Privacy Policy

Contact

For privacy questions, complaints, rights requests, or account deletion requests, contact support@bearoamer.com.

Information we collect

• Account information, including your name, email address, profile photo, authentication provider, Firebase user ID, and sign-in/session metadata. When you affirmatively sign in or create an account through an updated notice, we record the Terms and Privacy Policy versions presented, your confirmation that you are at least 18 and have reached the age of majority where you live, the action and platform, and a server timestamp. We record the confirmation, not your birth date. Existing sessions are not evidence that you accepted a newer version.
• Profile and preference information, including budget tier, travel pace, interests, traveler type, currency, temperature unit, dietary restrictions, notification preferences, household travel-prep details, and onboarding choices.
• Travel document information you choose to enter, including passport/residency countries and passport expiry date. These profile features do not require a passport number or scan. Freeform content, documents, photos, or support materials you voluntarily submit may contain additional personal information; avoid including sensitive information a feature does not need.
• Trip content that you create, import, or share, including destinations, dates, itineraries, place names, place IDs, coordinates, reservations, budgets, expenses, packing and checklist items, notes, collaborators, votes, public-share links, private place ratings, AI chat messages and conversation history, and generated travel guidance.
• Gmail information if you connect Gmail, including the Gmail OAuth access token and expiry, travel-reservation email search results, message content needed to parse booking confirmations, and the reservation details you choose to import.
• Location information when you grant permission, including approximate or precise device location, background/live-trip location where enabled, and last-known location used for maps, nearby places, reminders, geofence alerts, running-late nudges, and trip context.
• Device, notification, and usage information, including device/app identifiers, FCM push tokens, notification delivery/open events, app interactions, diagnostic logs, crash reports, IP address, browser/device metadata, cookies, and local storage.
• Support information you choose to send, including your reply email, message, trip ID, screenshots or attachments you provide, and request metadata.

How we use information

• Provide, personalize, and sync trip planning, itinerary, map, reservation, Gmail import, packing, expense, budget, collaboration, notification, live-trip, and AI-assisted travel features.
• Authenticate users, sync data across devices, protect accounts, prevent abuse, and respond to support or account deletion requests.
• Generate and refine user-facing itineraries, travel suggestions, budgets, packing lists, visa guidance, route context, smart nudges, and other trip-specific outputs based on information you provide. Relevant prompts, conversation history, trip details, preferences, reservation content, and location context may be sent to Google AI services to perform the feature you invoke. Do not submit information you do not want processed for that feature.
• Deliver push notifications, schedule reminders, recover stale notification tokens, and route notification taps to the relevant trip screen.
• Analyze reliability, performance, product usage, abuse patterns, and crashes so we can operate, secure, debug, and improve Roamer.

Gmail and Google Workspace data

• Gmail connection is optional. Roamer requests Gmail read access only after you choose to connect Gmail and approve Google's OAuth consent screen.
• Roamer uses Gmail data only to search for travel booking confirmations, parse candidate reservations, show them to you, and import the reservations you select.
• Roamer does not use Gmail data for advertising or to train Roamer's own generalized AI models. Relevant Gmail message content may be sent to Google AI services to provide the user-facing reservation-import feature you invoke. Acknowledging this policy or signing in does not itself connect Gmail or grant Gmail access.
• Roamer's use of information received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• Raw Gmail messages are used to generate candidate reservation results during a search. Roamer stores imported reservation fields if you choose to import them; it does not store raw Gmail message bodies as trip records.

Service providers and sharing

• We do not sell your personal information.
• We share information with service providers as needed to operate Roamer, comply with law, protect rights and safety, or complete actions you request.
• Service providers may include Firebase and Google Cloud for authentication, database storage, hosting, push notifications, analytics, and crash reporting; Google Maps and Places for maps, place search, photos, directions, and location context; Google AI services for AI generation; Open-Meteo for weather; Frankfurter or other exchange-rate providers for currency conversion; Sentry when error monitoring is configured; Vercel for hosting and consent-based web analytics; Resend for transactional email such as trip invitations; and app-store or payment processors if paid features are enabled.
• Optional integrations such as Gmail and Splitwise are used only when you connect or invoke those features. Splitwise OAuth credentials are encrypted at rest and used to show connection status and export trip expenses when you request it.
• If you share a trip or invite collaborators, the trip details you choose to share may be visible to those collaborators.
• If you enable a public share link, anyone with that link can view the shared itinerary, including its locations and schedule, and the owner display name and profile photo included in the shared view, until you revoke the link. Review that view before sharing. Copies, screenshots, or exports already made by other people cannot be recalled by revoking the link.
• If you export expenses to Splitwise, Roamer sends the selected trip and expense information needed to create the Splitwise group and expenses.
• We may disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, financing, or sale of assets, with appropriate notice where required.

