Privacy policy

Updated October 24, 2026

Roamfolk helps families plan trips together: the itinerary, who’s coming, RSVPs, change notifications and where everyone is staying. This policy explains what information Roamfolk collects, how it’s used and shared, how long it’s kept and the choices you have.

It covers the Roamfolk mobile apps, the Roamfolk web app at https://app.roamfolk.app and the roamfolk.app website. “Roamfolk”, “we” and “us” mean the Roamfolk service and the developer who operates it, as named on Roamfolk’s App Store and Google Play listings.

Information you give us

Account. Roamfolk accounts are created with an email address: we email you a one-time code to sign in. You add your name and can add a phone number. You can also set a password. Our sign-in provider stores it only in a one-way hashed form that can’t be turned back into your password.

Trips. When you create or join a trip, you and the other members add the trip’s name, destination, dates and time zone; events with their times, places, links and notes; the people coming, which group each person is in and their RSVP answers; and each group’s lodging details, such as the place, unit, arrival and departure dates, door code, WiFi details and food notes. An organizer can also pin a link to a shared photo album hosted on another service.

Roamfolk records changes to the itinerary and who made them, so members can see what changed. It also records who set each RSVP, and changes to trip ownership and organizer roles.

Saved Groups. You can save Groups of people, such as your household, to add them to trips quickly. Your saved Groups are visible only to you.

Roamfolk doesn’t ask for access to your location, contacts, camera or photos. Destination and place suggestions come from a list built into the app, so what you type there isn’t sent to a search service.

People without accounts, including children

You can add family members who don’t have their own account, such as children or older relatives. You provide their name and, if you choose, an email address or phone number, and you decide which trips they’re on. Please add only the people and details the trip needs.

Roamfolk doesn’t email or text the people you add. If someone you added later joins with their own account, they can manage their own details and RSVPs. The person who added them and the trip’s organizers can still set RSVPs for them, always shown with “set by” attribution.

Roamfolk is not directed at children. Children can appear in a trip as people added by a family member, but accounts are meant for adults. If you believe a child has created an account, contact us and we’ll help remove it.

Information stored as you use Roamfolk

Roamfolk stores your notification settings, for all trips and for each trip, and which trip changes you’ve already seen, so your Changes list matches across your devices. These records are private to your account.

New accounts are offered a short practice tutorial that uses made-up trips. Nothing you enter in it is saved. Roamfolk keeps only whether you completed or skipped it, when you finished and how long it took, so it isn’t shown again and we can tell whether it helps.

Like any internet service, the providers that run Roamfolk receive technical information with each request, such as your IP address and basic device or browser details.

How we use information

We use information to run Roamfolk: to sign you in, show each trip to the people on it, send change notifications, keep your offline copy up to date, answer support requests, and keep the service secure and working.

Roamfolk sends email only to sign you in and to verify account changes, such as a password reset. We don’t use your information for advertising, and we don’t sell it.

What other trip members can see

Everyone on a trip can see the trip plan, including event notes and links; the people on the trip, their groups and their RSVP answers with who set them; each group’s lodging name, area, unit, dates and food notes; the history of changes to the itinerary; and the shared album link.

People who share a trip with you can also see your name, the phone number on your profile if you add one, and any contact details saved on the records of people on that trip.

Food notes, such as allergies, are visible to everyone on the trip, so include only what you’re comfortable sharing.

Organizers (the trip owner and any co-organizers) can edit the trip, set RSVPs for anyone on it and see every group’s door code and WiFi details.

Door codes and WiFi passwords

A group’s door code, WiFi network and WiFi password are shown only to members of that group who have accounts and to the trip’s organizers. Other members and guest viewers don’t see them, and they’re never included in notifications or diagnostic reports.

So you can get into your lodging without a connection, the app keeps a copy of the codes you’re allowed to see on your device, as described under Information saved on your device.

Guest viewers

An organizer can create a guest link that lets someone without an account view a read-only version of the trip in a web browser. Each link works once, and an unused link expires after 72 hours. Viewing access ends a week after the trip ends, or sooner if an organizer turns it off.

Guests can see the trip’s name, destination, dates and time zone; event titles, times, places and links; the names of people on the trip, their groups and RSVP answers; and each group’s general lodging area and arrival and departure dates. They can’t see event notes, lodging names or units, door codes, WiFi details, food notes, contact details or the shared album link.

Opening a guest link signs the browser in with an anonymous guest account that has no name or email. The browser keeps that sign-in so the guest can come back, but the trip details are held only in memory and aren’t saved for offline use. A guest can delete their guest account and viewing access at any time on the Delete account page at https://app.roamfolk.app/delete-account.

Notifications

If you allow notifications, Roamfolk saves your device’s push token and platform with your account and sends change notifications through Expo’s push service, which passes them to Apple’s or Google’s notification service for delivery.

Notifications say only that something changed, for example “Trip plan updated”. They carry identifiers so the app can open the right screen and fetch the details after you open it. They don’t include names, event details or lodging information.

