Privacy Policy

Roam Recall, LLC (“Roam Recall,” “we,” “us,” or “our”) provides a personal place memory service at roamrecall.com, including a native iOS app distributed through the Apple App Store that loads our web app in an embedded browser and may use native features such as push notifications and location when you grant permission. This Privacy Policy explains what information we collect, how we use it, when it is shared, and the choices available to you.

By creating an account or using the service, you agree to this policy. If you do not agree, please do not use Roam Recall.

Our privacy approach

Roam Recall is designed to be private by default. Your personal library, visits, ratings, notes, and verdicts are visible to you unless you take an explicit sharing action — such as inviting a collaborator, tagging a friend on a visit, turning on place sharing for a specific friend, or enabling a public list link.

Information we collect

Account information

When you sign up, we collect information needed to authenticate you and operate your account, such as your email address and profile details. Authentication is handled through Clerk, our identity provider.

Billing and payment information

Roam Recall Pro can be purchased in two ways, depending on how you use the service:

• On the web, payment processing is handled by Stripe. When you upgrade, you may be redirected to Stripe Checkout to enter payment details and complete your purchase. Stripe collects and processes payment card and billing information according to its own privacy policy and terms.
• In our iOS app, Pro is sold through Apple In-App Purchase. Apple processes your payment and manages the subscription under your Apple Account; we never receive or store your payment card details for these purchases.

We receive limited billing information needed to manage your subscription and grant Pro access. From Stripe, this may include your Stripe customer and subscription identifiers, subscription status, billing interval, renewal date, and cancellation status. From Apple, we receive subscription transaction identifiers, the product purchased, status, renewal and expiration dates, and auto-renewal state through the App Store Server API and App Store Server Notifications, linked to your account using an app account token we generate. We use this to grant Pro access, display plan details in your account, and respond to billing questions. We do not store full payment card numbers on our servers.

Content you provide

We store the information you choose to save in the app, which may include:

• Places (names, types, addresses, coordinates, tags, and related metadata)
• Visits (dates, star ratings, notes, and verdicts)
• Lists and trips you create, including descriptions and member places
• Photos you upload for places you save or for your profile picture. When you upload a photo, we store the image and may read capture time and GPS coordinates from the file's metadata (if present) so we can associate the photo with a place and time. We do not use that metadata for advertising or continuous tracking.
• Friend connections, invitations, and collaboration settings
• Messages and metadata associated with sharing features you use
• Instagram profile or handle information when you use “Add from Instagram” or the iOS Share Extension — we receive only what you choose to share with us and use it to search for matching places

Location information

Some features — such as “I'm here now,” map views, pin-on-map entry, or nearby Explore searches — may request your device location. Location is used only when you invoke those features and grant permission. We do not continuously track your location in the background.

Separately, when you upload a photo that includes location metadata (EXIF GPS), we may extract and store those coordinates with the photo so the photo can be linked to a place. That is optional information already present in the file you chose to upload — it is not live device tracking.

Device and usage information

We may collect technical information needed to run and improve the service, such as browser type, device type, installed-app status, push notification subscription data (when you opt in on a specific device — including web push endpoints or native iOS device tokens processed through Apple Push Notification service), service worker events, and standard server or application logs (for example, error reports and request metadata).

When you use our native iOS app, we may receive a lightweight client snapshot on launch — such as app version, operating system version, device model, and locale — to support compatibility, debugging, and push notification delivery.

Email communications

We send email through providers such as Resend for transactional messages (invites, sharing notifications, billing receipts) and, unless you opt out, optional product emails such as onboarding tips. Emails may include a small tracking pixel so we can record approximate open and delivery events for service quality and audit purposes. Opens are approximate — some mail clients block or prefetch pixels.

Information from Google Maps Platform

When you search for places, use map views, autocomplete, geocoding, or Explore, we call Google Maps Platform APIs (such as Places, Maps, and Geocoding). We receive and may store place details returned by those services — such as business names, addresses, coordinates, hours, ratings, and business status — to power search, maps, and place cards in your library. Your device may also load Google Maps JavaScript components directly in the browser when you use those features.

