Privacy Policy

Effective date: 25 September 2026

Who we are

Romio is an AI conversation service at https://romio.app, based in the Netherlands. Contact us about privacy at romio@info.app.

Information we process

• Account information: your account identifier, email address, display name, and basic profile information supplied when you sign in with Google or create an email account. Email authentication is handled by our authentication service provider.

• WhatsApp imports: if you choose an exported ZIP, your browser extracts the chat text and sends that text to Romio for processing. Media and the ZIP itself are not uploaded. We send a limited sample to our AI provider to create a private character’s name, writing style, mannerisms, and ordinary preferences and interests. We store that derived profile, a small selection of filtered original message examples and supporting excerpts, import status and usage information. We do not retain the full imported transcript. Filtering is intended to exclude identifying and sensitive information. You can remove this stored data by deleting your account in Settings. Import abuse controls temporarily store a hashed network identifier; raw IP addresses are not stored in these import counters.

• Conversations: messages you send, generated replies, timestamps, conversation summaries, and memories used to personalize later conversations with each character.

• Service information: message allowance usage, request identifiers, subscription status, and technical information processed by our hosting and authentication providers, which may include IP addresses and browser information.

• Billing information: Customer and subscription identifiers, payment status, and billing dates. Our payment processor handles payment details through its checkout and billing portal; our application does not collect full card numbers in its own forms.

• Information you voluntarily send to support.

• Product analytics: page and screen views, onboarding progress, button interactions, installation and notification setup steps, message counts, feedback submissions, and subscription conversion events. If you choose to submit feedback, we send your 1–5 star rating and optional comment (up to 300 characters) as an analytics event. Our analytics service provider processes these events in its US data region using an anonymous browser identifier and, after sign-in, your account identifier. We attach your signed-in email address to your analytics user profile. Our analytics service provider estimates your country, region, and city from your IP address and discards the IP address before storing the analytics data. We do not automatically include your chat text, entered name, password, or attraction preference in these analytics events, and do not enable session replay.

• Traffic source analytics: broad categories such as organic search, advertising, referrals, or direct visits, and a limited source label such as Google or Bing. We classify this information in your browser and keep the category briefly in tab storage to connect arrivals with signups and subscriptions. We do not store or send full referring URLs, search terms, campaign names, advertising click identifiers, or authentication callback values in these analytics events.

How information is used

We use information to authenticate users, provide and personalize AI conversations, retain chat history, moderate content, enforce usage limits, process subscriptions, respond to support requests, and protect the service against misuse.

Google authentication is used for sign-in and basic profile information. Apple authentication is planned but is not yet available. The current app does not request access to your email messages, cloud files, or calendar events.

Service providers and disclosures

We use service providers for authentication, database storage, application hosting, analytics, and payment processing, and AI service providers for generating replies, moderation, summaries, and memories. Relevant chat content and conversation context are sent to these AI service providers to provide these features. These providers process information needed for their functions under applicable arrangements.

We may disclose information when required by law, to protect users and the service, or in connection with a business transfer subject to applicable protections.

Storage on your device

Our analytics service provider uses browser storage to connect analytics events across visits. Product analytics helps us understand onboarding drop-off, feature use, and subscription conversion.

Romio uses browser storage to keep you signed in, cache recent conversations and subscription information, remember drafts and preferences, and remember dismissal of the Home Screen installation suggestion. Signing in through Google also involves Google's own authentication technologies.

Retention and deletion

Your account and chat history remain available until deleted, for as long as your account is active or needed to provide the service. You can request account deletion through Settings → Account → Delete account. The application deletes the authentication account and associated application records and cancels active subscriptions. Our payment processor may retain transaction records separately; backups, operational logs, and legally required records may have different retention periods.

Support correspondence and operational records are retained for as long as needed to resolve requests, protect the service, meet legal obligations, or resolve disputes. Retention depends on the record type, its purpose, and applicable legal requirements. Deletion from provider backups follows their backup lifecycle. Contact us for information about a particular record.

Security and international processing

We use HTTPS and account access controls. Conversations are not end-to-end encrypted; authorized administrators and relevant service providers may access information as needed to operate the service. No system can guarantee absolute security. Our providers may process information outside your country.

Your choices and rights

You can edit your display name, manage your subscription, sign out, and delete your account through Settings. You may also revoke Romio's Google access through your Google Account; this does not itself delete your Romio account. Contact romio@info.app about access, correction, export, deletion, objection, or other rights available under the law applicable to you.

Where the GDPR applies, we rely on performance of our contract to provide the requested service, legitimate interests to secure and support the service, legal obligations for required records, and consent where required. You can withdraw consent without affecting earlier lawful processing. You may complain to the Dutch data protection authority or your local supervisory authority.

Children and changes

Romio is intended for users aged 13 and older. Children under 13 must not use the service. Where applicable law requires parental permission for a minor’s use or processing of their data, that permission is required. Contact us if you believe a child has provided data contrary to these requirements.

We will publish changes to this policy here and provide additional notice where required. Contact romio@info.app with questions.