RoamlyPrivacy Policy
Roamly is a travel journal: you take or import a photo, it gets pinned to the place it was taken, and it appears on your map and globe. That means the app handles two kinds of genuinely personal data — your photos and your location. This policy explains exactly what is collected, why, who else sees it, and how to get rid of it.
In this policy, "we", "us" and "Roamly" mean Devesh Singh Verma, the developer of the Roamly app. "You" means the person using the app.
The short version. We collect your account details, the photos and captions you post, and the location attached to each post. We use them to run the app and nothing else. We do not sell your data, we do not run advertising, and we do not use your photos to train machine-learning models. You can delete your account and everything in it at any time — see Delete your account.
1. What we collect and why
| Data | Why we have it | Where it comes from |
|---|---|---|
| Email address | Identifies your account and lets us contact you about it | You, or your Google / Apple sign-in |
| Display name and profile picture | Shown on your profile and next to your posts | You, or your Google / Apple sign-in |
| Photos you post | They are the content of the app | Your camera or your photo library, only when you pick them |
| Precise location (latitude/longitude) | Pins each post to a place, draws it on the map and globe, and counts the countries you've visited | Device GPS at capture time, EXIF data in a photo you import, or a place you pick manually |
| Place name, city, country | Human-readable labels for the pin and the geotag drawn on the photo | Looked up from the coordinates |
| Captions, trips, and post visibility | The text and organisation you add to your own posts | You |
| Likes, comments and activity | Social features — showing who reacted to what | You and other users |
| Account creation date and app preferences | Running the account and remembering your settings | Generated by the app |
We do not collect your contacts, your calendar, your call or SMS logs, your browsing history, your advertising ID, or your device's precise location in the background. Roamly only reads your location while you are actively creating a post.
2. Device permissions
The app asks for these Android permissions. Each one is optional, and the app tells you why before asking:
- Camera — to take a photo inside the app. Declining it means you can still import photos from your library.
- Location (precise and approximate) — to work out where a photo was taken, at the moment you take it. Declining it means you pick the place manually instead.
- Photos and media — to let you choose an existing picture to post. We read only the images you select, never your whole library.
- Internet / network state — to upload posts, load the feed, and know when you are offline so posts can wait in the outbox.
You can withdraw any of these at any time in Android Settings → Apps → Roamly → Permissions. The related features stop working; the rest of the app continues.
3. Location, in detail
Because location is the point of the app, it deserves its own section.
- Precision. A post stores exact coordinates, not a rough area. This is what makes the pin land in the right spot.
- Only while you are posting. The app reads your location when you are creating a post. It does not track you in the background and does not build a movement history.
- Imported photos. When you pick a photo from your library, the app reads the GPS coordinates and capture date embedded in that file (its EXIF data) so it can suggest the right place. If there are none, you choose the place yourself.
- You can change it. Before publishing, you can drag the pin or search for a different place. The location saved is the one you confirm.
- Public posts reveal where you were. If you set a post to public, its place and coordinates are visible to other users. Think about this before posting from your home, your child's school, or anywhere else you would not want pinned publicly. Private posts stay visible only to you.
4. How your data is stored and who processes it
Roamly does not run its own servers. Your account, posts, photos and pins are stored with the following service providers, who process the data on our behalf and under their own security and privacy commitments:
| Provider | What it handles | Their policy |
|---|---|---|
| Google Firebase (Authentication, Firestore, Cloud Storage, Cloud Functions) |
Your sign-in, your posts and profile records, and your uploaded photos | firebase.google.com/support/privacy |
| Supabase (Auth, Postgres, Storage) |
Alternative backend for the same data, depending on the build | supabase.com/privacy |
| Google Sign-In | Signing you in with your Google account, if you choose that option | policies.google.com/privacy |
| Apple — Sign in with Apple | Signing you in with your Apple account, if you choose that option | apple.com/legal/privacy |
| OpenStreetMap Foundation (map tiles and the Nominatim geocoder) |
Drawing the map, and turning coordinates into a place name. Your IP address and the coordinates being looked up are sent to their servers; your identity and your photo are not. | osmfoundation.org/wiki/Privacy_Policy |
Your device also keeps a local cache — downloaded images, your session, your preferences, and any posts waiting in the offline outbox. Clearing the app's storage or uninstalling the app removes that cache from your phone.
5. Who else can see your data
- Other users see your display name, profile picture, and any post you mark public — including its photo, caption, place name and coordinates. They also see your likes and comments on public posts.
- Nobody sees a post you mark private except you.
- Our service providers, listed above, process data strictly to run the app.
- Law enforcement or a court, if we are legally required to disclose something. We will tell you unless we are legally barred from doing so.
- A future buyer, if Roamly is ever sold or merged. You would be told before your data moved, and this policy would continue to apply until replaced.
We do not sell your personal information, we do not share it with data brokers, and we do not show you third-party advertising.
6. How long we keep it
- Posts and photos — until you delete them, or until you delete your account.
- Account record — until you delete your account.
- After an account deletion request — your content is removed from the app immediately and purged from our providers' storage within 30 days. Backups that already contain the data are overwritten on their normal rotation, within 90 days.
- Records we must keep by law — retained only for as long as the law requires, and for nothing else.
7. Your rights and how to use them
Depending on where you live — including under India's Digital Personal Data Protection Act, the EU/UK GDPR, and the California Consumer Privacy Act — you have the right to access your data, correct it, delete it, obtain a copy of it, object to how we use it, and complain to your data protection regulator.
To exercise any of these:
- Delete your account and data: follow the steps at Delete your account.
- Correct your name or picture: edit them on your profile in the app.
- Delete a single post: open it in the app and delete it.
- Anything else (a copy of your data, an objection, a question): email devisfuture00@gmail.com.
We respond to requests within 30 days, and we do not charge for them. We may ask you to confirm the request from the email address on the account, so that nobody can delete your data by pretending to be you.
8. Children
Roamly is not intended for children under 13, and is not directed at children. We do not knowingly collect data from anyone under 13. If you believe a child has created an account, email devisfuture00@gmail.com and we will delete it. Where local law sets a higher age of digital consent, that age applies instead.
9. Security
Data in transit is encrypted with HTTPS/TLS. Data at rest is encrypted by our storage providers. Access to stored content is restricted by server-side security rules so that private posts are readable only by their author. No system is perfectly secure, so we cannot guarantee absolute security — but if a breach affects your data, we will notify you and the relevant authority as the law requires.
10. International transfers
Our providers operate globally, so your data may be stored or processed on servers outside your country, including in the United States and the European Union. Those transfers rely on the safeguards our providers put in place, such as the European Commission's Standard Contractual Clauses.
11. Changes to this policy
If we change this policy we will update the date at the top of the page, and for any change that materially affects your rights we will also notify you in the app before it takes effect. Continuing to use Roamly after a change means you accept the updated policy.
12. Contact
Questions, requests, or complaints about privacy:
Devesh Singh Verma
Email: devisfuture00@gmail.com
Web: roamly.guideforyou.in/support