Vroam Privacy Policy

Last updated: August 18, 2026 Effective date: August 3, 2026

This Privacy Policy explains how JXB Works LLC (“Vroam,” “we,” “us,” or “our”) collects, uses, and shares information when you use the Vroam mobile application (the “App”) and the website at vroam.io (together, the “Service”).

If you do not agree with this Policy, please do not use the Service.

1. Who we are

The Service is operated by:

JXB Works LLC (an Arizona limited liability company), doing business as Vroam 15657 N Hayden Rd #1171, Scottsdale, AZ 85260, USA Contact: support@vroam.io

We are the controller (and, under Quebec Law 25 and Mexico’s LFPDPPP, the entity responsible) for the personal information described here. Questions about this Policy or your information can be sent to support@vroam.io.

2. A note on how Vroam is designed

Vroam is designed to be usable without an account. Much of the App (browsing the map, viewing public spot data, planning a route, checking weather) works signed out and processes information on your device. You only need to create an account to sync your data across devices and to use community features such as posting public pins.

We collect the minimum we need to run the Service. We do not sell your personal information, and we do not use your location for advertising.

3. Information we collect

3.1 Information you provide

• Account information. If you create an account, we collect your email address and, depending on how you sign in, an identifier from Apple or Google (“Sign in with Apple” / “Sign in with Google”). If you use Sign in with Apple’s private-relay email, we receive only the relay address.
• Username. You choose a public username (handle). This is visible to other users and to the public wherever your public content appears.
• User content. Content you create in the App, including saved spots (private to you) and community pins you choose to make public (a place type, name, description, location, reviews, ratings, and amenity tags; photos are a future release).
• AI assistant queries. When you use the in-app AI assistant (“Ask Vroam”), the question you type, together with your current location and your rig details, is processed to generate a response. See Sections 4, 5, and 6.
• Communications. If you contact us (for example, at support@vroam.io) we keep your message and contact details to respond.
• Marketing preference. Whether you have opted in to marketing email. This is off by default; we only send marketing email if you turn it on.

3.2 Information collected automatically

• Location. With your permission, we collect your device’s precise and/or approximate location to show nearby places and to plan and preview routes. You control location access in your device settings, and you can use much of the App with location off. See Section 5.
• Device and usage data. Basic technical and diagnostic data such as device model, operating-system version, app version, coarse region, and crash/error diagnostics. This helps us keep the App working and fix problems.

3.3 Information from public and third-party sources

The base spot data shown in the App (campgrounds, public lands, parks, airports, coverage, and similar) comes from public and government data sources, including Recreation.gov / RIDB, the National Park Service, the FAA, the FCC, and OpenStreetMap. This is not your personal information; it is reference data we display to you.

3.4 Information we do NOT collect

We do not collect payment-card information (the App is currently free; if purchases are added, Apple or Google handles them, depending on where you got the App). We do not collect precise location in the background when the App is not in use. We do not knowingly collect information from children (see Section 11).

4. How we use information

We use the information above to:

• Provide, maintain, and improve the Service (show nearby spots, plan and preview routes, display weather and elevation, sync your saved data);
• Create and secure your account and authenticate you;
• Display your public username and public community pins to other users;
• Respond to your requests and provide support;
• Send transactional messages (for example, sign-in one-time codes and account or safety notices);
• Send marketing messages only if you have opted in, and let you opt out at any time;
• Detect, prevent, and address fraud, abuse, security issues, and violations of our Terms and Community Guidelines (including reviewing reported content);
• Operate our in-app AI assistant (“Ask Vroam”): we send the question you type, your current location, and your rig details to a third-party AI provider (Anthropic) to generate a response to your request. The provider is contractually barred from using your data to train its own models (and does not do so for API traffic by default), and we do not use your private saved spots or location history to train any model. Separately, if we develop AI features over public community content (such as search, recommendations, or trends), any such features would use only content you make public (not your private saved spots or your location history), follow the same provider restrictions, and be designed so they do not reveal any individual’s identity, precise location history, or movements to others (see Section 6);
• Comply with legal obligations and enforce our agreements.

Legal bases / grounds (Canada and Mexico). Where consent is required (for example, precise location, and marketing email under Canada’s CASL and Mexico’s LFPDPPP), we rely on your consent, which you may withdraw. We otherwise process information as necessary to provide the Service you request and for our legitimate business interests in operating and securing it.

5. How we use location

Location is central to what Vroam does, so we want to be specific:

• We request location access to (a) center the map and show places near you and (b) calculate and preview routes and drive times.
• To deliver these features, your location or the coordinates you search or route to are sent to our mapping and weather providers (Mapbox for maps, search/geocoding, and routing; Apple WeatherKit for weather, with Open-Meteo as a fallback and for air quality and elevation) so they can return results. We share only what is needed to fulfill your request.
• When you use the AI assistant (“Ask Vroam”), your current location is included in the request sent to our AI provider (Anthropic) so it can answer place-based questions (for example, “near me”). See Section 6.
• We do not sell location data, and we do not use it for advertising or profiling.
• You can grant “precise” or “approximate” location, or deny location entirely, in your device Settings. Much of the App still works with location off; some features (nearby, routing from your position) will be limited.

6. How we share information

We share personal information only as described here. We do not sell it.

