Skip to main content

Privacy Policy

Effective date: June 8, 2026

Last updated: June 8, 2026

romp. is built for dog parents who care about their pack — and the privacy of their pack. This policy explains, in plain English, what we collect and why.

romp. is a registered trade name of ROOST Creative LLC, a Tennessee limited liability company, which operates this service and is the data controller responsible for your information ("romp.," "we," "us," or "our").

Short version. We collect only what we need to match you with great parks. We never sell your data.

1. Data we collect

When you use romp., we may collect:

  • Your approximate location (to find parks near you)
  • Your profile details (display name, dog name, photo)
  • Your check-ins, posts, photos, and activity
  • Your email address (for your account)
  • Basic device and usage data (to keep the app fast and reliable)
  • Walk tracking data (GPS route, distance, duration) if you use the walk tracker feature

We do not collect your precise GPS coordinates permanently — location data is used in real time to find nearby parks and is not stored beyond what's needed for walk tracking.

2. Age requirements

romp. is intended for users who are 18 years of age or older. By creating an account, you confirm that you are at least 18 years old.

We do not knowingly collect personal information from individuals under the age of 18. If we become aware that a user is under 18, we will immediately terminate their account and delete their data.

If you believe a minor has created an account on romp., please contact us immediately at hello@roostcreativecoop.com.

3. Date of birth

We collect your date of birth at account creation solely to verify that you meet our minimum age requirement. Your date of birth is immutable once set — it cannot be changed after submission.

Your date of birth is never shared with other users, never used for advertising, and never sold to third parties. It is stored securely and is accessible only to server-side processes — never to client-side code or other users.

4. Column-level data protection

Certain sensitive fields in your account are never accessible to client-side code or third-party libraries. These fields are server-side only:

  • Your email address
  • Your date of birth
  • Stripe billing identifiers (subscription IDs, customer IDs, price IDs)
  • Strava authentication tokens
  • WebAuthn credentials and passkey data

This means even if you are logged in, the romp. app frontend cannot read these values directly. They are only accessed by authenticated server functions on your behalf.

5. Open Data API

romp. operates an Open Data API that makes anonymized park information publicly available under a Creative Commons Attribution 4.0 International (CC BY 4.0) license. This includes:

  • Aggregated check-in counts per park
  • Anonymized ratings and review statistics
  • Park locations and basic metadata

No user personally identifiable information (PII) is ever exposed through the Open Data API. Individual check-ins, photos, and reviews are anonymized and aggregated before publication.

6. Community content

When you post check-ins, reviews, or photos on romp., you grant ROOST Creative LLC a license to display and distribute that content within the app and via the Open Data API. Where published through the API, this content is anonymized — stripped of your name, profile photo, and any identifying details.

You retain ownership of your original content. We will never sell your individual photos or reviews to third parties.

7. How we use it

Your data powers:

  • Personalization — matching you to the right parks for your dog
  • Community features — showing your check-ins and activity to friends and park regulars
  • Safety — moderating user-generated content
  • Product improvement — understanding how the app is used so we can make it better
  • Communication — sending you updates, weekly digests, and important account notifications

We do not use your data for advertising. We do not sell your data. Ever.

8. Third parties

romp. uses these trusted services to operate:

  • Supabase (supabase.com) — authentication, database, and file storage. Your account data and content are stored on Supabase's infrastructure.
  • Stripe (stripe.com) — payment processing for romp. Pro subscriptions. We never see or store your full card details.
  • Resend (resend.com) — transactional and marketing email delivery.
  • PostHog (posthog.com) — product analytics. We track how features are used to improve the app. No personally identifiable information is sent to PostHog — you are identified by an anonymous ID only.
  • Strava (strava.com) — optional integration for syncing walk activity. Only connected if you explicitly authorize it.
  • Cloudflare (cloudflare.com) — hosting, CDN, and DDoS protection.
  • Stadia Maps (stadiamaps.com) — map tile rendering.
  • OpenStreetMap (openstreetmap.org) — park and location data.
  • Wikimedia Commons & Flickr (CC) — licensed park photography sourced under their respective attribution licenses. Stored locally after compliance validation.
  • Sentry (sentry.io) — error tracking to help us fix bugs. Error reports may include device type and app state but never personal data.

We do not share your data with advertisers or data brokers.

9. Cookies and analytics

romp. uses essential cookies to keep you signed in and remember your preferences. We also use analytics cookies (PostHog) to understand how the app is used.

You can control cookie preferences via the cookie banner when you first visit romp. Declining non-essential cookies disables analytics tracking but does not affect app functionality.

10. Push notifications

If you enable push notifications, we store a device token to send you alerts about park activity, check-ins, and account updates. You can disable push notifications at any time from your device settings or from romp. settings.

11. Data retention

We keep your data for as long as your account is active. If you delete your account:

  • Your profile, check-ins, photos, and activity are permanently deleted within 30 days
  • Your email address is removed from all marketing lists immediately
  • Anonymized, aggregated usage data may be retained for product improvement purposes

You can request a copy of your data or early deletion by emailing us at hello@roostcreativecoop.com with subject "Data Request".

12. Your rights

Regardless of where you live, you can:

  • Access the data we hold about you
  • Correct inaccurate data
  • Delete your account and all associated data
  • Export your data
  • Opt out of marketing emails at any time

EU/EEA users (GDPR)

You have additional rights including the right to restrict processing, object to processing, and lodge a complaint with your local supervisory authority.

California users (CCPA)

You have the right to know what personal information we collect, the right to delete it, and the right to opt out of sale (we don't sell data, so this right is always satisfied).

To exercise any of these rights, email hello@roostcreativecoop.com with subject "Privacy Request". We respond within 30 days.

13. Children's privacy

romp. is not directed at anyone under 18. We do not knowingly collect personal information from individuals under 18. If you believe a minor has provided us personal information, please contact us at hello@roostcreativecoop.com and we will delete it immediately.

14. Contact

Privacy questions? Email hello@roostcreativecoop.com with subject "Privacy Request".

romp. is operated by ROOST Creative LLC.

Questions? Email hello@roostcreativecoop.com with subject "Privacy Request". You can also read our Terms of Service.

romp. is operated by ROOST Creative LLC · hello@roostcreativecoop.com