RoadMe Privacy Policy

1. General Provisions

1.1. This Privacy Policy (hereinafter referred to as the "Policy") establishes the procedures and conditions for collecting, using, storing, sharing, protecting, and deleting the personal data of users of the RoadMe digital travel service.

1.2. This Policy applies to the official website https://roadme.io, the blog, web application, mobile applications, and related digital features and services provided under the RoadMe brand (hereinafter collectively referred to as the "Service").

1.3. The terms "RoadMe," "we," "us," and "our" in this Policy refer to the entity responsible for providing the Service and processing users' personal data.

1.4. We are committed to ensuring transparent and secure processing of personal data, limiting such processing to predefined and legitimate purposes necessary for the operation, development, and protection of the Service.

1.5. When using certain RoadMe features, users may voluntarily provide specific information. Some information may also be processed automatically when users interact with the website or application.

1.6. Providing certain data is necessary for the operation of specific features. Users may choose not to provide optional information or permissions; however, certain Service features may become unavailable or function with limitations.

1.7. Reviewing this Policy does not, by itself, constitute consent to all possible types of personal data processing. Where consent is required for a particular processing activity, it will be requested separately.

1.8. This Policy is publicly available on the official RoadMe website. Additional information about data processing may be provided directly within the interfaces of specific features.

2. Definitions

2.1. Personal Data — any information relating to an identified or identifiable natural person, directly or indirectly.

2.2. User — an individual who visits the RoadMe website, uses the mobile or web application, or interacts with other features of the Service.

2.3. Processing of Personal Data — any operation or set of operations performed on personal data, including collection, recording, organization, storage, modification, retrieval, use, disclosure, anonymization, restriction, deletion, and destruction.

2.4. Geolocation Data — information about the geographical location of a user's device, including coordinates, location accuracy, and related technical parameters.

2.5. Third-Party Provider — an organization that provides RoadMe with technological, infrastructure, analytics, mapping, or other services.

2.6. Cookies — small pieces of data stored by a browser to ensure website functionality, save user preferences, and support other features.

2.7. Anonymization — the processing of information in a manner that makes it impossible to identify the individual to whom the data relates without additional information.

2.8. User Account — a personal account used for authentication and access to individualized RoadMe features.

3. Personal Data We Process

The categories of information processed depend on which RoadMe features the user chooses to use.

3.1. Account Information

When users register, authenticate, or use their accounts, we may process:

• Email address;
• Internal user identifier;
• Email verification information;
• Data required for authentication;
• Account settings;
• Registration date;
• User session information;
• Information necessary for account recovery and security.

If password-based authentication is used, passwords are stored using appropriate security mechanisms that prevent their storage in plain text.

3.2. Travel and Route Information

When users plan trips or use travel routes, we may process:

• Selected countries, cities, and destinations;
• Planned travel dates and trip duration;
• Selected tourist attractions and points of interest;
• Generated or user-selected routes;
• Routes saved as part of trips;
• The sequence in which attractions are visited;
• Distribution of routes across travel days;
• Planning parameters and user modifications;
• Other information required to display and save travel plans.

This information is used to provide features for creating, viewing, saving, and managing trips and routes.

3.3. User Preferences and Interests

To personalize recommendations, we may process:

• Selected categories of attractions;
• User interests;
• Preferences regarding travel formats;
• Desired walking duration;
• Preferred sightseeing pace;
• Other parameters voluntarily provided during trip planning.

This information is used to generate recommendations and routes that correspond to the user's selected interests and travel preferences.

3.4. Geolocation Data

When users access mapping and navigation features, we may process:

• Approximate or precise device location;
• Current geographical coordinates;
• A starting point selected by the user;
• Coordinates necessary for calculating and displaying routes;
• Distances to selected attractions;
• Information about nearby points of interest.

Detailed information about location data processing is provided in Section 4 of this Policy.