Roamfolk keeps delivery records to retry failed notifications and diagnose problems. They don’t show whether you read a notification, and finished records are deleted after about 30 days. You can turn notifications off in Roamfolk, for all trips or one trip at a time, or in your device settings.

Information saved on your device

Roamfolk keeps you signed in by saving your session on your device. So the app works offline, it also saves a copy of the trip information you can see, including the door codes and WiFi passwords you’re allowed to see. On the web, these copies are kept in your browser’s storage.

A saved copy older than 30 days is discarded, and the copy is cleared when you sign out or delete your account. It relies on your device’s own security, such as a screen lock, so keep your device locked and don’t stay signed in on a shared computer.

A device that’s offline can’t learn right away that your access was removed or an account was deleted, so a saved copy can remain until the device reconnects. Notifications already delivered, and copies people made outside Roamfolk, such as screenshots, can’t be recalled.

Diagnostics

Roamfolk keeps simple counts of app reads, writes and errors in memory on your device, along with the app version, build, environment and platform. The counts don’t identify you, your trips or your session. They reset when the app restarts or when you clear them in Help & feedback.

Automatic error reporting is off, so Roamfolk doesn’t send error reports to any diagnostics service. If we turn it on in a later version, we’ll update this policy first.

Contacting support

If you email support@roamfolk.app, we receive your email address, your message and anything you choose to include. Your own email service also handles the message.

Help & feedback in the app can show you a diagnostic summary to review and copy into your message. Nothing is attached automatically. Please leave out door codes, passwords, sign-in codes and invitation links.

Service providers

Roamfolk relies on these providers to operate:

Supabase runs sign-in and the database that stores accounts and trips.

Resend delivers sign-in and account emails.

Netlify hosts the roamfolk.app website and the Roamfolk web app.

Expo, Apple and Google deliver push notifications.

These providers may process information in countries other than the one you live in. Links you open from Roamfolk, such as a shared photo album or a place link on an event, take you to other services, which have their own privacy policies.

Sharing and selling

We don’t sell your information or share it for advertising. Roamfolk shows no ads, includes no third-party advertising or analytics tools, and doesn’t track you across other apps or websites.

Trip information is shared with the people on that trip as described above, and with our service providers so they can operate Roamfolk. We may also disclose information when the law requires it.

How long we keep information

Account information is kept while your account exists. Trip information stays available to the trip’s members, including after the trip ends, until the trip’s owner deletes the trip. Account deletion is described below.

Unused guest links expire after 72 hours, and guest viewing access ends a week after the trip ends. Finished notification delivery records are deleted after about 30 days. Saved copies on your device are discarded after 30 days or when you sign out. Diagnostic counts are kept only in memory.

Support emails stay in our support inbox for as long as they’re needed to help you, and you can ask us to delete them. Our service providers may keep their own operational logs and backups under their own retention practices.

Deleting your account

You can delete your account in Roamfolk’s settings, or without the app on the Delete account page at https://app.roamfolk.app/delete-account. For your security, you may be asked to confirm with a code sent to your email.

If you own trips, you choose for each one whether to hand it to another member who has an account or delete it. Deleting a trip deletes its plan, groups, lodging details, RSVPs and history for everyone on it.

Deleting your account removes your sign-in details, including any password; your profile and contact details; the person records linked to your account, with your place and RSVPs on trips; your saved Groups; people you added who aren’t used anywhere else; guest links you created; and your push registrations, notification settings and tutorial record.

Some shared information stays so other families’ trips keep working. People you added who are also on another trip or in someone else’s saved Group stay; if needed, an account that already shares them, such as a trip owner, becomes their caretaker. Trips you didn’t own, and trips you handed over, keep their plans, lodging details, RSVP answers and change history, with your name removed from the record of who made each change. Text in a trip, such as an event note, may still mention you. This shared information stays until the trip or person is deleted.

Your other devices lose access, and an offline device clears its saved copy when it reconnects and detects the deletion. A password saved in your device’s password manager stays there until you remove it.

Guests can delete their anonymous guest account and viewing access on the same page. A used guest link can’t be used again, so an organizer would need to send a new one.

Security

Roamfolk sends information over encrypted (HTTPS) connections. The database checks every request against your account, so you see only the trips, people and details you’re allowed to see. Passwords are stored only in hashed form, and sign-in codes work once and expire.

No service can promise perfect security. Keep your device locked, don’t share sign-in codes, and contact us if you think someone else has used your account.

Your choices and rights

In Roamfolk’s settings you can view and update your name, email address and phone number, set or change a password, turn notifications on or off, and delete your account at any time.

To ask for a copy of your information, to correct something you can’t change yourself, or to ask us to delete information, email support@roamfolk.app. Depending on where you live, you may have additional rights under local law, and we’ll respond to requests as that law requires.

Changes to this policy

When we change this policy, we’ll publish the new version here and in the app and update the date at the top.

Contact us

For questions or requests about privacy, email support@roamfolk.app. You can also reach us from Help & feedback in the app.