Explore and AI processing

When you use Explore, we send your search prompt and optional location context (such as a city label or coordinates you provide) to OpenAI to generate place suggestions. If you enable tailored recommendations, we may also send a compact summary derived from your saved library — such as places you marked would-return, frequently visited places, tags you use, and cities you have visited — to help personalize results. Explore may also trigger additional Google Places searches to ground suggestions in real businesses. We log Explore queries and usage limits on our servers; cached results for identical prompts may be reused without calling OpenAI again.

How we use information

We use the information we collect to:

• Provide, maintain, and personalize the service
• Process subscriptions, renewals, and billing for Roam Recall Pro
• Sync your library, visits, lists, trips, and collaborations
• Send transactional communications you request or that relate to sharing (such as invites, visit-tag notifications, and friend place-sharing notifications)
• Send optional product and onboarding emails you can turn off in Account settings
• Generate optional Explore suggestions when you use that feature
• Operate push notifications on devices where you have enabled them
• Monitor performance, debug issues, prevent abuse, and protect security
• Develop new features and improve existing ones
• Comply with law and enforce our policies

We may also create aggregated or de-identified information that cannot reasonably be used to identify you, and we may use that information for analytics, research, and service improvement.

When information is shared

Private by default

Other users cannot browse your full place library or complete visit history. Friends cannot browse your library, verdicts, tags, or notes unless you turn on place sharing for that friend, or you share something else explicitly (for example, through visit tags or shared lists).

Sharing you control

Information may be visible to others only when you choose to share it, including:

• Visit tags — when you tag a friend on a visit, they receive an invitation showing relevant visit and place details until they accept or decline
• Friend place sharing — when you turn on sharing for a specific friend, they can browse your saved places (including tags, verdicts, average ratings, and non-private notes) in Explore. Private notes, photos, and individual visit details are not shared this way. Turning sharing on may notify that friend by email or push, according to their notification preferences. You can turn sharing off at any time from their friend profile.
• Trips and lists — when you invite collaborators or viewers, according to the role you assign
• Place notes on shared lists— when a place you saved appears on a list you share, the notes you wrote about that place are visible to the list’s members. You can keep an individual note out of this shared view by marking it private
• Co-attendance — when visit tags are accepted, mutual friend connections may show who attended a shared visit
• Public list links — when a list owner enables a read-only public link, anyone with the URL may view the list name, description, and member place names, types, and locations without signing in. Visit counts, personal ratings, notes, and verdicts are not included on public list pages.

Service providers

We use trusted third parties to help us operate Roam Recall. They process data on our behalf and only as needed to provide their services. Our current providers include, or may include:

• Clerk — authentication and account management
• Stripe — payment processing and subscription billing for Roam Recall Pro purchased on the web
• Supabase — database hosting (PostgreSQL)
• Google — Maps Platform APIs (Places, Maps, Geocoding, and related place data), and Google Analytics for aggregated product usage analytics (see Cookies below)
• Sentry — error monitoring and crash reporting to help us diagnose and fix issues
• OpenAI — Explore suggestion generation when you use Explore (including optional tailored recommendations)
• Resend (or similar providers) — transactional and optional product email, when configured
• Apple — In-App Purchase processing and subscription billing for Roam Recall Pro purchased in the iOS app, and push notification delivery through Apple Push Notification service (APNs) when you enable notifications on iOS
• Vercel — application hosting and infrastructure

We may add, replace, or remove providers over time. When we do, we will update this policy or our subprocessor disclosures as appropriate.

Legal and safety

We may disclose information if we believe in good faith that disclosure is reasonably necessary to comply with law, respond to lawful requests, protect the rights and safety of Roam Recall, LLC, our users, or others, or investigate fraud or security issues.

Business transfers

If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to standard confidentiality obligations.

Your content and data rights

You retain ownership of the content you submit to Roam Recall, including the places, visits, notes, lists, and other materials you create.

