Last updated: 6 August 2026
Roamio ("Roamio", "we", "us", or "our") is a mobile application for discovering places to visit in Azerbaijan, available for iOS and Android. This Privacy Policy explains what personal data we collect when you use the Roamio app (the "App"), why we collect it, how we use and share it, and the rights you have over it.
This policy is written to comply with the data-protection laws of the Republic of Azerbaijan and, where it applies to you, the EU General Data Protection Regulation (GDPR).
By using the App you agree to the practices described in this policy. If you do not agree, please do not use the App.
Roamio is developed and operated jointly by two independent developers, who act as joint data controllers responsible for your personal data:
· Farid Adashov
· Kamran Babayev
· Contact email: roamiolocalguide@gmail.com
If you
have any questions about this policy or want to exercise your privacy rights,
contact us at the email above.
We only
collect data that is needed to run the App and provide its features.
When you sign in with Google or Apple, we receive and store:
· your name (or the name you choose to display),
· your email address,
· your profile photo (if provided by the sign-in provider or
uploaded by you),
· your account identifier from the sign-in provider,
· your language / locale preference.
We use
Apple and Google only to authenticate you. We never receive your Google or
Apple password.
With your permission, the App uses your device's precise location (GPS) to:
· show places near you on the Home feed,
· power map-based search (finding places inside the map area
you are viewing),
· sort and filter results by distance.
If you do
not grant location access, the App falls back to a default city location (Baku)
and continues to work. You can change or revoke location permission at any time
in your device settings (iOS: Settings → Privacy → Location Services; Android: Settings → Apps → Roamio → Permissions → Location).
When you use the App you may create content that we store, including:
· places / guides you add,
· photos you upload to a place,
· ratings you give,
· comments you write,
· places you mark as favourites,
· trips you plan.
When you
use the AI search or AI trip planner, the free-text query you type (for example
a search phrase or trip description) is sent to our backend to generate a
response. To generate this response, the query is processed by OpenAI
acting as our service provider. Do not include sensitive personal information
in these queries.
If you
enable notifications, Apple's Push Notification service (APNs) issues a device
token that we store so we can send you notifications (for example about your
submitted guides or trips). On Android, the equivalent messaging service
(Firebase Cloud Messaging) is used to deliver notifications. You can turn
notifications off at any time in your device settings (iOS: Settings → Notifications → Roamio; Android: Settings → Apps → Roamio → Notifications).
To keep your session secure, we store an authentication token in secure on-device storage (the iOS Keychain or the Android Keystore). The App also caches images locally on your device to improve performance.
What
we do not collect. Roamio does not use third-party
advertising, marketing trackers, analytics SDKs, or crash-reporting SDKs. We do
not sell your personal data, and we do not build advertising profiles about
you.
|
Purpose |
Data used |
|
Create and secure your account |
Account/profile data, auth token |
|
Show places near you and on the map |
Location data |
|
Let you create guides, ratings, comments, favourites, trips |
Content you create |
|
Provide AI search and trip planning |
AI feature inputs |
|
Send you notifications you opted into |
Push token |
|
Operate, maintain, and improve core App features |
Technical data |
We only
process your data where we have a legal basis to do so (see Section 6).
We host the App on trusted infrastructure providers who act as our data processors. They process data only on our instructions and are not permitted to use it for their own purposes.
|
Provider |
Purpose |
|
Supabase |
Backend database, authentication, and API |
|
Amazon Web Services (S3 + CloudFront) |
Storage and delivery of images you upload |
|
Google Sign-In |
Signing you in with your Google account |
|
Apple Sign-In |
Signing you in with your Apple ID |
|
OpenAI |
Processing AI search / AI trip-planner queries to generate responses |
|
Firebase |
Fetching the list of place categories, and delivering push notifications on Android (Firebase Cloud Messaging) — no analytics or advertising |
|
Apple Push Notification service (APNs) |
Delivering push notifications on iOS |
We may also disclose data if required by law, to comply with a legal obligation, or to protect the rights, safety, and security of our users and the App.
We do not
sell your personal data to anyone.
Some of
our processors (for example Amazon Web Services, Google, Apple, and OpenAI) may
store or process data on servers located outside Azerbaijan or the European
Economic Area. Where such transfers happen, we rely on appropriate safeguards
(such as the European Commission's Standard Contractual Clauses or an
equivalent mechanism) to protect your data.
Where the GDPR applies to you, we rely on the following legal bases:
· Performance of a contract
— to create your account and provide the core features you request (guides,
ratings, comments, favourites, trips).
· Consent
— for precise location access and push notifications. You can withdraw this
consent at any time in iOS Settings.
· Legitimate interests
— to keep the App secure, prevent abuse, and maintain and improve its
functionality, balanced against your rights.
We keep
your personal data for as long as your account is active. When you delete your
account, or after a prolonged period of inactivity, we delete or anonymise your
personal data, unless we are required to keep it to comply with a legal
obligation or to resolve disputes. Locally cached data (images, session token)
is removed from your device when you sign out or uninstall the App.
Depending on your location, you have the following rights over your personal data:
· Access
— request a copy of the data we hold about you.
· Rectification
— correct inaccurate or incomplete data.
· Erasure
— request deletion of your data ("right to be forgotten").
· Restriction
— ask us to limit how we process your data.
· Portability
— receive your data in a structured, machine-readable format.
· Objection
— object to processing based on legitimate interests.
· Withdraw consent
— withdraw consent for location or notifications at any time.
· Complaint
— lodge a complaint with your local data-protection authority.
To
exercise any of these rights, email us at roamiolocalguide@gmail.com. We
will respond within the time limits required by applicable law.
We take
reasonable technical and organisational measures to protect your data,
including encrypted connections (HTTPS/TLS) to our servers, private storage
buckets with signed, time-limited access URLs for your images, and secure
on-device storage of your session token (the iOS Keychain or the Android
Keystore). No method of transmission or storage is 100% secure, but we work to
protect your data using industry-standard practices.
The App
is not directed at children under the age of 16. We do not knowingly collect
personal data from children under 16. If you believe a child has provided us
with personal data, please contact us and we will delete it.
We may
update this Privacy Policy from time to time. When we make material changes, we
will update the "Last updated" date at the top of this policy and,
where appropriate, notify you in the App. Your continued use of the App after
an update means you accept the revised policy.
If you have any questions, requests, or complaints about this Privacy Policy or your personal data, contact us at:
· Farid Adashov & Kamran Babayev
· Email: roamiolocalguide@gmail.com