3.5. Technical Data

When users visit the website or use the application, we may process:

• IP address;
• Device type;
• Device model, where available;
• Operating system;
• Browser type and version;
• Interface language;
• Technical identifiers;
• Date and time of Service usage;
• Information about pages and screens viewed;
• Data concerning interactions with features;
• Error and crash information;
• Technical event logs;
• Performance data;
• Cookies and similar identifiers.

This information may be used to maintain Service functionality, diagnose technical issues, ensure security, and perform analytics.

3.6. Service Usage Data

To analyze how RoadMe operates, we may process information about:

• Visits to website pages and blog articles;
• Views of tourist attraction information;
• Use of search features;
• Interactions with maps;
• Selection and saving of routes;
• Use of trip-planning features;
• Navigation between sections;
• Interactions with buttons and other interface elements.

Analytics data is processed in accordance with applicable requirements and necessary permissions.

3.7. User Inquiries

When users contact customer support or submit feedback, we may process:

• Contact information;
• The content of the inquiry;
• Materials provided by the user;
• Information necessary to address the issue;
• Communication history related to the inquiry.

3.8. Payment Information

If paid features, subscriptions, or purchases are available, we may process:

• Information about purchased services;
• Payment status;
• Transaction identifiers;
• Transaction dates;
• Information necessary to provide paid features.

Payments may be processed by specialized payment service providers. The processing of information by such providers is also governed by their own privacy policies and terms of service.

4. Geolocation and Navigation

4.1. RoadMe uses location data to provide features related to city navigation, discovering attractions, planning sightseeing routes, and navigation.

4.2. Geolocation data may be used to:

• Display the user's current location on a map;
• Find nearby attractions;
• Determine distances to points of interest;
• Generate routes from the user's current location;
• Calculate the sequence of attraction visits;
• Guide users along a selected route;
• Provide other mapping features.

4.3. Location access is obtained through the standard permission mechanisms of the user's browser or operating system.

4.4. Users independently manage their location permissions and may restrict or revoke them at any time through their device settings.

4.5. If location access is not granted, features requiring the user's current location may be unavailable. Where supported, users may manually select a city or route starting point.

4.6. RoadMe uses current coordinates to perform requested mapping and navigation operations and does not maintain a permanent history of users' precise movements.

4.7. When a route is saved, geographical points selected by the user and other route parameters necessary for future viewing and use may be stored.

4.8. RoadMe uses Mapbox technologies for mapping and navigation. Depending on the components used, geographical and technical information necessary for displaying maps, searching for locations, and calculating routes may be transmitted to Mapbox.

4.9. Certain Mapbox mobile components may process location telemetry and technical device information to support and improve mapping technologies. Users are provided with an option to opt out of sharing optional Mapbox telemetry.

4.10. Opting out of telemetry does not necessarily prevent the processing of coordinates required to perform a navigation operation explicitly requested by the user.

4.11. RoadMe does not use users' precise geolocation data for advertising tracking or sell information about their movements.

4.12. If features involving continuous location tracking or background collection of location history are introduced in the future, the relevant conditions will be disclosed to users before such processing begins.

5. Purposes of Personal Data Processing

5.1. Providing Service Features

Data is used for user registration, authentication, account management, providing travel information, displaying maps, selecting routes, and planning trips.

5.2. Personalization

Information about interests and preferences is used to recommend attractions, generate routes, and adapt suggestions to individual travel parameters.

5.3. Navigation

Geolocation data is used to determine location, generate routes, find nearby attractions, and provide mapping functionality.

5.4. Saving User Information

Trip and route information is used to save, display, and enable future access to travel plans selected by users.

5.5. Security

Technical information is used to prevent unauthorized access, protect accounts, detect suspicious activity, and maintain Service security.

5.6. Service Improvement

Information about feature usage helps identify errors, improve the interface, analyze feature popularity, and enhance RoadMe's functionality.

5.7. Customer Support

Information provided in user inquiries is processed to address questions, resolve technical issues, and provide responses.

5.8. Notifications

Contact information may be used to send essential service-related communications concerning registration, account security, access recovery, and significant changes to the Service.

