Privacy Policy

Last updated: 2026-05-02

Changelog

• 2026-05-02: Disclosures for optional Google/Apple accounts (profile data in Firebase), cloud-synced settings and tour progress, account deletion (in-app and web), updated “choices” wording.

This Privacy Policy describes how Röam / Roam App (“Röam”, “we”, “us”) collects, uses, and shares information when you use:

• The Röam mobile application on iOS and Android (the “App”), and
• The Röam website (the “Website”).

If you do not agree with this Privacy Policy, please do not use the App or Website.

What Röam Does (High-Level)

Röam provides narrated, location-based audio tours with map navigation, and offline support.

Information We Collect

Account sign-in (optional)

Signing in with Google or Apple is optional. If you sign in, the provider shares information needed for authentication, typically including name, email address, and sometimes a profile photo (Google often provides one; Apple often does not). Apple may supply a private relay email, which we treat like any other email for sign-in purposes.

That information is tied to your account in Firebase Authentication with profile fields stored in Google Cloud Firestore so you can use the App across devices. If you never create an account, we do not collect provider-based name/email/photo for account purposes.

Cloud sync (when you are signed in)

When you use an account, the App may store and sync preferences (such as appearance and playback-related settings) and tour progress (resume state) under your Firebase user identifier. This mirrors what is already saved on-device for usability; syncing requires an account.

App: Location Information

• Precise location (on-device use): The App may use your device’s location services to provide navigation and location-based tour playback. This location is used in real time on your device.
• Approximate location (stored by Röam): For analytics and troubleshooting, Röam stores only approximate location derived from GPS at certain events (e.g., tour download time and some error/bug reporting), limited to:
  • City
  • Province/State
  • Country

We use reverse geocoding to derive these fields. We do not store precise GPS coordinates or exact addresses in our Röam analytics/error databases.

App: Device and App Information (Hashed Identifier)

To help us understand usage patterns and troubleshoot issues, we collect:

• Platform (iOS/Android)
• Device model
• OS version
• App version
• Hashed device identifier (one-way SHA-256 hash; we do not store raw device IDs)

App: Tour Download Analytics

When you download a tour, we record:

• Tour identifier and title
• Tour media version (where applicable)
• Timestamp
• Whether it was an initial download or an update
• The approximate location and device/app info described above

App: Bug Reports and Error Logs

Röam has two forms of technical reporting:

• Automatic error logging: The App may automatically record app errors to help us diagnose crashes and issues. These logs can include error type/message, stack traces, and relevant in-app context (for example tour/stop identifiers).
• User-submitted bug reports: If you choose to submit a bug report through the App, we collect:
  • Your message/description (required)
  • Your email address (optional, only if you choose to provide it)
  • Device/app info and approximate location (city/province/country)
  • Recent pending error logs (if present)

If online submission is not possible, the App may offer an email-based fallback that opens your email client and drafts a message to error@roamapp.ca containing diagnostic details you can review before sending.

App: Purchases

Purchases (if enabled) are processed by the Apple App Store or Google Play. Röam does not collect or store your payment card details.

Website: Basic Usage and Communications

Depending on how the Website is implemented/hosted, we may collect:

• Basic server logs (which can include IP address, user agent, and timestamps) for security and performance
• Cookies that are necessary for the Website to function (and, if used, for analytics/preferences)
• Information you submit via the Website (for example, if you email us or submit a form)

How We Use Information

We use collected information to:

• Provide optional account creation and synchronization of settings/progress across devices when you sign in with Google or Apple
• Provide App functionality (navigation, tour playback, offline features)
• Improve tours and product experience
• Understand which tours are downloaded/used and where they are popular (using approximate location)
• Diagnose and fix bugs and stability issues
• Provide support and respond to inquiries
• Maintain security and prevent abuse

How We Share Information

We do not sell your data

Röam does not sell your personal information and does not share it with third parties for advertising purposes.

Service providers (processors)

We use third-party services to operate the App and store data. These providers may process information on our behalf, subject to their terms and privacy policies. This includes:

• Google Firebase (e.g., Firestore database and related infrastructure) used to store:
  • Optional account-linked data (identifiers, profile fields, synced settings, and tour progress) when you sign in with Apple or Google
  • Tour download analytics
  • Error logs and bug reports
  • Tour content metadata (and, where applicable, media delivery)
• Google Maps Platform (SDKs and APIs) used for maps and directions (requests to these services may include location coordinates as needed to provide routing/map features)

Business transfers

If Röam is involved in a merger, acquisition, restructuring, financing, or sale of assets, information may be transferred as part of that transaction, subject to appropriate confidentiality and legal protections.

Data Retention

We retain information only as long as necessary for the purposes described above, including:

• Operational needs (analytics, support, and troubleshooting)
• Legal, security, and compliance requirements

Where the App caches certain route data on-device, it is designed to expire within 30 days to support offline routing use cases.

Account deletion & sign-out

• Sign out: You can sign out anytime from the Account screen. Local data remains on your device unless you remove the App or erase data yourself.
• Delete account: You can permanently delete your account and associated Firestore data from the Account screen (Delete account) after re-authenticating with your provider.

For convenience and regulatory listings, instructions and an email fallback are published at https://roam-ee56e.web.app/account-deletion.html (requires Firebase Hosting deploy for hosting_public in this repo). Alternatively, email info@roamapp.ca with the subject “Account deletion” and include the Apple or Google email used for sign-in.

Your Choices

• Guest use: Most features remain available without an account (local preferences and tour progress remain on-device only).
• Location permissions: You can enable/disable location permissions in your device settings. Some features may not work without location.
• Bug report email: Providing an email address in a bug report is optional.

Security

We use reasonable administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is 100% secure.

Children’s Privacy

Röam is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will update the “Last updated” date above when changes are made.

Contact Us

If you have questions or requests related to privacy, contact us:

• General: info@roamapp.ca
• Bug/error reports: error@roamapp.ca