Privacy Policy

Traveller ("we", "us", "our") is operated by Roam Far Ltd, a company registered in England & Wales (company no. 17192610), with its registered office at 2 Withy Park, Bishopston, Swansea, SA3 3EY, United Kingdom. Roam Far Ltd is the data controller for personal data processed through the Traveller mobile and web application, which helps travellers organise destinations, packing lists, tasks, itineraries, documents, and expenses. This policy explains what data we collect, why, and what rights you have.

If you have questions, email mail@mytraveller.app.

• Deliver the service: build your trip dashboard, generate packing lists, sync data across devices.
• Send transactional emails (verification, password reset, trip-related notifications you opted into).
• Provide customer support and respond to bug reports or feedback you submit.
• Detect fraud, abuse, and violations of our Terms of Service.
• Aggregate, anonymous analytics to understand how features are used and to improve the product.

Features such as the Travel Journal allow you to upload photos and write personal entries. This content is stored in your account and is private to you. You must not upload, store, or share nudity, sexually explicit material, graphic violence, or any other prohibited content as defined in our Terms & Conditions §11.

We do not proactively scan your private journal content. However, if prohibited content is reported to us or identified through an automated safety signal, we may review it and take action — including removing the content, suspending your account, or permanently terminating your account. Serious violations involving illegal content (such as material that sexualises minors) will be reported to the relevant authorities.

Several Traveller features use AI, including trip generation, cultural insights, packing suggestions, and on-demand translations. These features send only the prompt data needed for that request (such as destination, dates, persona, and activity choices) to AI model providers via OpenRouter, an AI routing service. The current AI model is Google Gemini. We do not send the contents of your Document Vault, your journal entries, your friends list, or your payment data to AI providers. Providers process the prompt to return a response and may retain it briefly for abuse monitoring under their own policies.

We do not sell your personal data. We share it only with service providers strictly needed to operate Traveller:

• Hosting and database — Supabase, used for storage, authentication, and edge functions.
• Payments (web) — Stripe for web purchase processing.
• In-app purchases (iOS / Android) — RevenueCat for purchase management and entitlement tracking; Apple (App Store) and Google (Play Store) as the underlying payment processors.
• Authentication — Google and Apple, when you choose social sign-in.
• AI routing — OpenRouter, which forwards prompts to Google Gemini for the AI features described above.
• AI model — Google (Gemini), via OpenRouter.
• Reference data — Public APIs (REST Countries, weather and currency providers) that we query without sending your personal information.
• Legal — Authorities when required by law, valid legal process, or to protect the safety of our users.

• We keep your account and trip data for as long as your account is active.
• When you delete your account, we remove personal data within 30 days from production systems.
• Encrypted backups may persist for up to 90 days before they are rotated out.
• Anonymous, aggregated analytics may be kept indefinitely because they cannot identify you.

Traveller may store and process data in the European Union and the United States. When data leaves the EEA or the UK, we rely on Standard Contractual Clauses (SCCs) and equivalent safeguards approved by the European Commission and the UK ICO.

If you are in the EEA or UK you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten").
• Restrict or object to certain processing.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with your local supervisory authority.

Email mail@mytraveller.app to exercise any of these rights. You can also export or delete your account directly from Settings inside the app, visit our account deletion page, or use our data deletion request form to remove specific data without closing your account.

California residents have the right to know what personal information we collect, to request deletion or correction, to opt out of the "sale" or "sharing" of personal information (we do neither), and to non-discrimination for exercising these rights. Submit requests via our data deletion form or email mail@mytraveller.app.

Traveller is not directed to children under 13 (or under 16 in the European Union). We do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will delete the account.

We use essential cookies and local storage to keep you signed in and remember your language preference. We use a minimal set of privacy-preserving analytics to understand product usage. We do not use cross-site advertising trackers. You can clear local storage at any time from your browser or device settings.

• All traffic between your device and our servers is encrypted with TLS 1.2 or higher.
• Passwords are stored as salted hashes; we never see your plaintext password.
• Database access is governed by Row Level Security so users can only access their own rows.
• Document Vault files are stored in a private, access-controlled bucket accessible only to the authenticated account owner.

No system is perfectly secure. If you discover a vulnerability, please report it to mail@mytraveller.app so we can fix it quickly.

We may update this Privacy Policy as the product evolves. Material changes will be communicated by email or in-app notice before they take effect. The "Last updated" date at the top of this document always reflects the current version.

Questions, requests, or complaints? Email mail@mytraveller.app, or write to us at:

Registered in England & Wales, company no. 17192610.