• With service providers (subprocessors) who process data on our behalf, under contract, to run the Service:
  • Supabase (US): database (Postgres/PostGIS), authentication, and file storage;
  • Mapbox: maps, search/geocoding, and routing;
  • Apple and Google: “Sign in with Apple” / “Sign in with Google” authentication. Apple additionally provides weather forecasts through WeatherKit, which receives the coordinates you are viewing;
  • Resend (US): sign-in code emails for the app;
  • Brevo (EU): newsletter and website email delivery, if you opt in;
  • Google Workspace: our business email;
  • Cloudflare (US): content delivery and hosting for certain map-overlay tiles (for example the smoke-forecast raster) and our website;
  • Open-Meteo: air quality and elevation data, and weather when WeatherKit is unavailable;
  • Anthropic (US): the AI provider that powers the in-app AI assistant (“Ask Vroam”). When you use the assistant, the question you type, your location, and your rig details are sent to Anthropic to generate a response. Anthropic is contractually barred from using your data to train its own models, and does not do so for API traffic by default;
  • Sentry (US): crash reporting and performance diagnostics, so we can find and fix bugs and improve stability; A current list of subprocessors is maintained and available on request at support@vroam.io.
• Publicly, for content you choose to make public. Your username and any public community pins (type, name, description, location, reviews, ratings, and tags; photos in a future release) are visible to other users of the Service and may be visible to the public. Anything you mark public is not private. Do not post anything you would not want publicly associated with your username.
• For legal and safety reasons, when we believe in good faith that disclosure is necessary to comply with law or legal process, enforce our Terms, or protect the rights, property, or safety of users, the public, or Vroam.
• In a business transfer, if Vroam is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction. We will require the recipient to honor this Policy or notify you of any material change.

7. Where your information is stored (international transfers)

Vroam is operated from the United States, and our providers (including Supabase) store and process data on servers in the United States. If you use the Service from Canada or Mexico, your information will be transferred to and processed in the United States, which may have different data-protection laws than your country. By using the Service, you understand that your information will be processed in the US. Where required, we use contractual and other safeguards with our providers to protect transferred information.

8. How long we keep information (retention)

• Account data is kept while your account is active.
• If you delete your account (available in-app; see Section 9), we delete or de-identify your personal account information and private content within a commercially reasonable period, except where we must retain limited data to comply with law, resolve disputes, or enforce our agreements.
• Public community content is handled by type when you delete your account: spots you shared remain visible but are de-attributed (your username is removed from them, so other travelers can still rely on the place), while your reviews, ratings, and tags are deleted. You may request removal of a specific shared spot at any time (see Section 9). We may retain de-identified or aggregated data that no longer identifies you.
• Diagnostic and log data is kept for a limited period for security and troubleshooting.

9. Your rights and choices

Regardless of where you live, you can:

• Access and correct your account information in the App, or by contacting support@vroam.io.
• Delete your account directly in the App (Settings), which removes your account and associated private data as described in Section 8. You can also request deletion at support@vroam.io.
• Remove specific content you posted, or ask us to remove it, at any time.
• Control location in your device Settings (precise, approximate, or off).
• Opt out of marketing email at any time using the unsubscribe link in any marketing message or your in-app setting. Transactional messages (like sign-in codes) are not marketing and continue as needed for the Service.

We will not discriminate against you for exercising your rights. We may need to verify your identity before acting on a request.

9.1 California (CCPA/CPRA)

If you are a California resident, you have the right to know/access, delete, and correct the personal information we hold about you, and to be free from discrimination for exercising these rights.

• Categories of personal information we collect: identifiers (email, username, auth-provider IDs, device identifiers), geolocation data, internet/network activity (usage and diagnostics), and user-generated content. Purposes and sources are described above.
• Sale/sharing: We do not “sell” or “share” personal information as those terms are defined under the CCPA/CPRA, and we do not process it for cross-context behavioral advertising.
• Sensitive personal information: precise geolocation may be considered sensitive; we use it only to provide the features you request and do not use it to infer characteristics. We do not use or disclose it beyond the purposes permitted under the CCPA/CPRA.
• To exercise rights, use the in-app controls or email support@vroam.io. You may use an authorized agent.

Other US states (for example Virginia, Colorado, Connecticut, and similar) provide comparable rights; we honor equivalent access, correction, deletion, and opt-out requests. Contact support@vroam.io.

9.2 Canada (PIPEDA and Quebec Law 25)

If you are in Canada, you may access and request correction of your personal information, withdraw consent (subject to legal or contractual limits), and file a complaint. Under Quebec Law 25, you also have rights regarding automated decision-making (we do not make significant decisions about you solely by automated means) and data portability. Our privacy contact is support@vroam.io. We will notify affected individuals and regulators of a privacy breach where required by law.

9.3 Mexico (LFPDPPP, ARCO rights)

If you are in Mexico, you have ARCO rights: Access, Rectification, Cancellation, and Opposition, and you may revoke consent and limit the use or disclosure of your personal data. To exercise ARCO rights, contact support@vroam.io with your request and proof of identity. A Spanish-language privacy notice (aviso de privacidad) is available at vroam.io/privacidad.

10. Security

We use reasonable administrative and technical safeguards (including encryption in transit and access controls through our providers) to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you believe your account has been compromised, contact support@vroam.io.

11. Children

The Service is not directed to children. You must be at least 17 years old to use the Service (see the Terms of Use). We do not knowingly collect personal information from children under 13 (or the minimum age in your jurisdiction). If you believe a child has provided us personal information, contact support@vroam.io and we will delete it.

12. Third-party services and links

The App relies on third-party services (Section 6) and may show or link to third-party content or destinations. Their privacy practices are governed by their own policies, not this one. Public spot data comes from government and open sources listed in Section 3.3.

13. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will update the “Last updated” date and, where appropriate, provide additional notice (for example, in the App). Your continued use of the Service after changes take effect means you accept the updated Policy.

14. Contact us

Questions, requests, or complaints:

JXB Works LLC (Vroam) 15657 N Hayden Rd #1171, Scottsdale, AZ 85260, USA support@vroam.io