Privacy Policy

When you sign in to Roveo, we collect information provided by authentication providers:

Google Sign-In

• Full name
• Email address
• Profile photo

Apple Sign-In

• Full name (where available)
• Email address, including Apple Private Relay email addresses (privaterelay.appleid.com)
• Profile photo (if provided)

You are responsible for maintaining accurate account information.

Roveo allows users to share travel-related content into the app through the device share sheet.

When you share content into Roveo, we collect and store:

• The source URL of the content shared into the app;
• Static carousel post images associated with shared content (where applicable);
• AI-generated classifications, place names, destinations, recommendations, and travel insights extracted from shared content.

We do not store raw video content. Videos shared into Roveo are processed transiently to extract travel information and are not retained on our systems.

We do not access your social media accounts. We process only the specific content you explicitly share with us via the share sheet.

We do not claim ownership over third-party content you share into Roveo.

You represent and warrant that you have the right to share or use any content submitted to the Services.

Roveo processes shared content solely for:

• itinerary generation;
• travel planning assistance;
• recommendation personalisation; and
• improving the functionality of the Services.

Roveo requests only the following device permissions:

Location

With your explicit permission, Roveo may collect precise or approximate location information to:

• provide nearby recommendations;
• personalise itineraries;
• improve travel context and destination suggestions;
• enhance relevance of recommendations.

Location access is optional. You may withdraw or modify location permissions at any time through your device settings. Certain location-based features may become unavailable if permission is disabled.

Notifications

With your permission, Roveo may send push notifications for:

• travel reminders and itinerary updates;
• product updates and new features;
• travel recommendations.

Notification permission can be withdrawn at any time through your device settings. We do not request any other device permissions.

We automatically collect certain device and usage information, including:

• Device type and model;
• Operating system and version;
• App version;
• Device identifiers;
• IP address;
• Language and region settings;
• App interaction data;
• Crash reports and diagnostics;
• Session and performance analytics.

If you contact us, we may collect:

• Email correspondence;
• Support messages;
• Feedback or bug reports;
• Communication preferences.

Where permitted by law and with your consent, we may collect preferences related to:

• Email communications;
• Promotional messages;
• Travel recommendations;
• Push notifications.

You may opt out at any time using unsubscribe settings or device notification controls.

When you chat with Rio inside Roveo, we collect and store:

• the messages you send and the responses Rio provides;
• a summarised version of the conversation, generated once a chat session goes idle, used to preserve context and personalise future recommendations.

Conversation data is used solely to operate and improve the chat experience, including remembering context across sessions and refining recommendations. Please avoid sharing sensitive information (such as government ID numbers, financial details, or health conditions) in chat.

• Create and manage accounts;
• Authenticate sign-ins;
• Deliver AI-powered travel planning;
• Generate itineraries and travel recommendations;
• Organise travel inspiration and saved content.

• Learn travel preferences;
• Improve itinerary suggestions;
• Provide location-aware recommendations;
• Enhance travel relevance.

We use artificial intelligence to:

• Analyse travel-related content shared into Roveo;
• Extract travel places and recommendations;
• Generate itineraries;
• Personalise future travel suggestions.

Travel content and context shared into Roveo is processed by third-party AI providers as described in Section 4. We take steps to minimise personal data included in AI processing requests. AI providers operating on our behalf do not use your content to train their general AI models.

We may use your information to:

• Send account-related updates;
• Respond to support requests;
• Deliver product updates;
• Send marketing emails and promotional travel recommendations (with consent);
• Send push notifications (with permission).

We analyse usage data to:

• Improve app performance;
• Understand feature usage;
• Detect bugs or crashes;
• Improve recommendation quality.

We use information to:

• Prevent fraud or abuse;
• Detect suspicious activity;
• Protect users and infrastructure;
• Enforce our Terms and Conditions.

We may process information to comply with applicable laws, legal obligations, or lawful government requests, including the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

With vendors that help operate Roveo, as listed in Section 4. All service providers are permitted to use your data only for the specific purposes described in this policy.

If required by law, court order, or legal process, including requests from Indian regulatory or government authorities.

To prevent fraud, abuse, or security incidents, or to enforce our Terms and Conditions.

If Roveo undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred as part of that transaction. In such cases, your data will remain subject to this Privacy Policy, and you will be notified of any material changes through the app or by email.

We process your personal data on the following lawful bases:

• Consent: for marketing communications, push notifications, and location-based features;
• Contract: to provide the Services you have signed up for, including account management, itinerary generation, and travel planning;
• Legal obligation: to comply with applicable laws and respond to lawful government requests;
• Legitimate interests: to maintain the security and integrity of the Services, prevent fraud and abuse, and improve app performance, where these interests are not overridden by your rights.

In addition to the rights described in Section 14, EU, EEA, and UK users have the following rights:

• Right to data portability: request a copy of your personal data in a structured, machine-readable format;
• Right to object: object to processing based on legitimate interests or for direct marketing purposes;
• Right to restrict processing: request that we limit how we use your data in certain circumstances;
• Right to lodge a complaint: file a complaint with your local Data Protection Authority. In the EU, you may contact the DPA in your member state. In the UK, you may contact the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, contact us at hello@roveotrip.com. We will respond within 30 days.

Roveo is operated from India, which is not currently recognised by the European Commission as providing an adequate level of data protection.

When we transfer your personal data outside the EU, EEA, or UK, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission as the legal mechanism for such transfers.

Our third-party service providers including OpenAI, Google (Firebase and Maps), Mapbox, Mixpanel, and Perplexity maintain their own GDPR-compliant Data Processing Agreements. Where required, we have entered into or will enter into Data Processing Agreements with these providers prior to processing EU user data.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:

• notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where feasible;
• notify affected users without undue delay where the breach is likely to result in a high risk to their rights and freedoms.

Roveo does not currently meet the threshold requiring the appointment of a Data Protection Officer under Article 37 of the GDPR. If our processing activities change such that a DPO is required, we will appoint one and update this policy accordingly.

Roveo does not sell your personal information to third parties. We do not share your personal information with third parties for cross-context behavioural advertising purposes.

Depending on your state of residence, you may have the following rights:

• Right to know: request disclosure of the categories and specific pieces of personal information we have collected about you, the purposes for which it is used, and the categories of third parties with whom it is shared;
• Right to delete: request deletion of personal information we have collected from you, subject to certain exceptions;
• Right to correct: request correction of inaccurate personal information we hold about you;
• Right to opt out: opt out of the sale or sharing of personal information. Note: we do not sell or share personal information;
• Right to limit use of sensitive data: limit our use and disclosure of sensitive personal information to necessary purposes;
• Right to non-discrimination: we will not discriminate against you for exercising any of your privacy rights.

These rights apply to residents of California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and other US states with applicable privacy laws. The specific rights available to you may vary by state.

In the past 12 months, we have collected the following categories of personal information:

• Identifiers: name, email address, device identifiers, IP address;
• Internet or network activity: app interaction data, session data, crash reports;
• Geolocation data: approximate or precise location where permission is granted;
• User-generated content: travel content and URLs shared into Roveo via the share sheet;
• Inferences: travel preferences and recommendations derived from your usage.

To submit a privacy request, email hello@roveotrip.com with the subject line “US Privacy Rights Request”. Please include your state of residence and the right you wish to exercise.

We will respond to verified requests within 45 days. We may extend this period by a further 45 days where necessary, with prior notice. We will not discriminate against you for making a request.