Maps, places, and location

• Roamer uses Google Maps and Google Places features and content. Location and map requests may be processed by Google under Google's terms and privacy policy.
• Use of Google Maps features and content is subject to the Google Maps/Google Earth Additional Terms of Service and Google Privacy Policy.
• You can deny or revoke device location permission. Maps, nearby suggestions, live-trip alerts, background geofence checks, and running-late reminders may not work without location permission. Ending a live-trip session does not itself erase the last-known location already stored with the session; it remains subject to our retention and deletion practices.

Retention and deletion

• We keep information while needed to provide Roamer, meet legal obligations, resolve disputes, prevent abuse, and maintain backups.
• Expired Gmail access tokens are not used for Gmail access, but expiration does not itself remove the stored token. Disconnecting Gmail clears the stored connection credentials; account deletion also includes credential cleanup. Splitwise credentials are cleared when you disconnect or during account deletion. Imported reservations or previously exported expenses are separate records and are not erased simply by disconnecting. Push tokens are managed through validity checks, cleanup, and sign-out flows where supported.
• Raw Gmail messages used during reservation search are not stored as trip records. Imported reservations, generated trip content, expenses, logs, and shared-trip records are retained with your account or trip until deleted or no longer needed.
• You can request account deletion through available in-app account controls, the support page, or by emailing us from your account email. The in-app deletion flow schedules deletion after a 30-day grace period and allows cancellation during that period. Removal is processed through scheduled cleanup after the grace period; completion may take additional time, including if cleanup needs to be retried.
• Account deletion does not guarantee immediate erasure from every system. Backups, security and administrative audit records, support correspondence, and records needed for legal obligations, dispute resolution, or abuse prevention may remain for those purposes. We restrict retained information to the purposes for which it remains necessary.
• Shared-trip contributions, records held in other users' accounts, independent copies made by collaborators, and records exported to third-party services may remain after your account is deleted. Contact us if you need help identifying information that should be removed. Deleting Roamer does not delete an account you maintain with Google, Apple, Splitwise, or another provider.

Your choices

• You can decline or revoke optional permissions such as location, background location, photos, camera, or notifications, though related features may not work.
• You can disconnect Gmail and Splitwise where supported, change notification preferences, revoke device notification permission, and delete or edit trip, reservation, expense, profile, and travel-document information where the app allows.
• Depending on applicable law, you may request access to your personal information, correction of inaccurate information, withdrawal of consent, or deletion, and raise a privacy complaint. Withdrawal does not invalidate prior lawful processing and may prevent us from providing the affected feature. Some information may be retained where law permits or requires it.
• Send requests to support@bearoamer.com. We may ask for information reasonably necessary to verify your identity and locate your records, and will respond within the period required by applicable law. You may complain to the privacy regulator or other competent authority in your jurisdiction without first using our support process.
• These choices apply subject to the laws and rights applicable and in force where you live, including relevant Canadian and Indian requirements. They do not imply that every right under a law with phased commencement is already in force, or that accepting the Terms waives privacy rights.

Cookies, local storage, and diagnostics

• The website uses cookies and browser storage for authentication, preferences, and local application state. Mobile apps may store account, trip, and preference data locally to support their features and offline use.
• On the website, your cookie choice controls Vercel Analytics, Speed Insights, and Firebase Analytics: they are enabled after you accept and remain disabled while the choice is pending or declined. This choice is stored in your browser. Native apps use Firebase Analytics and Firebase Crashlytics for product analytics and crash diagnostics separately from that browser choice. The choice does not disable operational API error reporting or native diagnostic services.
• You can manage browser cookies and storage and device permissions through your browser or device settings. Clearing site data may sign you out or reset saved preferences. Contact us for help withdrawing an optional processing choice if a control is not available in your app version.

International processing

• Lumin is a United States company. Information may be stored or processed in the United States and other countries where our service providers operate, including when you use Roamer from Canada or India.
• Those countries may have privacy laws different from your own, and information may be accessible to courts, law enforcement, or other authorities under their laws. Cross-border processing remains subject to applicable legal requirements; acknowledging this policy does not waive protections that apply to you.
• Contact support@bearoamer.com for questions about international processing and our providers or to exercise applicable privacy rights.

Security

• Roamer uses Firebase Authentication, Firestore security rules, HTTPS, server-side authentication checks, rate limiting, and token cleanup to protect user data.
• No service can be guaranteed perfectly secure. Contact us promptly if you believe your account or data has been accessed without permission.

Children

• Roamer is intended for people who are at least 18 and have reached the age of majority where they live. It is not directed to children. If you believe someone below that age has provided personal information, contact us so we can investigate and take appropriate action, including restricting the account and handling deletion as required by law.

Changes

• We may update this policy as Roamer changes and will identify the updated version and effective date. We will give direct notice of material changes, such as through the app or email, before they take effect where feasible and as required by law. Where a change requires new consent, we will request it before the affected processing. Merely posting an update is not a substitute for legally required notice or consent.