Rovvy Privacy Policy

Last updated June 19, 2026 · Applies to the Rovvy TestFlight beta

Rovvy is a private planning app for small groups of friends. This policy describes exactly what the beta stores and how it is used. Rovvy does not sell personal data, does not show ads, and does not share your data with third parties for marketing.

What Rovvy stores

Account: your email and/or phone number, username, display name, birthday, optional profile photo, and a salted password hash. Passwords are never stored or logged in plain text.
Friends: who you are connected to and pending friend requests.
Private friend labels: close-friend markings and per-friend visibility settings. These are visible only to you — never to the labeled friend.
General area: a city or town you enter or identify with the optional "Use my current city" button. That button requests location access only while the app is open, reverse-geocodes on the phone, and sends the city/town plus coordinates rounded to roughly a city-scale area for distance matching. Rovvy does not store an address or continuous location history, does not use background location in this beta, and never shows coordinates or an exact spot to friends.
Status and intentions: what you say you're open to, your availability, and the visibility you chose for it.
Presence: short-lived active/typing signals such as whether you are currently in the app or typing in a plan chat. These are shown only to accepted friends or people sharing the relevant plan or chat.
Plans, invitations, calendar, and chat: plans you create or are invited to, your responses, future city/town entries, direct messages with accepted friends, and messages in temporary plan chats.
Crews: reusable friend groups you create as invite shortcuts or simple recurring groups. Only you see your saved crew list in this beta.
Photos: photos you add to a plan's shared memory album. They are stored on Rovvy's server and are visible only to the memory's attendees.
Apple Calendar: if you choose Add to Apple Calendar, Rovvy writes a one-way copy of that entry to a writable calendar on your device. Rovvy does not read or upload your other Apple Calendar events.
Notifications: a device push token (Expo Push Service), your notification preferences, and a log of notification events sent to you.

How it is used

Only to run the app: showing your status to the friends you allow, delivering invites and chat, and sending the push notifications you've enabled. Visibility rules (ghost mode, close-friends-only, per-friend settings) are enforced on the server.

Third parties

Push notifications are delivered through Expo's Push Service. The backend and your data are hosted on Render. No analytics, advertising, or tracking SDKs are used.

Retention and deletion

Data is kept while your account exists. Deleting your account in Profile → Delete Account immediately: signs out all sessions; deletes your email/phone/username/password record; deletes your statuses, friend connections and requests, crews, push tokens, notification history, and notification preferences; deletes every photo you uploaded; and cancels plans you created. Plans and chats shared with other people are kept for them, but your name is replaced with "Deleted user". Deletion is immediate and not reversible. Your email/username are freed and can be used to sign up fresh later.

Children

Rovvy is not intended for children under 13. Birthday is required at signup so Rovvy can block under-13 accounts and hide alcohol-related activity options until a user is 21.

Age and alcohol-related activities

Rovvy stores your birthday to enforce the 13+ minimum age and to hide alcohol-related activity options, currently "Drinks", until you are 21. Users are responsible for following local laws.

Beta notice

This is pre-release software. Data may be reset between beta builds. Don't store anything in Rovvy you can't afford to lose.

Contact

Questions or requests: support@ian-hayes.com