Roamvero
Privacy Policy
Last updated: October 16, 2026
When you use Roamvero, we collect the following information:
If you are located in the EU or UK, we process your personal data on the following legal bases under GDPR Article 6:
You may withdraw consent for consent-based processing at any time by emailing support@roamvero.com. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
Roamvero integrates the following third-party services, each with their own privacy policies:
Roamvero uses the Google Gemini API, operated by Google LLC, to generate itineraries and to read menus. Our server sends Gemini only the following:
We do not include your name, email address or Roamvero user ID in these requests. Anything you type into the destination or interests fields is sent as you typed it, so please do not enter personal information there. Google processes this data under its Gemini API terms and privacy policy.
When you use the Menu Lens feature, photos you take or select from your gallery are sent to Google's Gemini AI service for processing. Roamvero does not save these photos: a photo is held in our server's memory only while your request is being handled, and is not written to our database or file storage. Our server logs record that a scan took place (your user ID, the size of the image and the number of menu items found), not the photo itself. Google processes the photo under its Gemini API terms and privacy policy, which govern how Google handles and retains it. When you use the nearby features, the coordinates of the itinerary stop you are viewing are sent to our server and passed to the Google Places API to find nearby places; for vegetarian suggestions they may also be sent to the Google Gemini API. The app does not read your device's location. Our server logs record that a lookup took place, with your user ID and the number of results, but not the coordinates, and the lookup does not save the coordinates to our database. A trip you save keeps its stops' coordinates as part of the itinerary.
When you use Spot Change to replace a stop, the app sends our server the trip's city and country, the day number, the time of day and category of the stop, the names of the stops in that day, the day's base area, and the names and map coordinates of the stops immediately before and after it. These coordinates are of places in your itinerary — the area the new stop should be near — not your own position; the app does not read your device's location. Our server sends Google Gemini the information listed under "AI Processing" above. It then sends the Google Places API the name of each suggested place (up to three), with the city and country, and a point between the neighbouring stops with a search radius, to check that the place exists, is open and where it is. No account identifier, email address or device location is sent to Google with these requests. Our server keeps the result of each check (the place's name, Google place ID, location, business status and type) in our database, filed under the place name, city, country and an area of roughly one kilometre around that point, with no account identifier, so that it can be reused; it also keeps, for each account, a daily count of these checks, of the Spot Change swaps it uses and of Spot Change answers whose swap was handed back. Our server logs for Spot Change record the city, the number of suggestions and checks, timings and the result, and, like our other server logs, can include your account ID; they do not include coordinates.
Tracking permission prompt: In the iOS app, Google Analytics is loaded only if you do both of the following: accept analytics cookies in the in-app cookie banner, and then choose "Allow" in Apple's tracking permission prompt. The prompt is shown only after you accept analytics cookies. If you choose essential cookies only, or do not allow tracking, Google Analytics is not loaded in the iOS app. You can change these choices at any time in Account Settings → Cookie Preferences in the app, and in iOS Settings → Privacy & Security → Tracking.
When Google Analytics is enabled and you buy a subscription, the app sends Google Analytics a purchase event containing the transaction ID, the product and its list price.
Meta (Facebook) SDK: The iOS app contains Meta's Facebook SDK code because it is packaged with the third-party sign-in component we use. Roamvero does not offer Facebook login, has not configured the SDK with a Meta app ID, and does not start it or send it any events. We do not use it to send your data to Meta.
The iOS app uses Capgo, a third-party update service, to check for and download updated app content. When the app checks for an update or reports the result of one, it sends Capgo: a randomly generated installation ID stored in the device keychain (it is not an advertising identifier, and it persists if the app is reinstalled), the app's ID, the app version and build, the version of the content currently installed, the iOS version, the platform, whether the app is a production build or running in a simulator, and the update channel. As with any internet request, Capgo's servers also receive the device's IP address. We do not send Capgo your name, email address, Roamvero user ID or trip data.
Your data is stored on Google Cloud infrastructure (Firebase/Firestore) with industry-standard encryption in transit and at rest. We do not sell your personal data to third parties under any circumstances.
Access to your data is limited to essential service functions and is protected by Firebase security rules requiring authentication.
Your data may be stored and processed on Google Cloud servers located outside India, including in the United States, in accordance with Google's data processing terms.
In the event of a personal data breach, we will notify affected users and relevant supervisory authorities as required by applicable law, including within 72 hours where required by GDPR Art. 33.
Under applicable Indian law (IT Act 2000, DPDP Act 2023) and international best practices, you have the right to:
To exercise any of these rights, email us at support@roamvero.com. We will respond within 30 days.
In the app: open Account Settings, tap Delete My Account & Data, and confirm. This option is shown once you have created an account or signed in. It permanently deletes your saved trips, your usage records, any guest trip linked to your account, the records created when you share a trip via WhatsApp, the purchase records linked to your account (except the support transfer audit record described in section 1), your profile record, and your sign-in account.
By email: write to support@roamvero.com from the email address on your account and ask us to delete it.
Deleting your account does not cancel an App Store subscription; cancel it in your iPhone's subscription settings. Share links are stored without your account ID, so they are not removed when you delete your account. To have a share link removed, email us the link. Some older records of trip details you entered (your name, email address, destination and trip preferences) are not linked to an account, so they are not removed when you delete your account. To have them removed, email support@roamvero.com.
Roamvero uses cookies and local storage for authentication sessions and to remember your preferences. Essential cookies are always active as they are necessary for the app to function (login, session management). We also use Google Analytics cookies to understand how users interact with our service.
Analytics cookies are only placed after you provide explicit consent via our cookie consent banner. You can manage or withdraw your cookie consent at any time via Account Settings → Cookie Preferences in the app.
EU/UK users: Our use of analytics cookies is based on consent (Art. 6(1)(a)). You have the right to withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal. You may also opt out of Google Analytics tracking via the Google Analytics Opt-out Browser Add-on.
Roamvero is not directed at children under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or an in-app notice and will request your explicit consent before applying changes that affect how your personal data is processed.
In accordance with Section 5 of the Digital Personal Data Protection Act 2023, we are committed to making this Privacy Notice available in other languages upon request. If you require this policy in a language listed in the Eighth Schedule of the Constitution of India, please email us at support@roamvero.com and we will provide a translated version within 10 business days.
For any privacy-related questions or requests:
Grievance Officer (DPDP Act 2023): Cygnus Digital Advertising Media Services OPC Private Limited (CIN: U74140PN2022OPC208226) — support@roamvero.com. Complaints will be acknowledged within 48 hours and resolved within 30 days.