This Privacy Policy explains how Roamvero ("we", "us", or "our") collects, uses, and protects your personal information when you use our services at roamvero.com.
1. Information We Collect
When you use Roamvero, we collect the following information:
- Account information: When you sign in with Google or create an email/password account, we receive your name, email address, profile photo URL, and a unique Firebase UID.
- Trip data: Destination cities, travel preferences, trip duration, spending style, trip mode, and the itineraries we generate for you — stored in Google Firestore.
- Usage data: Pages visited, features used, session duration, and interactions — collected via Google Analytics.
- Communication data: If you share your itinerary via WhatsApp, we store your WhatsApp number and basic trip details for support and service improvement purposes. This data is retained until you request deletion by emailing support@roamvero.com.
- Payment data: We do not store payment card details. Payments via the iOS App Store are processed by Apple; payments via Google Play are processed by Google; web payments (when available) are processed by Razorpay. We store your subscription tier and status only.
- Camera and photo library access: Device camera and photo library access — when you use Menu Lens to scan menus.
- Approximate location data: When you use nearby food, medical, money, or facilities features.
2. How We Use Your Information
- To generate personalised travel itineraries — your destination, trip duration, and travel preferences are transmitted to the Google Gemini API (operated by Google LLC) for AI-powered itinerary generation
- To save and retrieve your trips across sessions
- To manage your subscription and billing via Apple App Store, Google Play, or Razorpay (web)
- To improve our services through aggregated usage analytics
- To send important account or service notifications (no marketing emails without explicit consent)
- To respond to support requests and resolve disputes
Legal Basis for Processing (GDPR — EU/UK Users)
If you are located in the EU or UK, we process your personal data on the following legal bases under GDPR Article 6:
- Contract performance (Art. 6(1)(b)): Account information, trip data, and subscription status — necessary to provide the Roamvero service you signed up for
- Legitimate interests (Art. 6(1)(f)): WhatsApp number storage for support and service improvement, where our interests do not override your fundamental rights
- Legal obligation (Art. 6(1)(c)): Retention of transaction records — required under applicable financial and tax law
- Consent (Art. 6(1)(a)): Analytics cookies (Google Analytics) — only placed after you explicitly accept via the cookie consent banner. Cookie consent may be withdrawn at any time via Profile → Cookie Preferences. Also applies to any optional marketing communications — only where you have explicitly opted in.
You may withdraw consent for consent-based processing at any time by emailing support@roamvero.com. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
3. Third-Party Services
Roamvero integrates the following third-party services, each with their own privacy policies:
- Google Firebase — Authentication, database (Firestore), and hosting
- Google Analytics — Usage tracking and analytics
- Google Gemini API — AI-powered itinerary generation. Your travel inputs (destination, trip duration, and preferences) are transmitted to Google's Gemini API servers for processing. Google's use of this data is governed by Google's API Terms of Service and Privacy Policy.
- Google Gemini AI — Menu translation and itinerary generation
- Google Places API — Nearby facilities, food, medical, and money discovery
- Razorpay — Payment processing for web subscriptions (coming soon)
- Apple App Store (StoreKit) — In-app purchase processing for iOS
- Google Play Billing — In-app purchase processing for Android
- Booking.com (affiliate partner) — Hotel search links in itineraries are affiliate links. When you click a hotel link and make a booking, Roamvero may earn a commission at no additional cost to you. Hotel links direct you to Booking.com search results for the recommended property — availability and pricing are controlled entirely by Booking.com and the property.
- Google Maps / OpenStreetMap — Map rendering and directions
Camera & Location Data
When you use the Menu Lens feature, photos you take or select from your gallery are sent to Google's Gemini AI service for processing. Photos are processed ephemerally and are not stored by Roamvero or Google beyond the immediate request. When you use nearby facility features, your approximate location is used to find relevant places via Google Places API. Location data is not stored or shared beyond the immediate request.
4. Data Storage and Security
Your data is stored on Google Cloud infrastructure (Firebase/Firestore) with industry-standard encryption in transit and at rest. We do not sell your personal data to third parties under any circumstances.
Access to your data is limited to essential service functions and is protected by Firebase security rules requiring authentication.
Your data may be stored and processed on Google Cloud servers located outside India, including in the United States, in accordance with Google's data processing terms.
In the event of a personal data breach, we will notify affected users and relevant supervisory authorities as required by applicable law, including within 72 hours where required by GDPR Art. 33.
5. Your Rights
Under applicable Indian law (IT Act 2000, DPDP Act 2023) and international best practices, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Withdraw consent for data processing
- Data portability (GDPR Art. 20 — EU/UK users): Receive a copy of your personal data in a structured, commonly used, machine-readable format
- Object to processing (GDPR Art. 21 — EU/UK users): Object to processing carried out on the basis of legitimate interests
- Lodge a complaint (GDPR Art. 77 — EU/UK users): Lodge a complaint with your national data protection supervisory authority (e.g., your country's DPA, or the ICO in the UK) if you believe your personal data has been processed unlawfully
To exercise any of these rights, email us at support@roamvero.com. We will respond within 30 days.
6. Cookies and Tracking
Roamvero uses cookies and local storage for authentication sessions and to remember your preferences. Essential cookies are always active as they are necessary for the app to function (login, session management). We also use Google Analytics cookies to understand how users interact with our service.
Analytics cookies are only placed after you provide explicit consent via our cookie consent banner. You can manage or withdraw your cookie consent at any time via Profile → Cookie Preferences in the app.
EU/UK users: Our use of analytics cookies is based on consent (Art. 6(1)(a)). You have the right to withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal. You may also opt out of Google Analytics tracking via the Google Analytics Opt-out Browser Add-on.
7. Children's Privacy
Roamvero is not directed at children under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or an in-app notice and will request your explicit consent before applying changes that affect how your personal data is processed.
9. Multi-Language Notice (DPDP Act 2023 §5)
In accordance with Section 5 of the Digital Personal Data Protection Act 2023, we are committed to making this Privacy Notice available in other languages upon request. If you require this policy in a language listed in the Eighth Schedule of the Constitution of India, please email us at support@roamvero.com and we will provide a translated version within 10 business days.
10. Contact Us
For any privacy-related questions or requests:
- Email: support@roamvero.com
- Website: roamvero.com
Grievance Officer (DPDP Act 2023): Cygnus Digital Advertising Media Services OPC Private Limited (CIN: U74140PN2022OPC208226) — support@roamvero.com. Complaints will be acknowledged within 48 hours and resolved within 30 days.