Advertising and marketing communications are sent only where the necessary consent has been obtained. Users may opt out of receiving such communications.

5.9. Fulfillment of Obligations

Personal data may also be processed to fulfill obligations to users, comply with applicable requirements, and protect legitimate interests where permitted.

6. Legal Bases for Processing

6.1. Personal data is processed on an appropriate legal basis corresponding to the specific purpose of processing.

6.2. Depending on the circumstances, such bases may include:

• Providing features requested by users and fulfilling the terms of use of RoadMe;
• User consent;
• Compliance with mandatory requirements;
• Ensuring security and other legitimate interests within applicable limitations;
• Other permitted legal bases.

6.3. Where processing is based on consent, users may withdraw that consent through the available mechanisms.

6.4. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal and does not prevent further processing where another appropriate legal basis exists.

6.5. Where separate permission is required for a particular type of processing, RoadMe requests it additionally.

6.6. We do not use personal data for purposes incompatible with the original purposes of collection without an appropriate legal basis.

7. Third-Party Services We Use

RoadMe uses third-party technologies to provide its features and ensure proper operation.

7.1. Mapbox

Mapbox is used to provide digital maps, geographical data, location searches, and route planning.

Depending on the features used, Mapbox may receive:

• IP addresses and technical request information;
• Device and software environment information;
• Geographical coordinates necessary to perform an operation;
• Route parameters;
• Mapping component usage data;
• Mobile SDK telemetry, where applicable.

Mapbox processes information it receives in accordance with its terms of service and privacy policy.

Mapbox Privacy Policy: https://www.mapbox.com/legal/privacy

7.2. Google Analytics

Google Analytics is used to analyze visits to the RoadMe website, blog, and other web sections where the relevant analytics tool is installed.

The information processed may include:

• Pages visited;
• Browser and device technical identifiers;
• Traffic source information;
• Interface interaction events;
• Technical device and connection characteristics;
• Approximate geographical information;
• Data about the duration and nature of website usage.

This information is used to analyze website traffic, evaluate content effectiveness, and improve the Service.

Google Analytics is not intended to receive passwords, private correspondence, payment card details, or contact information that directly identifies users through analytics events.

Google Privacy Policy: https://policies.google.com/privacy

7.3. Yandex Metrica

Yandex Metrica is used to analyze visits to the RoadMe website, blog, and other web sections where the relevant analytics counter is installed.

Depending on its configuration, the information processed may include:

• Pages visited;
• Traffic sources;
• Technical identifiers;
• Browser and device information;
• Approximate location inferred from technical data;
• Interface interaction events;
• Visit duration;
• Information about page scrolling and interactions with website elements.

If Session Replay (Webvisor), interaction maps, or form analytics are enabled, user actions on web pages may additionally be recorded and analyzed.

Such processing is used to evaluate interface usability, identify technical issues, and improve the quality of the Service.

RoadMe takes measures intended to prevent passwords, payment details, confidential form contents, and other information unnecessary for website usage analysis from being transmitted through analytics tools.

Yandex Privacy Policy: https://yandex.com/legal/confidential/

7.4. Other Service Providers

RoadMe may also use hosting providers, server infrastructure services, data storage providers, email delivery services, performance monitoring tools, and other technical services necessary for its operation.

Such providers are given access to information only to the extent necessary to perform the relevant tasks and where an appropriate basis exists.

When new third-party services are introduced that materially affect the processing of personal data, this Policy will be updated or users will receive an appropriate additional notice.

8. Cookies and Analytics Technologies

8.1. The RoadMe website may use cookies and similar technologies to ensure functionality, save preferences, and analyze the use of its web interface.

8.2. Depending on their purpose, the following categories may be used:

Essential Cookies. Used for authentication, maintaining user sessions, ensuring security, and supporting core website features.

Functional Cookies. Used to save user settings, interface language, and other preferences.

Analytics Cookies. Used to analyze website visits, traffic sources, interface interactions, and technical performance.

