ROVE — Privacy Policy

Last updated: 31 August 2026. This policy covers the ROVE app and discover-rove.com.

1. What we collect

Data	Why
Account identifiers (a device-generated anonymous ID; email, if you add one)	To create and secure your account, and let you sign in again
Profile info you add (name, bio, avatar)	To show your public profile, if you choose to make one
Location (only while the app is in use, and only with your permission)	To show nearby quests and confirm when you've reached one
Photos you choose to upload	As proof of completing a quest, or for your profile
Quest activity (completions, badges, XP)	To track your progress and show your history
Business details (for business accounts): name, category, subscription status	To run your business listing and subscription
Basic device/usage analytics	To understand what's working and fix bugs

We don't ask for more than we need, and location/camera/photo access always goes through your device's own permission prompt — you can decline or revoke it at any time in Settings.

2. Third parties we use

ROVE is built on a small number of specialist providers, each of whom only sees the data needed to do their job:

Supabase — our database, authentication, and file storage provider. All app data (accounts, quests, photos) is held here.
Apple App Store / Google Play, via RevenueCat — process business subscription payments. We never see or store card details; RevenueCat and the app stores tell us only your subscription status.
GetYourGuide and LoveToVisit — affiliate booking partners linked from some quests. If you tap through and book, you're interacting directly with them under their own privacy terms, not ours.
Push notification delivery (Apple/Google's own notification services) — used for reminders like a business trial ending, if you've enabled notifications.
Google Ads — measures which of our ads lead people to create a Rove account on the website. See "Cookies" below.

We don't sell your personal data, and we don't share it with third parties for their own marketing purposes.

Cookies on discover-rove.com

The website asks before setting any advertising cookies. If you tap Accept on the cookie message, Google Ads sets cookies that tell us whether someone who clicked one of our ads went on to create an account. If you tap No thanks, no advertising cookies are set; Google receives only a basic, cookieless signal it can use to estimate ad results without identifying you.

Your choice is remembered on your device. Change your cookie choice.

3. How long we keep it

We keep your data for as long as your account is active. If you delete your account, we delete your personal data within a reasonable period, except where we're required to retain something for legal, tax, or fraud-prevention reasons (for example, business subscription records).

4. Your rights

If you're in the UK or EU, you have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing, under UK GDPR / EU GDPR. Most of this you can do yourself in the app (Settings → Edit Profile, or delete your account). For anything else, contact us using the details below.

5. Children

ROVE isn't directed at children under 13, and we don't knowingly collect personal data from them. If you believe a child has created an account, contact us and we'll remove it.

6. Security

We use industry-standard measures (encryption in transit, access-controlled databases) to protect your data, but no system is 100% secure — we can't guarantee absolute security of information transmitted to us.

7. Changes to this policy

We may update this policy from time to time. If we make a material change, we'll let you know in the app or by other reasonable means before it takes effect.

8. Contact

Questions about your data or this policy? Reach us at hello@discover-rove.com.