Datenschutzerklärung

Introduction

Welcome to Roastrip. We are committed to protecting your privacy and handling your personal data transparently and securely. This notice describes how we collect, use, store, and share your information, in compliance with the General Data Protection Regulation (GDPR).

1. Data We Collect

To provide and improve our application, Roastrip collects the following categories of data:

Account and Profile Information: First name, last name, date of birth, email (provided via registration or Social Login), and the nickname and emoji chosen by the user.
Game Data (User Generated Content): Votes, written justifications, answers to the evening poll, rooms you take part in, and interactions within the game.
Shared Expenses: If your group uses a room’s expense feature, we store the entries you add — description, amount, who paid and how it was split — along with the nicknames of the people involved. In the House we likewise store the month’s expenses, recurring expenses and the cleaning rota.
Receipt photos: If you use receipt scanning, the photo is sent to our AI provider (Google Gemini) to extract the amount, description and receipt lines; scanning on its own does not store it. If you attach the photo to an expense (a Roastrip Plus and PRO feature; after a scan the app suggests it, and you can remove it before saving), the photo is stored on Google Firebase and every participant in the room can see it, like the expense.
Exchange rates for foreign-currency expenses: If you record an expense in a currency other than the room’s, the app asks for the exchange rate: the European Central Bank rate from the public Frankfurter service (frankfurter.dev) when both currencies are ECB reference currencies, otherwise the rate from fawazahmed0’s Exchange API, a public list of rates served by jsDelivr (cdn.jsdelivr.net) and, if that does not respond, by Cloudflare Pages (currency-api.pages.dev). In both cases the app sends only the currencies and the date: no personal data and no room content. As with any internet request, the service sees the device’s IP address. The original amount and the rate used are kept on the expense.
How you get paid (optional): If you like, you can add the PayPal.me username, the phone number you use on Satispay and/or your IBAN with the account holder’s name, so other participants can pay you in one tap or by bank transfer (the app prepares a QR code that banking apps can read; on screen the IBAN is partly hidden). They stay in your profile and are copied to the rooms with expenses you belong to, where only that room’s participants can see them. You can remove them at any time from your profile, and they disappear from every room. They are also removed when you leave a room and when you delete your account. Roastrip does not process payments: the app opens PayPal or shows the number, and the payment happens in the provider’s app.
Tailored suggestions for comments (optional): If you tap “✨ Tailored” on the voting screen, the app asks Gemini (Google) for three sentence starters for your comment, sending only your friend’s nickname and a few numbers: the score you are giving, the score you gave them in the previous round, the average score they received (if at least three) and how many expenses they paid recently. The text of comments, personal notes or expenses is never sent. The request is made only when you tap the pill; the suggestions received stay only on your device, for about a day, so they do not have to be requested again.
Clipboard, only to find an invite: If you follow an invite link and don’t have the app yet, on iPhone the invite page copies the room code to the clipboard, so it can be found again after installation. On first launch the app only checks whether the clipboard contains text, without reading it; it reads the content only when you tap “Paste” (in the “Here from an invite?” panel or next to the code field). From the pasted text it keeps only the room code: everything else is discarded immediately, without being stored or sent. On Android the code comes instead from Google Play, in the install referrer, without using the clipboard.
Dictation for comments and notes (optional): If you tap “Dictate” in a vote comment or a private note, the app uses the microphone only while you record and sends the audio to Gemini (Google), together with the nicknames in the room, to transcribe it and tidy up punctuation, words and sentence order. The audio is not kept: on the device the file is deleted as soon as it has been read, and it is not saved on our servers. The text that comes back is added to the field for you to review: it is saved only when you send the vote or save the note, like typed text. Dictation only appears if you have agreed to the use of AI. A dictated private note stays private: its text does not go into the Wrapped.
Moderation and Safety Data: Information relating to blocked or reported users, in order to keep the environment safe and comply with store guidelines.
Technical and Notification Data: Anonymous notification token for real-time alerts, and basic device information needed to optimize the app.
Usage statistics: We record some app events, such as opening a purchase screen, a purchase, creating an adventure or sending an invite, to understand which features are used and improve them. Each event contains the event name, your account’s technical identifier, the platform (iOS or Android), the time and, where relevant, the adventure and a few details about the action (for example which offer you saw). It contains no name, email, text, votes or expense amounts, and it is not shared with third parties.
Error reports: If the app crashes or hits an error, it sends a technical report to Sentry, with servers in the European Union: device type and system, app version, the error trace and the app’s last technical actions (for example the screens opened). The report is not linked to your account.
In-app purchases (Adventure Pass, Roastrip Plus and Roastrip PRO): If you make a purchase, we receive — through our provider RevenueCat — the product purchased, the status of the purchase or subscription (active, expired, or cancelled), the renewal or expiry dates and the transaction identifier. On your profile we store whether Roastrip Plus is active and until when. When you activate an Adventure Pass, the room keeps the fact that the Pass is active, who activated it and when, and the transaction used is marked so that it counts for a single adventure. We never receive, view, or store your credit card details or payment method: these remain managed exclusively by the Apple App Store or Google Play.
Marketing Consent (optional): If you choose to enable “Offers and news via email” at sign-up or from the app’s Settings, we record this preference in order to send you promotional communications. You can revoke it at any time.