8.3. Google Analytics and Yandex Metrica, as described in Section 7, may be used for analytics purposes.

8.4. Where consent is required for the use of optional analytics technologies, such technologies are used only after the relevant consent has been obtained.

8.5. Users are provided with available mechanisms to manage their consent to optional tracking technologies.

8.6. Users may also manage cookies through their browser settings.

8.7. Restricting essential cookies may affect authentication and other website functionality.

8.8. RoadMe does not treat the mere act of visiting the website as unconditional consent to any form of analytics or advertising tracking.

8.9. Analytics data is used to evaluate the Service and should not contain information unrelated to the defined processing purposes.

9. Sharing Personal Data with Third Parties

9.1. RoadMe may share certain data with third-party providers where necessary to deliver Service features.

9.2. Such sharing may occur for the purposes of:

• Providing maps and navigation features;
• Operating server infrastructure;
• Storing data and maintaining backups;
• Delivering essential email communications;
• Conducting website analytics;
• Ensuring security;
• Providing technical support;
• Delivering other features requested by users.

9.3. The amount of information shared is limited to what is necessary for the relevant purpose.

9.4. When third-party organizations process personal data on our behalf, RoadMe takes measures intended to ensure appropriate protection of the information and compliance with agreed processing conditions.

9.5. Certain providers may independently determine specific purposes and conditions of data processing within their technologies. In such cases, their own privacy policies also apply.

9.6. RoadMe does not sell users' personal data to third parties.

9.7. Information may be disclosed to authorized authorities or other parties where necessary to comply with mandatory requirements, ensure security, or protect rights and legitimate interests.

9.8. Data sharing for marketing purposes requiring separate consent takes place only where such consent has been obtained.

10. International Data Transfers and Processing

10.1. RoadMe is a digital service that may be accessed by users from different regions.

10.2. Depending on the infrastructure used and the locations of third-party providers, certain personal data may be processed outside the user's region of residence.

10.3. International data processing and transfers are carried out where an appropriate legal basis exists and in compliance with applicable requirements.

10.4. Where necessary, RoadMe uses appropriate safeguards, contractual obligations, and organizational or technical measures intended to ensure adequate protection of information.

10.5. If a particular transfer requires additional notice, consent, or compliance with specific procedures, the relevant steps are taken before the transfer begins.

10.6. Users may request additional information about international transfers of their personal data through the available privacy contact channel.

11. Personal Data Retention Periods

11.1. RoadMe retains personal data only for as long as necessary to fulfill the stated purposes of processing, or for another period where an appropriate legal basis exists.

11.2. The following retention rules apply to different categories of data.

11.2.1. Account Information

Information necessary for account functionality is retained for the duration of the user's account.

After an account deletion request has been confirmed, personal data is deleted or anonymized within no more than 30 calendar days, unless applicable requirements establish a shorter period.

Certain information may be retained for longer only where a lawful basis for continued retention exists.

11.2.2. Saved Trips and Routes

Information about saved trips, selected routes, attractions, and user preferences is retained while the relevant features are being used.

When users delete specific information, it is removed from active storage systems in accordance with established procedures.

When an account is deleted, the associated personal trip and route data is deleted within the period specified in Section 11.2.1.

11.2.3. Geolocation Data

Current precise location data is used while performing the relevant mapping or navigation operation.

RoadMe does not maintain its own permanent history of users' precise movements.

When a route is saved, selected geographical points and parameters necessary for future use of that route may be retained.

The processing of geolocation data directly by Mapbox is also subject to that provider's terms and retention practices.

11.2.4. Technical Logs

Technical logs, error information, and security event records are generally retained for no more than 90 calendar days.

Certain information may be retained longer where necessary to investigate an incident, protect the Service, or comply with mandatory requirements.

11.2.5. Customer Support Inquiries

Information related to customer support inquiries may be retained for up to 12 months after the relevant inquiry has been resolved.

