What we collect, why, and the choices you have. Last updated October 18, 2026.
Roamer ("we", "us") is a collaborative trip-planning app. This policy explains what we collect, why, and the choices you have. Questions? Email info@theroamerapp.com.
Roamer's maps — the trip map, the map of a trip's photos, the map that shows live location, place search, the map in an exported itinerary and the map on a shared itinerary — are provided by Google Maps Platform. When you search for a place, our server passes your search text and the area you are planning in to Google's Places service and returns the matches; when you choose a place, its location and identifier are saved with your trip so it can be shown on the map and in your itinerary. Google is not told who you are — the request comes from our server, not from your account — but Google may collect information as described in the Google Privacy Policy. When you open a map in the app or on a shared trip page, that map is loaded from Google and Google may record that request as it does for any use of Google Maps. The pins for your places and photos, and the positions of people sharing their location, are drawn over the Google map by the app on your device; Roamer does not send your photo locations or anyone's live position to Google. When the map shows where you are, the Google Maps software built into the app may receive your device's location, under Google's own privacy policy.
Place details from Google (a place's coordinates and address) are kept with your trip for up to 30 days at a time, and are refreshed from Google while the trip is upcoming or under way; after that they expire from the trip until it is next opened online. The place identifier is kept so the details can be fetched again. The names you type and the notes you write are yours and are not affected by this.
By using these features you also agree to the Google Terms of Service, including the Google Maps/Google Earth Additional Terms of Service.
Versions of Roamer before 8.2.0 use Komoot's Photon for place search and OpenFreeMap for map tiles instead of Google. If you use an older version, your search text and the map area you view go to those services.
Roamer uses your device's location only for the three features below, and only when you use one of them. It is never used for advertising, and we do not sell it. Where a photo was taken is read from the photo file, not from your device; see Photos and videos.
You can allow or deny location access in your device settings at any time. Everything else in Roamer works without it.
Photos and videos you add to a trip are stored by our storage provider, Supabase, and shown to the people on that trip. Roamer only receives the photos and videos you choose to add, picked from your photo library or shared from another app; it does not look through the rest of your library. We keep a high-quality copy of each photo. Videos can be up to 5 minutes long and are converted on your phone into a smaller file of up to 50 MB before they are uploaded; we do not keep the original video file. Roamer can take a photo with your camera, but it does not record video and does not use your microphone.
Where a photo was taken. Many photos and videos record where they were taken inside the file. If you share photo locations, Roamer reads that location from the file when you add a photo or video and keeps it with the photo in our database, to about a metre, so the people on the trip can see the trip's photos on a map. The copies of photos we store and show do not carry the location inside the image. The first time you add a photo that has a location, Roamer asks whether to share photo locations (Share locations or Don't share), and no location is saved until you have answered. If you choose Share locations, sharing stays on for the photos and videos you add from then on, until you turn Share photo locations off in Settings. Turning it off stops new photos from carrying a location and removes the location from the photos you have already added. Each person on a trip controls the locations of the photos they add. A photo without a location is simply not shown on the map. On Android, Roamer may ask for permission to read the location of the photos you add; without it, or if your phone does not provide it, photos are added without a location.
Original files (optional). If Keep originals is on (the default for your uploads if you have Roamer Pro, or a Trip Pass for that trip), we also keep the original photo file exactly as your phone had it, in private storage. An original can include the camera's own details, including where the photo was taken, and anyone on the trip can download it. While Share photo locations is off, Roamer does not keep an original that contains a location. Turning Share photo locations off does not change original files that were already kept; to remove an original, delete the photo. Removing a location does not change copies someone has already saved to their own device.
Who can open a photo. Photos and videos are stored at long, random web addresses rather than behind a sign-in, so anyone who has a photo's exact address can open it. An address someone copied before they left a trip keeps working until that photo is deleted. When a photo is deleted, its address stops working within about a minute. Original files are the exception: they are only handed out through short-lived links to the people on the trip.
Recently deleted. A photo or video that is deleted moves to Recently deleted, in private storage, for 30 days. The person who deleted it or the person who added it can restore it in that time; after 30 days it is permanently deleted. The person who added it can also delete it permanently sooner. Photos and videos added to a trip's gallery are also posted in the trip chat. When someone is removed from a trip, the photos and videos they posted in its chat, including the ones they added to the gallery, stay with the conversation, where the people still on the trip can see them; that person can still save them, or remove them for everyone, from Trips You've Left in Settings. Gallery photos and videos that were never posted in the chat (added with an earlier version of Roamer) leave with the person instead: they are kept privately so that person can still save them, then permanently deleted (see our Terms of Service), and they come back only if that person rejoins. Our database backups do not include photo and video files, so a permanently deleted photo cannot be recovered.
Storage allowance. We measure how much storage your uploads use, to show you and to apply your storage allowance (see our Terms of Service). Reaching it pauses new uploads; it never deletes anything.
Roamer can read a booking confirmation and fill in the details for you. This only happens when you choose to upload a document or photo for that purpose — it is never automatic, and nothing else you store in Roamer is processed this way.
