Rovery

Privacy Policy

Effective 6 August 2026 · Last updated 10 September 2026

The short version

Rovery stores the trips, expenses and profile details you enter, so they sync across your devices and to the people you travel with.
People in a trip with you can see your name, avatar, and that trip's plans and expenses. That is the point of a shared planner.
We do not sell your data, and we do not show ads.
Links and screenshots you submit to the AI features are sent to AI providers to turn into itinerary cards. Uploaded images are processed in memory and never stored on our servers.
You can delete your account and everything in it, permanently, from inside the app.

1. Who we are

Rovery is an independently built trip-planning app for organising itineraries, splitting shared expenses, and collaborating with a group of travel companions. It is operated from India by an independent developer.

For any question about this policy or your data, including privacy grievances, contact privacy@rovery.app. We aim to respond within 30 days.

2. Data we collect

We collect only what the app needs to function. There is no advertising or profiling.

Information you give us

Account: your email address and a password. Authentication is handled by Supabase Auth; passwords are stored only as salted hashes and are never visible to us.
Profile: display name, optional tagline, home city, travel style tags, avatar colour, optional profile photo, and an optional UPI ID used only to generate settle-up payment links.
Trips: trip titles, dates, itinerary activities, place names, notes, and destination photos selected for the trip.
Groups and friends: who is in each trip, friend connections you accept, and invite links you generate.
Expenses: amounts, currency, categories, who paid, how a cost is split, settlement confirmations, and any receipt photo you choose to scan or attach.
Photos: images you attach to a completed trip, and receipt images you upload.
AI feature input: links you paste and screenshots or images you upload, sent only at the moment you use those features.

Information collected automatically

Push notification token: a per-device identifier issued by Firebase Cloud Messaging, plus the device platform and your notification preferences, so trip updates can reach the right device.
Crash and error reports: when the app hits an unexpected error, Sentry receives the error message, a stack trace, and basic device context such as model and operating system version. We have deliberately disabled personally identifying data, screenshots and screen-content capture in this reporting.
Product analytics: once you are signed in, which screens you open, roughly how long you spend on them, and which features and buttons you use — so we can see what people actually use and prioritise accordingly. Not linked to any advertising identifier, and not collected before sign-in.
Coordinates for places you add: when you add a place, we look up its approximate map coordinates by name so it can be drawn on the trip map.
Your device position, only when you ask for it: if you tap the my-location button on the journey map, the app reads your position and sends it to our server once, so we can calculate the driving route from where you are to your destination. It is used for that request and not stored, and it is never shown to anyone else on the trip.

What we do not collect

We do not collect your device's continuous or background location. The app never reads your position while it is closed or in the background, and never on a schedule — only in the moment you tap the my-location button, as described above.
We do not read your contacts, messages, call logs, photo library, or other apps' data. You choose individual images to upload.
We do not track you across other apps or websites, and we do not use advertising identifiers.
Screenshots and images you submit to the AI features are resized and processed in memory and are never written to our servers or retained.

3. How we use your data

To create and secure your account, and keep you signed in.
To store and sync your trips, expenses and profile across your devices and to other members of trips you share.
To notify your group about relevant activity — a new expense, a plan change, a vote, a join request, a friend request — subject to the notification settings you choose.
To turn links or images you submit into suggested itinerary cards, including a place name, description, category and a representative photo.
To resolve place names into map coordinates, driving routes and map tiles.
To diagnose crashes and fix defects.

Under India's Digital Personal Data Protection Act, 2023, we process this data on the basis of the consent you give when you create an account and use each feature, and to provide the service you have asked for.

4. Who can see your data

Other people in the app. Members of a trip you join can see that trip's itinerary and expenses, and your display name, avatar and profile details. People you accept as friends can see your profile details and can include you in a shared expense. Anyone you owe or who owes you can see the relevant expense. Leaving a trip, or removing a friend, stops further sharing going forward.

We do not sell your personal data, share it with advertisers, or use it to build advertising profiles.

Service providers

These companies process data strictly to provide parts of the service:

Provider	What it handles	What it receives
Supabase	Database, authentication, file storage, realtime sync	Your account, profile, trips, expenses and uploaded files
Render	Hosting for our AI processing service	Links and images you submit to AI features, and your access token to verify you are signed in
Groq	AI text extraction from links and captions	The text content of links you submit
Google Gemini	AI understanding of images and video content	Screenshots or images you submit, and video captions
Firebase Cloud Messaging (Google)	Delivering push notifications	Your device push token and the notification content
Sentry	Crash and error reporting	Error messages, stack traces, device model and OS version
PostHog	Product analytics	Screen views and feature/button usage events, linked to your account id once you are signed in
Geoapify	Place lookup, points of interest, map tiles, driving routes	Place names and coordinates only — no personal data
Pexels	Stock destination photography	Place or category search terms only — no personal data
OpenStreetMap Nominatim	Converting place names to coordinates	Place names only — no personal data
Openverse, Wikimedia Commons, Wikipedia	Openly licensed place photography	Place search terms only — no personal data
Pixabay	Additional stock photography (optional, may not be active)	Place or category search terms only — no personal data

We may also disclose data if required by law, or to protect the rights and safety of our users.

5. Where your data is stored

Your account, trips, expenses and uploaded files are stored on Supabase infrastructure in the Asia Pacific (Seoul, South Korea) region. Our AI processing service and the providers listed above may process data in other countries, including the United States and the European Union. If you use Rovery from India, this means your personal data is transferred and stored outside India, with contractual protections provided by those processors.

We keep a short-lived cache of AI results, keyed by an irreversible hash of the submitted link together with the resulting public place information. It contains no account identifier and cannot be traced back to you.

6. How long we keep it

Your data stays for as long as your account exists, because the app is designed to keep your trip history and memories available to you.

You can permanently delete your account at any time from Profile → Delete account. This deletes your profile, the trips you own and all their contents, your membership of other people's trips, your expenses, your friend connections, and any photos or receipts you uploaded. It cannot be undone.

Some content necessarily persists after deletion: an expense that another member created and that includes you remains part of that member's own records, because it is their financial record too. Anonymised crash reports and short-lived caches expire on their own schedules.

7. Your rights and choices

Access and correction: view and edit your profile fields at any time in the Profile tab.
Erasure: delete your account and its contents, as described above.
Control over sharing: leave a trip, or remove a friend, to stop sharing further activity with them.
Notifications: turn individual notification categories on or off in the Notification Hub, or disable them entirely in your device settings.
Withdraw consent: stop using a feature, or delete your account, to withdraw consent for the related processing.
Grievances: write to privacy@rovery.app. If you are in India and are not satisfied with our response, you may escalate to the Data Protection Board of India.

8. Security

Access to your data is enforced at the database level by row-level security policies: by default you can read only your own profile and the data of trips you belong to. Traffic between the app and our servers is encrypted in transit. Uploaded photos and receipts are held in private storage and served through short-lived signed links. AI endpoints require a valid signed-in session.

No system is completely secure. If we become aware of a breach affecting your personal data, we will notify affected users and the relevant authority as required by law.

9. Children

Rovery is intended for adults and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete the account.

10. Changes to this policy

If we change how we handle your data, we will update this page and revise the "last updated" date above. Where a change is significant, we will also give notice inside the app. Continuing to use Rovery after a change means you accept the updated policy.

11. Contact

Rovery · India · privacy@rovery.app