Longer retention may be permitted where there is a justified necessity or a mandatory requirement.

11.2.6. Google Analytics Data

A retention period of 14 months is configured for detailed user-level and event-level data in Google Analytics, subject to the available settings of the analytics service.

This setting applies to the relevant detailed data and does not necessarily determine how long aggregated statistical reports or all categories of information processed by Google remain available.

11.2.7. Yandex Metrica Data

Analytics information transmitted to Yandex Metrica is stored and processed in accordance with the settings of the connected analytics counter and the terms of the analytics service.

RoadMe uses available tools to manage the processing, restriction, and deletion of such data.

11.2.8. Backups

Backups are used to restore Service functionality and protect information against technical loss.

Personal data deleted from active systems may temporarily remain in backup copies.

Backups containing such information are deleted or replaced as part of the scheduled backup retention cycle within no more than 30 calendar days after the data is removed from active storage, unless continued retention is required on an appropriate basis.

Until final deletion, access to such data is restricted. It is not used for the regular provision of Service features.

11.3. Once the applicable retention period expires, data is deleted or anonymized unless another valid basis for retention exists.

11.4. Statistical information that has been properly anonymized and can no longer identify an individual may be retained for the purpose of analyzing and improving RoadMe.

11.5. Retention periods applied by third-party providers when they independently process information may differ and are governed by their own terms and applicable requirements.

12. Personal Data Security

12.1. RoadMe takes organizational and technical measures to protect personal data against unauthorized access, disclosure, modification, loss, and destruction.

12.2. Depending on the nature of the information and infrastructure, these measures may include:

• Access control and permission management;
• Authentication mechanisms;
• Secure data transmission;
• Restricted access to administrative tools;
• Server infrastructure protection;
• Data backups;
• Technical error monitoring;
• Information security event monitoring;
• Vulnerability identification and remediation;
• Restricted access for employees and contractors;
• Confidentiality requirements.

12.3. Access to personal data is granted only to individuals who require it to perform relevant tasks and only within the scope of their responsibilities.

12.4. We strive to maintain an appropriate level of protection, taking into account the nature of the information and existing technical risks.

12.5. No information storage or transmission system can guarantee absolute protection against every possible threat.

12.6. In the event of a security incident, RoadMe takes measures to limit its impact, address its causes, and fulfill any necessary notification obligations.

13. User Rights

13.1. Users may exercise their rights regarding personal data to the extent provided by applicable requirements.

13.2. Depending on the circumstances, users may have the right to:

• Receive information about the processing of their personal data;
• Request access to information about themselves;
• Request correction of inaccurate or outdated information;
• Request deletion of their data;
• Withdraw previously granted consent;
• Object to certain types of processing;
• Request restriction of processing where appropriate grounds exist;
• Request receipt or transfer of data in an accessible format, where such a right applies;
• Opt out of optional marketing communications;
• Manage location permissions;
• Submit inquiries and complaints concerning data processing;
• Exercise other applicable rights.

13.3. Certain requests may be fulfilled only partially or may be declined where there is a valid basis for continued retention or processing of specific information.

13.4. To prevent unauthorized disclosure, RoadMe may request verification of the user's identity or authority.

13.5. Requests are reviewed within the timeframes established by applicable requirements.

13.6. Users may also contact the relevant supervisory authority responsible for personal data protection where such a right is available.

14. Account and Data Deletion

14.1. Users may initiate the deletion of their RoadMe account directly within the application.

14.2. The account deletion feature is available in the account settings and provides a clear process for confirming the requested action.

14.3. Account deletion involves terminating access to personalized features and deleting personal data associated with the account where no valid basis for continued retention exists.

14.4. In particular, the following information is subject to deletion:

• Account information;
• Saved trips;
• Routes associated with the account;
• Personal settings;
• Preference information;
• Other data associated with the deleted account, unless a valid basis for retention exists.

