Privacy Policy

Account Information

• Email address
• Full name
• Account creation date

Location Data

• Real-time GPS coordinates during active adventures
• Starting location when generating adventure routes
• Waypoint check-in locations and timestamps

Free Roam Ambient Mode

• Foreground GPS coordinates while Free Roam is open, used to place nearby loot, companion eggs, and pop-up adventures at real public places
• Your last-known coordinates, stored as presence, so we can generate content near you and power anonymous proximity hints
• Distance walked while Free Roam is active, used to hatch companion eggs
• Records of the spawns you and, when in a party, your party claim

Anonymous proximity hints sent to nearby players never include your identity, your location, or the item involved — only a generic message that something rare was found nearby.

AI NPC Encounters

• Your active character's race and class, sent to Google Gemini to personalise NPC dialogue
• The messages exchanged during an NPC conversation, sent to Google Gemini to generate in-character responses
• Records of any NPC side-quest you accept (title, objective location near the NPC, negotiated XP reward, stage, and completion status), stored to track the quest on your live map

NPC conversations are processed to generate responses in real time. We do not use NPC dialogue to identify you, and quest objective locations are derived from the NPC's map position, not stored as your personal location history.

Game Data

• Character profiles (name, class, stats, level, XP)
• Unlocked skills and abilities
• Adventure history and completed challenges
• Dice roll history

Companions, Streaks & Badges

• Companion profiles (dice-rolled traits, care level, bond, and distance/check-in totals)
• Daily activity streak dates and your current/longest streak counts
• Earned milestone badges and AI-generated badge and card images stored in our media storage

Location-Derived Conditions & Presence

• Current weather and local time for your adventure area, retrieved from a third-party weather service (Open-Meteo) using your coordinates, used only to flavour AI narration
• A coarse region label used solely to show aggregate "active player" counts — these counts never reveal your identity or precise location to other players

Community Feed & Shared Content

• Photos and captions you capture and upload to share moments from your adventures
• The visibility you choose for each post (private, party-only, or public)
• Your display name and a coarse location name attached to posts you share
• Likes you give to other posts

Photos you upload are stored in our media storage. Posts set to "Public" are visible to all users of the Service; party-only posts are visible to your party members; private posts are visible only to you. You choose the visibility of every post, consent to that visibility when you publish, and can delete your posts at any time.

Usage Data

• Device type and operating system
• Browser type and version
• IP address
• Pages visited and features used

Push Notification Data

• Push subscription endpoint and keys (only if you opt in to notifications)
• The browser/device associated with each push subscription

Payment & Subscription Data

• Your membership tier and subscription status (e.g. trialing, active, cancelled)
• A Stripe customer identifier linked to your account
• Purchase history for subscriptions and one-time purchases (amount, currency, date, item)
• Your region-derived currency (EUR, ZAR, or USD), determined from your IP address
• We do not collect or store your full card number, CVC, or bank details. Card information is entered directly with Stripe, our payment processor.

We use the collected information to:

• Provide and maintain the Service
• Generate AI-powered adventure routes based on your location
• Track adventure progress and award XP/rewards
• Authenticate and secure your account
• Send important service notifications (email confirmations, adventure updates)
• Send optional push notifications (only if enabled) to re-engage you and alert you to nearby challenges
• Improve the Service through analytics and user feedback
• Enforce our Terms of Service and prevent abuse

Your location data is critical to the Service but is handled with care:

• Location data is only collected during active adventures when you grant permission
• In Free Roam mode, foreground location is used to place nearby ambient content and your last-known location is stored to enable anonymous proximity hints; this runs only while Free Roam is open
• We do not track your location when you're not using the app
• Location data is used to generate routes and validate waypoint check-ins
• Historical location data (waypoints visited) is stored to track adventure progress
• You can revoke location permission at any time through device settings
• During active adventures, the app detects when you approach challenge waypoints using foreground location only (proximity alerts)
• A screen wake lock may keep your display on during an active adventure so proximity detection continues; this collects no additional data
• We never sell location data to third parties

We do not sell your personal information. We may share data with:

• Service Providers: Third-party services that help us operate (Supabase for database, Google for Maps/AI)
• Google (Maps & Gemini AI): We send coordinates and adventure parameters to Google Maps (geocoding/maps) and Google Gemini to generate routes, narration, character and companion cards, and milestone badge images.
• Open-Meteo (Weather): We send approximate coordinates to Open-Meteo to retrieve current weather and local time for narrative flavour. No account or personal identifier is sent.
• Stripe (Payments): We use Stripe, Inc. to process subscription and one-time payments. When you make a purchase, your payment details are submitted directly to Stripe and processed under Stripe's own terms and privacy policy. We receive limited billing metadata (such as your subscription status, tier, amount, currency, and a customer identifier) but never your full card details.
• Legal Requirements: When required by law or to protect rights and safety
• Business Transfers: In the event of a merger, acquisition, or sale of assets

All third-party providers are contractually obligated to protect your data and use it only for providing their services to us.

For details on how Stripe handles your payment information, please review Stripe's privacy policy at stripe.com/privacy.

We implement industry-standard security measures to protect your data:

• Encrypted data transmission (HTTPS/TLS)
• Secure password storage with industry-standard hashing
• Regular security audits and updates
• Restricted access to personal data on a need-to-know basis

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

You have the right to:

• Access your personal data at any time through your Profile
• Update or correct your account information
• Delete your account and associated data
• Revoke location permission (this will limit Service functionality)
• Opt out of non-essential communications
• Request a copy of your data in a portable format

Account Deletion

You can permanently delete your account at any time through your Profile page by clicking the "Delete My Account" button. When you delete your account, the following data is permanently removed from our servers:

• Your profile and account information (email, name, user ID)
• All characters and their stats, levels, and XP
• Adventure history, completed challenges, and progress
• Skills, achievements, and unlocked abilities
• Party memberships and associated chat history
• Any uploaded images or custom content
• Location data and waypoint check-ins
• Device and usage analytics tied to your account

Important Notes:

• Account deletion is permanent and irreversible
• Deletion occurs immediately upon confirmation
• You cannot recover your data after deletion
• Some anonymized data may be retained for legal compliance or security purposes
• Backup copies may persist in our systems for up to 30 days before being purged

To exercise these rights, use the in-app settings or contact us at privacy@rollroam.com

We use essential cookies to maintain your session and preferences. For details, see our Cookies Policy.

Roll & Roam is intended for users 18 years of age and older. We do not knowingly collect data from anyone under 18 years of age. If you are under 18, you may not use this Service.

If you believe we have collected data from someone under 18, please contact us immediately at privacy@rollroam.com and we will promptly delete such information.

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of the Service after changes constitutes acceptance of the updated policy.