When you use it, the file you upload is sent to Anthropic to extract the details (such as dates, times, locations and confirmation numbers) and return them to the app for you to review before saving. Anthropic processes the file to provide that result and does not use it to train their models. If you would rather not share a document, enter the details manually instead — every field autofill sets can be typed in by hand.
Accounts without Roamer Pro or a Trip Pass can use autofill a few times for free. To count those, we keep a record of which of your uploaded documents autofill read for you; it is deleted with your account.
Explore is an optional part of a trip's map that suggests things to see and do near where you are going. When you open it, the app asks our own server for suggestions, and our server asks our partner Viator (a Tripadvisor company) for tours, attractions and tickets.
We send only what is needed to answer the question: your trip's location, your trip dates, and the destination name. If you use the search box in Explore, the words you type are sent too. We do not send your name, your email, your account, your device, or the notes, activities and messages you and your travel companions have written. Viator is not told who is asking.
The order suggestions appear in is set by Viator's own relevance ranking, which they tell us is influenced by their commercial arrangements. We do not re-order results to favour whichever pays us more.
If you tap through to a partner's listing, that link identifies Roamer as the referrer — not you — so that we may be paid a commission if you go on to book, at no extra cost to you. We are not told who booked what. Once you leave the app, that partner's own privacy policy governs what you do on their site.
To show what an expense in another currency came to, Roamer's server fetches the daily reference exchange rates published by the European Central Bank and other central banks, through the open-source Frankfurter service. Only the table of rates is requested; nothing about you or your trips is sent.
Find flight. When you ask Roamer to fill in a flight from its number and date, the app sends the flight number and date to our own server, which asks AeroDataBox, a flight-data service, for that flight's schedule. AeroDataBox is not told who is asking. Our server counts each account's lookups to keep within a daily limit; its request logs are kept for about a week.
Live flight status. For a flight on a trip where live status is unlocked (Roamer Pro, or a Trip Pass on that trip), our server asks AeroDataBox about the flight before and during it, by its flight number, date and airports, and receives its updates on the day. Where AeroDataBox has no live data, our server asks adsb.lol, a community network of receivers that pick up the signal every aircraft broadcasts, where that aircraft is, using its transponder code, registration or callsign. To show whether live status is available, our server may also check any flight on a trip once in the days before it departs. Neither service is sent your name, email, account, device or location; adsb.lol keeps its server logs for less than 30 days. We keep a flight's status for at most seven days. Its changes reach the trip's members who have live status as notifications, which you can turn off in Settings → Flight Updates.
Track live links open the flight on a tracking site such as FlightAware, whose own privacy policy then applies.
Some Roamer features are paid. Payments are handled entirely by the App Store or Google Play — we never see or store your payment details. To know which features your account has access to, we use RevenueCat, a purchase and subscription management service. RevenueCat receives the purchase events from Apple and Google along with an identifier for your Roamer account, and tells our app and our servers what you are entitled to.
We keep our own record of what a purchase unlocked, because app stores do not restore one-time purchases — without it, a Trip Pass you paid for could not follow you to a new device. If a purchase is refunded, we record that the entitlement was revoked; we do not delete the trip content you created with it.
We do not sell your personal information, and we do not use it for third-party advertising.
Trip content is visible to the people you invite to that trip. We use trusted service providers to operate the app — Supabase (database, storage of photos, videos and files, and authentication), Resend (email), Apple and Google (push notifications, sign-in and payments), Expo (delivery of notifications to iPhones), Sentry (crash and error reporting), Google Maps Platform (maps, place search and the map on a shared itinerary — see Maps and places), GIPHY (GIF search in chat, described below), RevenueCat (purchase and subscription management), Anthropic (only for the optional reservation autofill described above), Viator (only to find the suggestions shown in Explore, described above), and AeroDataBox (flight schedules and status) and adsb.lol (aircraft positions), both only for the features described in Flights — who process data only to provide their service to us. Versions of Roamer before 8.2.0 also use Komoot's Photon (place search) and OpenFreeMap (map tiles). We may disclose information if required by law.
GIFs. When you search for a GIF in chat, the words you type are sent through our own server to GIPHY, which is not told who you are. The GIFs you see and send are then loaded directly from GIPHY's servers, so GIPHY receives your device's IP address, as any website does when your phone loads an image from it, and handles it under GIPHY's own privacy policy.
We keep your information while your account is active. You can delete your account at any time in the app (Settings → Delete account), or by following these instructions. Deleting your account permanently removes your profile and the personal content associated with it, subject to limited backups and legal requirements. The photos and videos you added leave your trips straight away and are held in private storage for 30 days, then permanently deleted, together with any locations stored with them. A live location you were sharing is deleted at once. A record of any purchase you made is kept by RevenueCat and by Apple or Google under their own policies, and deleting your account does not cancel a Roamer Pro subscription: cancel it in your Apple Account or Google Play settings. How long live locations, location pins and photo locations are kept is described in Your location and Photos and videos.
Roamer is not directed to children under 13, and we do not knowingly collect their personal information.
We may update this policy; material changes will be reflected by the "last updated" date above.
Roamer — info@theroamerapp.com
