Privacy policy

Updated October 18, 2026

Account and access information

We use Google sign-in through Supabase. We receive your account email, account identifier and authentication information needed to verify sign-in. We store plan/access status, trial start and expiry, and a phone registration identifier to enforce one active iPhone. The website Terms checkbox is not a separate age or safety declaration and is not verified age assurance. When an explicit declaration is submitted, we retain its account, Terms version, platform and server acceptance time. Roamora does not ask for your Google or Apple password. iLoader and SideStore handle their own Apple sign-in.

Location, maps and device files

Roamora’s licensing server does not receive your searched destinations, saved places, simulated coordinates or route history. Those app settings and saved places are stored on your iPhone. Apple MapKit handles map display, native place searches and directions. The app also includes a Photon search path at photon.komoot.io that sends search text and a result limit. These providers receive the requests and associated network metadata under their own policies; do not enter sensitive personal information in search. Location permission supports centering the map and maintaining the developer connection; Roamora does not upload those location updates to its licensing server.

Pairing files are sensitive device credentials. They remain on your computer/iPhone for the device connection and are not sent to Roamora’s licensing server. The Windows helper saves setup progress and diagnostic logs locally. Never email a pairing file, password or full card details to support.

Billing and support

Stripe processes checkout. We store Stripe customer/payment references and access entitlements, not full card numbers. Stripe may retain transaction records even after a customer account is deleted. If you email support, we receive the message and information you include and use it to address the request.

Hosting, security and cookies

Cloudflare hosts the website and Supabase provides account/database/private-download services. These providers process request information such as IP addresses, timestamps and technical metadata to deliver and secure the service. Essential cookies keep you signed in and protect sign-in. Shared rate-limit counters use keyed hashes of account or network identifiers instead of storing raw IP addresses in Roamora’s counter table.

Optional setup-conversion measurement is currently disabled. If enabled in the future, it requires a separate choice and its own notice; it is not required for installation. We do not currently use advertising cookies or sell your personal information.

Why we process information

We use information to deliver the app, authenticate accounts, manage access and trials, prevent abuse, support customers, and handle billing and legal obligations. Where applicable, these purposes rely on providing the requested service, legitimate security/support interests, legal obligations, or consent for optional features. Information may be processed in the United States and other locations used by our providers, including Apple, Photon/Komoot, Cloudflare, Supabase, Stripe and our email provider. Applicable transfer safeguards and provider storage locations remain under review before paid launch.

Retention and deletion

Account, trial, phone-registration and declaration records are kept while your account exists. Self-service account deletion removes those records and the authentication account, revokes refresh sessions, and deletes the linked Stripe customer to cancel active subscriptions. Necessary payment-event identifiers, fraud/dispute records, provider security logs, support correspondence and legally required financial records may remain where needed for security, legal duties or unresolved issues. Provider backups can retain copies until their normal expiry; deletion does not instantly erase every backup. Rate-limit counters are cleaned during later service activity. Exact retention and backup expiry for provider logs and backups have not yet been verified. Support correspondence has no automated retention deadline configured; deletion requests are reviewed with legal and dispute obligations in mind. We will not describe unverified provider retention as a fixed deletion deadline.

Deleting the server account does not delete data from your own iPhone or Windows computer, or your Google account. Follow the local-cleanup steps on the deletion page. Existing short-lived app access checks can take up to five minutes to expire; signed download links can remain valid briefly. Restore your real location before deletion.

Your choices and requests

Depending on your location and applicable law, you may also request restriction of processing, object to processing, withdraw optional consent, or appeal a denied privacy request by emailing support with “Privacy appeal”. You may complain to your local data-protection regulator. These rights may have legal exceptions; we will explain any refusal and available next steps.

You can delete your account here. Email support from the account address to request access, correction, a copy of your account information, or help deleting data. We verify identity before disclosing or changing account data and respond to applicable privacy requests within the deadlines required by law. Do not send passwords or identity documents unless a secure verification method has been agreed. If you cannot sign in, contact support.

Adults only and changes

Roamora is for adults aged 18 or older. We do not knowingly offer accounts to minors. Website sign-in asks users to agree to the Terms, which require adults aged 18 or older. It does not separately verify age; we do not collect a date of birth or identity document at sign-in. If you are under 18, do not create an account. If you believe a minor has an account, contact support so we can investigate and remove their information as applicable. Account-deletion help remains available. Material changes to this notice will be shown with an updated date.