2. Processing via Artificial Intelligence (Google Gemini)

Roastrip uses Artificial Intelligence to generate the vacation’s “Final Verdict” (Wrapped).

Sharing of text: The justifications and comments entered in rooms are securely sent to Google Gemini’s APIs solely for the automated generation of the verdict. With dictation, Gemini also receives the audio you record, only to transcribe it: it is not kept.
No sensitive data, please: Since free-text entries are processed by an AI, we explicitly ask users NOT to enter sensitive personal data (e.g. information about health, political, religious, or sexual orientation, banking details) in vote comments and justifications. Roastrip accepts no responsibility for users voluntarily entering such data.

We never sell your data to third parties for advertising purposes. We share only the data strictly necessary with our service providers (Data Processors):

Google Firebase: For infrastructure hosting, secure user authentication, and cloud storage of the database and of the receipt photos attached to expenses.
Google Cloud / Gemini API: For processing in-game text and generating the Wrapped, reading receipts, comment suggestions and transcribing dictation (data sent via API is not used by Google to train its public models).
RevenueCat: To manage your purchases (Adventure Pass, Roastrip Plus and Roastrip PRO) across all your devices. RevenueCat receives a user identifier and purchase information (product, renewal/expiry date), but has no access to your payment card data.
Sentry: To receive technical reports about app errors and crashes, with servers in the European Union.
Apple App Store / Google Play: In-app purchases (Adventure Pass, Roastrip Plus and Roastrip PRO) are processed entirely by Apple or Google, depending on your device. Roastrip never receives or stores payment data (card number, IBAN, Apple/Google account credentials): the transaction takes place between you and the store, under Apple’s and Google’s respective terms and privacy policies.
Brevo: If you have enabled the “Offers and news via email” consent, we share with Brevo (an EU-based email marketing provider) only your first name, last name, and email address, solely to send you promotional communications. No other data is shared with this provider.

4. Purpose of Processing

Data is used exclusively to:

Manage voting dynamics and the real-time progression of days within rooms.
Generate the humorous end-of-vacation “Wrapped” via artificial intelligence.
Allow other participants in your room to identify you.
Send push notifications (e.g. reminders to vote).
Keep the app safe, letting users report or hide inappropriate content.
Keep the accounts of the group’s and the House’s expenses and, if you have added them, show the other participants how to pay you.
Manage in-app purchases and verify, in real time, access to Adventure Pass, Roastrip Plus and Roastrip PRO features, including restoring purchases on a new device.
Understand which features are used and fix errors, through usage statistics and error reports.
Send you promotional communications and news about Roastrip via email, only if you have given your explicit, revocable-at-any-time consent.