14.5. Account deletion requests are completed within no more than 30 calendar days, unless a shorter period is required.

14.6. Certain information may be retained after account deletion where necessary to comply with mandatory requirements, resolve disputes, maintain security, or fulfill other permitted purposes.

14.7. Data contained in backups is deleted in accordance with the procedures described in Section 11 of this Policy.

14.8. Uninstalling the mobile application from a device does not automatically delete the user's account or the associated data stored on the Service's servers.

14.9. Once an account has been permanently deleted, restoring previously saved trips, routes, and personal settings may not be possible.

14.10. Users may also request the deletion of their account and associated data through a dedicated page or contact channel on the official RoadMe website.

14.11. Users experiencing technical difficulties may contact customer support for information about the account deletion process.

15. Automated Personalization and Recommendations

15.1. RoadMe may use automated algorithms to recommend attractions, generate routes, and prepare travel itineraries.

15.2. The following information may be considered during this process:

• Selected city;
• Trip duration;
• User interests and preferences;
• Tourist attraction categories;
• Geographical locations of attractions;
• Attraction visit parameters;
• Other planning settings.

15.3. Automated planning results are intended to assist users in organizing their trips.

15.4. Users retain the ability to independently select available routes, attractions, and planning parameters.

15.5. Automated recommendations are not intended to make decisions that produce legal or similarly significant effects concerning users.

15.6. Where a particular automated processing activity requires additional notification or a separate legal basis, those requirements are fulfilled before such processing takes place.

16. Minors' Personal Data

16.1. RoadMe is not specifically designed to collect personal data from children.

16.2. The use of certain features by minors may require permission from a parent or legal guardian.

16.3. Where parental or guardian permission or consent is required to process a minor's personal data, such processing must take place only where the necessary authorization exists.

16.4. If RoadMe becomes aware that a minor's data is being processed without the necessary legal basis, appropriate measures are taken to stop the processing and delete the data in accordance with applicable procedures.

16.5. Parents or legal guardians may submit inquiries concerning the processing of minors' data through the available contact channels.

17. Third-Party Websites and External Resources

17.1. RoadMe may contain links to third-party websites, official attraction websites, mapping platforms, and other external services.

17.2. When users access external resources, they interact with the relevant provider independently of RoadMe.

17.3. The processing of information by these resources may be governed by their own privacy policies and terms of use.

17.4. RoadMe does not determine all the conditions under which independent third-party resources process information after users follow external links.

17.5. Users are encouraged to review the privacy policies of external services before providing them with personal information.

18. Changes to This Policy

18.1. RoadMe may update this Policy to reflect changes in Service features, data processing practices, third-party providers, or applicable requirements.

18.2. The current version is published on the official RoadMe website with the date of the latest update.

18.3. Users will receive additional notice of material changes to personal data processing practices where required.

18.4. Where certain changes require separate consent, the new processing activity will begin only after the necessary consent has been obtained.

18.5. The updated Policy takes effect on the effective date specified in the published version.

19. Privacy Inquiries

19.1. Users may contact RoadMe regarding the collection, use, storage, sharing, correction, and deletion of their personal data.

19.2. Inquiries may be submitted through the customer support or privacy contact channels available on the official website or within the application.

19.3. Users are encouraged to describe the nature of their request and provide information sufficient to identify the relevant account or circumstances of data processing.

19.4. Identity verification may be required to protect information against disclosure to unauthorized individuals.

19.5. Requests are reviewed in accordance with applicable requirements and established procedures.

19.6. If a request cannot be fulfilled in whole or in part on permitted grounds, the user will receive an appropriate explanation.

20. Final Provisions

20.1. This Policy establishes the general principles and conditions governing the processing of RoadMe users' personal data.

20.2. Certain Service features may be accompanied by additional notices and data processing conditions.

20.3. Where additional information or compliance with specific mandatory requirements is necessary for particular users, data categories, or processing activities, the relevant information will be provided separately.

20.4. This Policy does not limit any user rights that cannot be restricted under applicable requirements.

20.5. The current version of this Policy is available on the official website: https://roadme.io.