Privacy Policy

rowm. is operated by Bytea, Ltd. ("we," "our," or "us"). This policy describes how we collect, use, store, and protect your information when you use the rowm. mobile application and website (rowmapp.com). We are committed to transparency and to collecting only what is strictly necessary to provide our service.

1. Information we collect

We collect the minimum information required to operate the service:

• Account identifier — a unique identifier provided by Sign in with Apple. We do not receive or store your name or email address unless you explicitly choose to share them during sign-in.
• Subscription state — your subscription status (active, trial, expired, cancelled) and renewal state, received from Apple via RevenueCat. We do not receive or store your payment method, card number, or billing address.
• Aggregate bandwidth usage — monthly data consumption per account, used solely to enforce fair usage limits. This metric is not associated with any browsing activity, destination, or content.

2. Information we do not collect

Our VPN servers are configured to retain no session data. We do not collect, log, or store:

• Browsing history or traffic content
• DNS queries or resolution logs
• Connection timestamps or session duration
• Originating IP addresses
• Destination IP addresses or hostnames
• Any information about the websites, services, or content you access through the VPN

Because this data is never written to disk, we are unable to provide it to any party, including in response to legal requests. We cannot disclose what we do not possess.

3. How we use your information

The limited information we collect is used exclusively to:

• Authenticate your identity and maintain your session
• Verify and manage your subscription status
• Enforce fair usage bandwidth limits
• Respond to support requests you initiate
• Detect and prevent abuse of the service

We do not use your information for advertising, profiling, analytics, or any purpose unrelated to delivering the rowm. service.

4. Third-party services

We use a limited number of third-party services to operate rowm.:

• Apple App Store — processes subscription payments. Subject to Apple's Privacy Policy.
• RevenueCat — manages subscription state and entitlements on our behalf. Receives your anonymous app user ID and subscription status. Subject to RevenueCat's Privacy Policy.
• Vercel — hosts our website. May collect anonymized, aggregate visitor metrics (e.g., page views by country). No personal identifiers are collected or shared.

We do not sell, rent, trade, or otherwise transfer your personal information to any third party for their own purposes. Each third-party service listed above is contractually bound to process data only as necessary to provide their service to us.

5. Data storage and security

Account data is stored in encrypted databases hosted on secure infrastructure. All data in transit between your device and our servers is encrypted using TLS. VPN tunnel traffic is encrypted end-to-end.

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Data retention and deletion

Account information is retained for as long as your account remains active. When you delete your account — which you can do at any time from within the rowm. app under Settings — all associated data is permanently and irreversibly removed from our systems. We do not retain backups of deleted account data.

7. Your rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — delete your account and all associated data from within the app, or by contacting us
• Portability — request your data in a structured, machine-readable format
• Restriction — request that we limit the processing of your data
• Objection — object to processing of your data for specific purposes
• Withdraw consent — withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at hello@rowmapp.com. We will respond within 30 days. If you are located in the European Economic Area, you also have the right to lodge a complaint with your local data protection authority.

8. International data transfers

Our servers are located in multiple countries to provide optimal VPN performance. Your account data may be processed in a jurisdiction different from your own. Where such transfers occur, we ensure appropriate safeguards are in place to protect your data in accordance with applicable law.

9. Children's privacy

rowm. is not directed at and is not intended for use by anyone under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will promptly delete it.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you through the app or by posting a prominent notice on our website. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of rowm. after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions, concerns, or requests related to this privacy policy or your personal data, contact us at hello@rowmapp.com.