To operate the service, you grant Roam Recall, LLC a worldwide, non-exclusive, royalty-free license to host, store, back up, reproduce, process, adapt, display, and distribute your content solely as necessary to provide, maintain, improve, secure, and promote the service — including making it available to people you explicitly authorize through sharing features.

That license continues for as long as your content remains in our systems and for a reasonable period afterward for backups, legal compliance, and dispute resolution, unless a longer retention period is required or permitted by law.

We do not claim ownership of your personal place journal. We do not sell your personal information or personal content, and we do not use your information for cross-context behavioral advertising. We may use aggregated or de-identified data that does not identify you for lawful business purposes.

Your choices

• Edit or delete individual places, visits, lists, and trips you control
• Decline visit tags, leave collaborations, or disable public list sharing
• Enable or disable push notifications per device from your Account settings
• Manage email notification preferences from your Account settings, or unsubscribe using links in our emails
• Manage or cancel a Roam Recall Pro subscription purchased on the web through the Stripe billing portal linked from your Account settings; manage or cancel a subscription purchased in the iOS app through your Apple Account subscription settings (Settings → your name → Subscriptions), which the app can open directly
• Revoke location permission at any time in your browser settings, or on iOS in Settings → Roam Recall → Location
• Manage iOS notification permissions in Settings → Roam Recall → Notifications
• Block or remove friends through in-app controls

Data retention

We retain information for as long as your account is active or as needed to provide the service, resolve disputes, enforce agreements, comply with legal obligations, and maintain backups and security logs. Retention periods may vary depending on the type of data and how it is used.

When you delete content in the app, we remove it from active systems within a reasonable time, though residual copies may persist in backups for a limited period before being overwritten.

Account deletion and data export

You can permanently delete your account at any time from your Account settings. Deleting your account removes your personal data from our active systems — including your places, visits, ratings, notes, lists, trips, friend connections, and content you created — and deletes your sign-in identity with our authentication provider.

If you have an active Roam Recall Pro subscription, cancel it before deleting your account so billing does not continue after deletion. Subscriptions purchased on the web can be canceled through the Stripe billing portal in your Account settings. Subscriptions purchased in the iOS app are billed and controlled by Apple and must be canceled through your Apple Account subscription settings (Settings → your name → Subscriptions) — deleting your Roam Recall account does not cancel an Apple subscription. Contact us if you need help.

A limited amount of de-identified information may be retained where we are permitted or required to keep it — for example, aggregated service-usage and third-party API cost logs that are no longer linked to you, and message-delivery audit records. Residual copies may also persist in backups for a limited period before being overwritten.

Bulk data export is not yet available as a self-service feature. To request a copy of your data, contact us at admin@roamrecall.com. We will respond as required by applicable law and our operational capacity.

Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or port certain personal information, or to object to or withdraw consent for certain processing. To exercise these rights, contact admin@roamrecall.com. We may need to verify your identity before fulfilling a request.

We will honor applicable legal requirements but reserve reasonable limits where permitted — for example, when a request is excessive, repetitive, or would impair the rights of others.

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, request deletion or correction, and confirm that we do not sell personal information. Submit requests to admin@roamrecall.com.

Cookies and similar technologies

We and our service providers use cookies, local storage, and similar technologies to keep you signed in, remember preferences, and support progressive web app features. You can control cookies through your browser settings, though some features may not work properly if cookies are disabled.

We also use Google Analytics to understand how the product is used (for example, which screens people visit and whether key actions like saving a place succeed). Google may set cookies or use similar identifiers and receive usage data as described in Google's Privacy Policy. We configure Analytics for product measurement; we do not use it to sell personal information or for cross-app advertising in the current product.

Security

We use reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children

Roam Recall is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

International users

Roam Recall, LLC operates from the United States. If you access the service from other regions, your information may be processed in the United States and other countries where we or our service providers operate, which may have different data protection laws than your home country.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice (such as in-app notification or email). Your continued use of Roam Recall after changes become effective constitutes acceptance of the updated policy, except where applicable law requires otherwise.

Contact us

Questions about this policy or our privacy practices? Email admin@roamrecall.com. Roam Recall, LLC is the data controller for personal information processed through the service.