Privacy Policy
Rovego plans trips. This page explains what we collect, why, who helps us run the service, and the choices you have. We do not sell your data, we do not show ads, and we do not track you across other apps or websites.
What we collect
| Data | Why |
|---|---|
| Account details — email address (if you use email, Apple or Google sign-in), a password hash (never your password), the identifier Apple or Google gives us, and any passkey public keys | To sign you in and keep your trips on your account. |
| Your trips — places, dates, times, budgets, notes, travel preferences, the start and end points you type | To build, save and sync your itinerary, and to show it on your devices. |
| Location — only if you allow it, and only while you use the app | To centre the map near you and suggest nearby places. You can turn it off in Settings at any time. |
| Your travel log — flights, hotels and the countries and cities you mark as visited: dates, airports, hotel names, prices you type and your notes | To keep your own travel record. It is saved on your device and, when you are signed in, on your account so it follows you across devices. Please do not enter passport, ID or payment-card numbers. |
| Shared trips — the trip, the people you invite and their comments | To let the people you choose view or edit a trip. |
| Optional feedback — the idea you submit, app language, submission time and a random submission identifier | To understand requests and improve Rovego. Feedback is not automatically linked to your account. |
| Optional Calendar sync — calendar identifiers and Rovego event markers, dates and times | With your permission, the iOS app creates and updates a separate Rovego calendar. Calendar access is processed on your device; calendar events are not uploaded to our servers. Your chosen calendar provider may sync the events through its own service. |
| Technical data — a random device key, session cookie, basic server logs (time, page, error) and rate-limit counters | To keep you signed in, prevent abuse and fix bugs. We do not build advertising profiles. |
| Subscription status — whether your Apple ID has an active Rovego Passport subscription, read on your device through Apple's StoreKit | To unlock subscription features. Payments are handled entirely by Apple; we never receive your payment card or billing details. |
| Invites — your invite code, which account invited which (account identifiers only), the dates and the free months credited | To run invite rewards and prevent abuse. We do not see or upload your contacts; you choose whom to share your link with. |
We do not collect your contacts, photos, health data, or precise location history.
Who helps us (service providers)
- Google Maps Platform — maps, place search, ratings, photos, opening hours and directions. Place names and coordinates you look up are sent to Google. Google's privacy policy.
- Apple — Sign in with Apple, passkeys (iCloud Keychain), In-App Purchase for subscriptions and, where used, Apple Maps. Apple's privacy policy.
- AI service provider (DeepSeek) — the AI service that suggests places, itineraries and answers your planning questions. The text you write in the planner and the trip details needed for the answer are sent to this provider. We do not send your email address or account identifiers.
- Hosting and delivery — our servers and network provider (for example Cloudflare) process requests to deliver the service.
- Trip.com — only if you tap a hotel booking link: it opens Trip.com, and what you enter there is handled by Trip.com under its own privacy policy. Invite links and Trip.com links do not send your Rovego account details to Trip.com.
- Public data sources — weather, exchange rates, flight and holiday information are fetched using the place names and dates in your trip, not your identity.
- Country lookup (api.country.is) — when you open the planner without a saved destination, your browser asks this service which country your internet connection is in, so the planner can start near you. This request reaches the service directly from your browser, so it receives your IP address (we send it no cookies and no referrer). Choose a destination yourself and the request is not made.
- Open map and travel data — Wikipedia and Wikimedia (place photos and descriptions), OpenStreetMap services (place search and routing), Overpass, Open-Meteo (weather) and Nager.Date (public holidays) receive the place names, coordinates and dates needed for a lookup, never your account details.
How long we keep it
Trips and account data stay until you delete them. Deleting a trip removes it from our servers. Deleting your account removes your account, sign-in methods, sessions and all trips saved on it. Backups and logs are removed on a rolling schedule of up to 30 days.
Your choices
- Delete your account: in the app, open the account page (person icon) and choose Delete my account. You can also email support@rovego.vip from your account email.
- Access or export: email us and we will send you a copy of your data.
- Optional location reference: from a saved trip’s map in My Trips, the iOS app can show roughly where you are on the offline map, including offline. Coordinates are not sent to Rovego servers.
- Trip journal: only after you press Start on a trip, the iOS app records your route (also with the screen off; iOS shows a blue location indicator) until you finish or pause. The route, your notes and the places you have visited are stored on your device only, are not sent to Rovego servers, and are deleted when you sign out. Pressing Finish stops recording. Enable or turn off this feature in Settings; you may also revoke location permission in iOS Settings. Native map tiles are provided under Apple’s privacy policy.
- Calendar: opt in from Trip settings → Calendar sync. Stop syncing there or revoke Calendar permission in iOS Settings. Existing events remain in Calendar until you remove them there; deleting your Rovego account does not delete events already saved to your calendar provider.
- Location: allow or deny it in your device or browser settings.
- Guest use: you can plan without an account; trips then stay on your device (and a random device key on our servers) until you clear them.
Depending on where you live (for example the EU, UK or California) you may also have the right to correct, restrict or object to processing, and to complain to your data protection authority. Write to us and we will respond within 30 days.
Security
Connections use HTTPS. Passwords are stored only as salted scrypt hashes. Passkeys never leave your device — we store only a public key. No system is perfectly secure, so please use a unique password or, better, a passkey.
Children
Rovego is not directed at children under 13, and we do not knowingly collect their data.
International transfers
Our providers may process data in the United States and other countries. We rely on their contractual safeguards where the law requires them.
Changes
If this policy changes in a meaningful way we will update the date above and, for significant changes, tell you in the app.