Privacy Policy
This document explains what data the Vroom app and the vroom.dilami.pro website collect, why, where it is stored and what you can do about it. It describes only what actually happens.
Who is responsible
Vroom is developed and distributed by Farid Mammadov, who is responsible for the processing described here. For any question about your data: web.pro.farid@gmail.com.
What the app collects
| Data | Source | Purpose |
|---|---|---|
| Name | You, at sign-up, or Apple or Google when you sign in with them | Addressing you, issuing bookings |
| Email address | At sign-up, or from Apple or Google | Signing in, sending the voucher |
| Phone number | Optional, in your profile or at checkout | Letting the partner reach you about a booking |
| User identifier | Generated automatically | Ties your account to bookings and messages |
| Bookings and favourites | Your activity in the app | Trips, vouchers, refunds |
| Messages and reviews | What you write to a partner, to support or in a review | Booking conversations, published reviews |
| Wallet transactions | Credits added and spent | Balance and history |
What we do not collect. The app never asks for location, contacts, photos, camera, microphone or calendar access. It has no advertising networks, no analytics SDKs and no crash reporters. The advertising identifier (IDFA) is never requested.
Card details never reach us. We neither buy data about you nor sell yours.
Signing in with Apple and Google
If you sign in with Apple or Google, they share your name and email address with us, and Google also shares a link to your profile photo. With Apple you can hide your real address, in which case we only see Apple's relay address. The passwords for those accounts never reach us.
What is stored on your device
The app keeps a session token on your device so you do not have to sign in on every launch, the contents of your cart and a note that you have completed onboarding. This is removed when you delete the app or sign out.
The vroom.dilami.pro website
The website uses no cookies for advertising or analytics and loads no third-party scripts. Fonts and images are served from the same domain.
The website is hosted on Vercel. Like any web server, it receives your IP address and browser details with each request and keeps them in technical logs for a limited time. We use these logs only to run and protect the site.
The only thing stored in your browser is a note that you have read the cookie notice. See the Cookie Policy.
If you email us, we receive your address and your message and use them to reply.
Where data is stored
App data is stored in a Supabase (PostgreSQL) database acting as our processor. Access is enforced with row-level security: you see only your own bookings, wallet and conversations, and a partner sees only bookings for their own listings.
Supabase and Vercel servers may be located outside your country. Data in transit to them is encrypted.
Who we share data with
- The partner for your booking: your name, dates, guest count and phone number if you gave one. Without this the partner cannot hand over the keys or meet you.
- Infrastructure providers: Supabase (database and sign-in) and Vercel (website hosting).
- Apple and Google: only if you chose to sign in with them.
- Authorities: only where the law requires it.
We share nothing with advertisers or data brokers and sell nothing.
Legal basis
- To carry out a booking you made and run your account: performance of a contract with you.
- To answer your messages and protect the service from abuse: our legitimate interest.
- Where the law requires it, for example for accounting.
How long we keep data
For as long as your account exists. When you delete your account, your profile, favourites, conversations, credit and collections are removed at once. Completed bookings stay with the partner in anonymised form, with “Deleted user” in place of your name. Reviews stay on the listings, also without your name.
We keep support emails for as long as we need them to resolve your question.
Your rights
- obtain a copy of your data;
- correct inaccurate data, some of it directly in Profile;
- delete your account and its data: Profile, Delete account, see the dedicated page;
- object to or restrict processing;
- withdraw consent where processing is based on it;
- complain to the data protection authority where you live.
To exercise any of these rights, write to web.pro.farid@gmail.com. We reply within 30 days.
Children
Vroom is not directed at children under 13 and we do not knowingly collect their data. Only adults can make bookings. If you believe a child has given us data, write to us and we will delete it.
Changes
If this policy changes, we will update the date at the top of the page. We will announce material changes in the app before they take effect.