Privacy notice

SudoBrain Inc · Updated 30 September 2026

Roamnote is a personal location diary for adults. This notice explains the data used by the Android app and web viewer.

What you choose to record

After you start recording, the Android app records precise location in the background, observation times, accuracy and available movement information. It derives routes, visits and estimates. Pause and Stop end location requests. Permission denial, phone restrictions or weak GPS can interrupt recording.

Cloud accounts use a verified email address or Google sign-in, account and device identifiers, and session information. Notes, tags, place labels and compressed photos are saved when you add them. Roamnote removes embedded location metadata from its compressed photo copy and leaves your original photo unchanged.

Where data goes

Cloud diaries sync to Supabase using authenticated connections and account-isolated access rules. Local-only diaries keep history on the phone and do not automatically merge with a cloud account. Google supports sign-in, location and movement services. Resend delivers account emails. Maps use OpenFreeMap with OpenStreetMap data; tile requests reveal the map area and network address to that provider. Optional Android address lookup sends the selected coordinates to the phone's geocoding provider.

Only sharing you explicitly enable makes selected locations or trips available to invited people. Sharing expires and can be revoked; offline devices may show previously received data until they reconnect. Optional webhooks and exports send data to destinations you choose. Normal cloud storage is service-managed encryption, not end-to-end encryption. Encrypted portable backups use your passphrase, which cannot be recovered if lost.

Diagnostics

Roamnote has no advertising or usage analytics. Optional sanitized crash reports are off by default. Requested pilot diagnostics stay on the phone for up to three days, use at most 2 MiB, and contain operational events without coordinates, account identifiers or credentials. You can disable and clear them in Diagnostics.

Retention and deletion

Cloud history has no automatic expiry unless you enable retention or delete it. Trash is recoverable for seven days unless permanently deleted sooner. Original imported history is protected from automatic retention. Synced phone cache may be removed to save space; pending uploads are retained within available storage. Minimal deletion markers prevent removed records returning through sync.

Account deletion removes the account and its owned cloud diary data and revokes online access. Offline copies can only be cleared when that device runs and reconnects. Copies you exported, backed up or gave to another person remain under your or their control. Roamnote does not promise a recoverable cloud backup; keep an encrypted export if you need an independent copy.

Your controls and contact

You can review permissions, stop recording, change sharing, export history, delete history or delete your account. SudoBrain Inc provides Roamnote. Contact support-roamnote@sudobrain.com about privacy or data access. See the account-deletion page for a request outside the app.