Privacy Policy

This Privacy Policy explains how Roam ("we," "us," or "our") collects, uses, and shares information when you use our website and trip-planning service (the "Service"). We are based in the United States.

1. Information we collect

• Account information: your name (optional), email address, and a securely hashed password. We never store your password in plain text. If you enable two-factor authentication, we store the information needed to verify your second factor.
• Trip data: the destinations, dates, picks, and itineraries you create, so we can build and save your trips.
• Profile & community content: a username you choose (which is public when you share or publish trips), an optional Instagram handle you can choose to display, any trips you publish to the gallery, and the likes you give to other trips.
• Payment information: if you subscribe, payments are processed by Stripe. We receive limited billing details (such as your subscription status and a customer ID) but we do not collect or store your full card number; Stripe handles that.
• Usage & device data: basic log information such as IP address and browser type, used for security and to operate the Service. Our bot-detection provider may process similar information to protect the Service from abuse.
• City Match swipes: if you play City Match without an account, your swipes are stored only in your browser on your device and are never sent to us. If you later create an account or sign in, those swipes are moved into your account (so matches work across devices) and the copy on your device is deleted.
• City Match invites & groups: if you invite a friend by email, we use that address only to send the invitation. If you play in a group, the other members can see the group's name, your display name, the cities the group has matched on, and how many members have liked a city (but not who). Your individual swipes are never shown to anyone.
• Roam Split groups & expenses: if you use Roam Split, we store your group's name, its members' display names, and the expenses logged (description, amount, currency, who paid, and how it's split) so the group can see balances and settle up. Everyone in a group can see this information about the group, so join and share invite codes only with people you trust. Roam never holds or processes the payments themselves.
• Destination guide tips: a tip you submit is stored with your account and, once we approve it, shown publicly on that guide with your username. "Helpful" votes on tips are counted to order them (by account, or by a hashed version of your IP address for signed-out visitors) and we never show who voted.
• Cookies: see Section 5.

2. How we use your information

• To provide, maintain, and improve the Service and your trips.
• To create and secure your account, process logins, and protect against abuse and fraud.
• To process subscriptions and manage billing through Stripe.
• To send you service emails you request or that are needed to operate your account, such as trip summaries, email verification, and password resets.
• To power community features you choose to use, such as publishing a trip to the gallery and liking trips.
• To display advertising on the free tier and to operate, protect, and analyze the Service.

3. How we share information

We do not sell your personal information for money. We share information only with service providers that help us run Roam, including: Stripe (payments), mapping and places providers, image providers, event-data sources, our email provider, a bot-detection and security provider, and advertising partners. We may also disclose information if required by law, to enforce our Terms, or to protect rights and safety. Separately, content you choose to make public is shared as described in Section 4.

4. Public & community content

Some features let you make content public, and this works differently from the private data above:

• If you share a trip by link, anyone with that link can view the trip without an account.
• If you publish a trip to the gallery, the trip and your chosen username are publicly visible, including to people without a Roam account, and other members can like it. Your Instagram handle is shown only if you opt in to display it.
• For your safety, you can only post a trip to the gallery after it has ended, and we remove your specific travel dates from published trips. Posting before or during your travel is strongly discouraged, as it can reveal you're away from home. Please don't publish anything you wouldn't want to be public.
• Public content can be viewed, copied, cached, or re-shared by others, so we may not be able to remove every copy after you take it down. You can unpublish a trip, change or remove your username, or hide your Instagram at any time from your account.

5. Cookies & advertising

We use a small number of cookies:

• Essential cookies: a session cookie that keeps you signed in. The Service can't function without it.
• Advertising cookies: on the free tier, our advertising partners may set cookies to display and measure ads. Where required by law, we will ask for your consent before non-essential/advertising cookies are set, and you can decline. Subscribing removes ads.
• Device-only preferences: some conveniences, such as choosing "Don't ask me again" on the notice shown before you follow a link to another site, are stored only in your browser (local storage) and are never sent to us. Clearing your browser's site data resets them.

6. Data retention

We keep your account and trip data while your account is active. You can delete your trips at any time, and you can delete your account, which removes your associated data (subject to limited records we may retain for legal, security, or billing purposes). Content you previously made public may persist in copies or caches held by others, as described in Section 4.

7. Security

We use reasonable measures to protect your information, including password hashing, optional two-factor authentication, and restricted access. No method of transmission or storage is 100% secure, however, and we cannot guarantee absolute security.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. You can manage much of this from your account, or contact us to make a request. We will not discriminate against you for exercising these rights.

9. Your California privacy rights

If you are a California resident, the California Consumer Privacy Act (as amended) gives you the right to: know what personal information we collect and how we use and share it; request access to or deletion of your personal information; correct inaccurate information; and not be discriminated against for exercising these rights. We do not sell your personal information for money. To the extent sharing of advertising identifiers for targeted advertising is considered a "sale" or "sharing" under California law, you may opt out by declining advertising cookies, by using the "Do Not Sell or Share My Info" link in our footer, or by contacting us. We also honor the Global Privacy Control (GPC) browser signal: if your browser sends it and you have not already made a choice on this site, we treat it as an opt-out of non-essential advertising and analytics cookies. To exercise any right, email us at [email protected]; we may need to verify your identity.

10. Children

The Service is not directed to children, and you must be at least 18 (or the age of majority where you live) to create an account. We do not knowingly collect personal information from children under 13.

11. International users

We operate from the United States, and the Service is intended for users in the United States; it is not directed to individuals in the European Economic Area or the United Kingdom. Your information will be processed in the U.S. and in other countries where our service providers operate. If you use the Service from outside the U.S., you understand your information may be transferred to and processed in the U.S.

12. Changes to this policy

We may update this Policy from time to time. We'll update the "Last updated" date and, for material changes, provide additional notice where appropriate.

13. Contact

Questions or privacy requests? Contact us at [email protected].