Privacy Policy

Last updated: May 20, 2026

That's My Roam ("the App") is developed and operated by the App developer ("we", "us", or "our"). This Privacy Policy explains how we collect, use, and protect your information.

1. Information We Collect

Data collected on-device (never transmitted to our servers):

• Phone State & SIM – On Android, we use the READ_PHONE_STATE permission to access your device's telephony features. On iOS, equivalent information is read via CoreTelephony APIs. This allows us to identify your SIM operator, detect your home network, and determine your current roaming status. This information is processed locally to estimate your roaming costs. On Android, this permission may also be used in the background (via a foreground service) to provide real-time roaming alerts and update your status in the background.
• Data usage statistics – On Android we access the UsageStats API to display per-app data consumption; on iOS we read approximate device-wide network counters via getifaddrs(). This data stays on your device.

Data transmitted to our server:

• Country/operator queries – When you use features like SIM suggestions, trip plans, visa requirements, vaccination recommendations, climate averages, or health-insurance reciprocity, the relevant country ISO codes (home country, destination country, and optionally your passport country if set) are sent to our API. No personal identifiers are included.
• Unknown-carrier reports – When your SIM operator isn't yet covered by our roaming-rules database, the app sends your carrier name, home country code, and destination country code so we can prioritise adding coverage. This is aggregated server-side as a count per (carrier, home, destination) triple. No device identifiers, IP addresses, or timestamps per submission are stored.
• Affiliate redirect clicks – When you tap "Visit" or "Get a quote" on a VPN, eSIM, or travel-insurance provider, your tap is recorded as a click count for that provider so we can monitor partnership health. The redirect endpoint transiently sees your IP address and User-Agent at request time so we can build a properly-tracked outbound URL, but these values are not persisted to our database — only the per-provider count is. See "Affiliate Disclosure" below.
• Community speed reports (opt-in only) – If you choose to participate in crowdsourced speed reporting, the following anonymous data is submitted when you are roaming: your carrier name, home country, roaming destination country, measured download/upload speeds, signal type (4G/5G/etc.), app version, and timestamp. No device identifiers, location coordinates, or personal information are collected. You can withdraw consent at any time in Settings.
• Standard request metadata – Like any web service, our server transiently sees your IP address and User-Agent on every request for the purposes of routing, abuse prevention, and rate-limiting. This metadata is not associated with any account (we don't have user accounts) and is not retained by us beyond what our hosting provider keeps in standard infrastructure logs under their default retention policy.

Third-party services:

• Google AdMob – We display ads via Google's Mobile Ads SDK. Google may collect device identifiers, IP address, and ad interaction data. See Google's Privacy Policy.
• Google Play Billing / Apple StoreKit – Purchase data is handled entirely by Google Play (Android) or Apple (iOS). We only receive a purchase token confirming your purchase status.
• Open-Meteo – Our climate-averages feature queries the free Open-Meteo climate API using the destination country's capital coordinates (not your location). The request is made server-to-server, so Open-Meteo does not see your IP or any identifier — they only see our server contacting them.

2. How We Use Information

• To provide roaming detection, cost estimation, and SIM suggestions.
• To display relevant advertisements (free tier only).
• To verify in-app purchase status.
• To provide VPN, eSIM, and travel insurance provider recommendations (see Affiliate Disclosure below).
• To aggregate anonymised community speed reports so Pro users can see real-world roaming performance (opt-in only).

3. Affiliate Disclosure

The App recommends third-party VPN services, eSIM/SIM providers (Airalo, Holafly, Nomad, and others), and travel insurance providers (currently SafetyWing, Genki, and Insured Nomads). We may earn a commission if you sign up or purchase through links in the App. This does not affect the price you pay. Our recommendations are based on objective criteria including coverage, price, and reliability. Affiliate relationships do not influence which providers are shown or their ranking order.

For travel insurance specifically: we are not an insurance broker. Any insurance policy is a contract between you and the underwriter; the App does not assess your eligibility, recommend specific coverage levels, or process claims. Review the provider's policy wording and your eligibility before purchase, and check whether you already have cover through a premium bank account, credit card, or annual policy.

4. Data Sharing

We do not sell, rent, or share your personal information with third parties, except as required by law or as described above regarding Google services.

Community speed reports are stored on our server in aggregated, anonymised form. Individual submissions are not shared publicly; only aggregated statistics (average speed per carrier/country) are surfaced to users.

5. Data Retention

All on-device usage data is stored locally and is deleted when you uninstall the App. Our server does not store any per-user identifying data. Community speed reports are retained in anonymised aggregate form and may be deleted upon request.

6. Security

We use HTTPS (TLS) with standard certificate validation against the device's trust store for all network communication between the app and our servers. On-device data is stored in the app's private sandbox, protected by the platform's security model (Android app sandbox; iOS Data Protection / Keychain).

7. Children's Privacy

The App is not directed at children under 13. We do not knowingly collect information from children.

8. Your Rights

Since we don't collect personal data on our servers, there is generally nothing to delete or export. For community speed reports, you may request deletion by contacting us. You can revoke permissions or uninstall the App at any time.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted at this URL.

10. Contact Us

If you have questions about this Privacy Policy, contact us at: acapps@carrollhomeuk.com