5. Data Retention

We keep your data only for as long as necessary to provide the Roastrip service:

Your profile data and room history remain active for as long as you keep your account.
Data relating to reports of community rule violations is kept for as long as needed to complete moderation checks.
A room’s expense entries are a shared record belonging to the whole group: they stay visible to every participant and are not deleted when someone leaves the room, because removing them would change everyone else’s balances. An inactive room is deleted automatically along with its expenses, except while balances are still outstanding.
A receipt photo attached to an expense is kept for as long as the expense refers to it: it is deleted when a participant removes or replaces it, when the expense is deleted and when the room is deleted, including automatically.
When you delete your account, your personal data is permanently removed. The exceptions are your nickname, which stays next to the expense entries of any group where you split costs, and the receipt photos you attached to those expenses: those rows belong to the whole group and removing them would change other people’s balances. A photo can be removed from its expense at any time; write to us if you want your nickname gone too.
Data about your purchases (status, product purchased, renewal dates) is kept by RevenueCat for the entire duration of the subscription and for as long as needed to handle any support or refund requests from Apple/Google.
Usage statistics events are linked only to your account’s technical identifier, never to your name or email: when you delete your account, that identifier no longer corresponds to anyone. Error reports stay on Sentry for the retention period of the service, then they are deleted.

Under the GDPR, you have the right to access, rectify, export, or delete your data at any time. Roastrip gives you direct tools to manage your privacy:

Account Deletion (Right to Erasure): You can delete your account and all associated data (including votes and room participations) directly from the “Your Profile/Settings” section in the app. Deletion is final and removes the data from our Firebase databases irreversibly.
Notification Management: You can revoke push notification permission at any time from your device settings.
Withdrawing Marketing Consent: You can enable or disable promotional emails at any time via the “Offers and news via email” toggle in the app’s Settings section: turning it off excludes you from future sends.

7. The roastrip.it Website

The website introduces Roastrip and lets you download the app. It does not ask you to sign up and has no accounts.

Invite preview: If you open an invite link on the website, the page asks Roastrip for a preview of the room using the code in the link. The preview shows only the room’s name, whether it is an adventure or a home, whether the group plays, splits expenses or both, the planned days, the nickname and emoji of whoever created it, the emoji of up to eight participants and how many people are in it. It never shows votes, comments, notes, expenses or the other participants’ nicknames, and anyone with the link can see it, just as with the room code. To stop people from trying codes at random, the service counts for a few minutes the requests coming from the same IP address: the count stays in memory and the address is not stored.
Usage measurement (Google Analytics): The website uses Google Analytics, a Google service, to understand which pages are visited and how many people download the app. Until you choose, or if you choose “Essentials only” in the cookie banner, Google Analytics only receives cookieless signals, which do not recognise your device from one visit to the next. If you tap “Accept”, Google Analytics uses its cookies (_ga) to recognise later visits. In both cases we also measure some actions on the website, such as tapping a button to download the app, a QR code appearing or using the calculator, without names, amounts or anything else you type. You can change your choice at any time from the “Cookies” link at the bottom of every page.
Preferences saved in your browser: The website keeps your cookie choice and your preferred language in your browser (localStorage), so it doesn’t ask you on every visit. They stay on your device and are not sent to anyone.
The “Split expenses” calculator: The calculator works only in your browser: the names and amounts you type are not sent to Roastrip or to Google Analytics. The link you share carries the numbers after the # sign, a part of the address that browsers do not send to servers; when you open such a link, the page removes the numbers from the address before measurement starts. While the tab stays open the accounts stay in your browser (sessionStorage), and they disappear when you close it.
Store links: The buttons to download the app lead to the App Store and Google Play with parameters saying which part of the website you came from (for example “home-apertura” or “download”), with no personal data.
Hosting: Like any website, roastrip.it is served by a provider (Google Firebase Hosting) that sees your device’s IP address in order to answer its requests.