention

  • Your content is kept while your account exists, and removed when you delete it.
  • Items you delete inside the app go to Trash and are recoverable for about 30 days before being removed.
  • Backups held by our hosting provider may persist for a short period after deletion before expiring on their normal cycle.

Security

Traffic between the app and our servers uses HTTPS. Database access is restricted by server-side rules, and the API checks on every request that you are allowed to see or change what you asked for. Passwords are managed by Firebase Authentication and are never visible to us.

No service is perfectly secure, and Roam Guru is early-stage software. Please do not store information in it that would be harmful if exposed.

Children

Roam Guru is not directed to children under 13, and we do not knowingly collect their information. If you believe a child has created an account, contact us and we will remove it.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to certain processing. Most of this is available directly in the app: your data is visible in the screens that hold it, editable there, and deletable through account deletion. For anything else, email us and we will action it.

Changes to this policy

If the app starts collecting something it does not collect today, this page is updated before that change ships, and the date at the top changes with it. Significant changes will also be announced to beta testers by email.

Contact

Questions about privacy, or a request about your data: privacy@roam.guru.