Privacy

What it stores

• Your name, email address and profile picture, from Google when you sign in. Roava never sees your Google password.
• The places you save, the trips you build, and any journal entries and photos you write or upload.
• Who you follow, and who follows you.
• Reports you send, so they can be reviewed.

Who can see it

Everything is private by default. Nothing you save is visible to anyone else unless you choose to publish it.

• Publishing a trip puts it on your public profile and in your followers' feeds. It shows the itinerary and its stops — never your private notes or ratings on the underlying places, and never your email.
• A share link makes one trip readable by anyone holding the link. Replacing the link breaks the old one immediately.
• Showing where you have been to your followers is a setting, off until you turn it on. With it on, the places you have marked been there appear on the map of anyone who follows you, with your name, your note and your rating on each — which is the point, since a place with nothing said about it is worth little to somebody standing in front of it. It never includes anywhere you marked lived there, never your want-to-go list, and never journal entries. Turning it off removes them from other people's maps.
• Journal entries and photos are always private. Publishing a trip does not publish them. Photos are stored so that they cannot be read by their URL — only through Roava, after checking it is you.
• Inviting someone to a trip lets them edit that trip's itinerary. It gives them no access to anything else of yours.

Who else it talks to

• Google, to sign you in.
• OpenStreetMap-based services for map tiles and place search. What you type into the search box is sent to them to look up.
• Vercel and Neon, which host the app, its database and its photo storage.

There is no advertising, no analytics tracking you across sites, and nothing is sold to anyone. Roava does keep a simple count of what happens in it — which link a new account came from, how many people open a shared trip, when a trip is published or copied — so we can tell what is working. It stays in our own database and is never shared. It holds no IP address, email or device identifier; only signing up, publishing and copying a trip are tied to your account.

Deleting it

You can delete your account at any time from your profile. That removes your places, trips, journal entries and photos, including the photo files themselves. It cannot be undone, and there is no backup to restore from. Copies other people made of trips you published stay with them.

Reporting something

Any public profile or published trip can be reported from its page. You can also block someone, which hides each of you from the other and removes any follows between you.

Getting in touch

Email tylerfowler21@gmail.com.