Privacy notice
Roam Pal Guide · roampalguide.com · last updated 2 October 2026
This notice says what information Roam Pal Guide uses, where it goes, why, how long it is kept, and what your rights are. Roam Pal is free. It has no accounts and no sign-in.
1. Who we are
Roam Pal Guide is run by ADAI Digital Ltd (“we” or “us”). We are the controller for the information in this notice. That means we are the organisation responsible for it.
- Company number 17242851.
- Registered office: Suite A, 82 James Carter Road, Mildenhall, England, IP28 7DE. This is the statutory registered office, not a customer visiting address.
- We are on the register of the Information Commissioner’s Office (ICO), the UK’s data protection regulator. Our registration number is ZC208103.
- Email: admin@adaidigital.co.uk
- We have not appointed a data protection officer. Questions about privacy go to Allan Drummond, a director of ADAI Digital, at the email address above.
2. The short version
- Your trips, notes, places, photos and access needs are saved on your device, not on our servers. A few features send part of them to an outside service, such as the stops on a route for driving times. See section 4.
- Roam Pal sets no cookies of its own. It has no adverts and no tracking tools. An optional count, off unless you turn it on, is explained in section 5.
- To show maps and video pictures, your device asks some outside services. They see your internet address (IP address). See section 4. The place photos come from Wikimedia Commons under their open licences. They load from Wikimedia’s servers, which may set their own cookie (WMF-Uniq).
- When Roam Pal opens, and about every five minutes after, your device asks our own service at adaidigital.co.uk how many times videos have been reported.
- Anything else, such as a report or an email, is sent only if you choose to send it.
3. What stays on your device
Roam Pal saves what you make in your browser’s own storage, on your device. This includes:
- your current and past trips, wish list, day plans and checklist ticks
- your own places, such as your home or where you store a caravan
- notes, memories, photos, videos and voice notes
- your access needs, travel profile, vehicle details, memberships and discount cards (Roam Pal never asks for card numbers, proof or passwords)
- journey support plans, assistance requests, bookings and booking references
- display choices, such as text size and dark mode
- access corrections you have not sent yet
- which videos you reported, so the button can say “You reported this video”
- your choice about anonymous service measurement
- the Roam Mate model files, if you choose to download them
There is no account, and we do not copy any of this to our servers. To remove it, clear this site’s data in your browser settings, or uninstall the app. “Back up my data” saves a file on your device. It is not sent to us.
Sharing a trip copy
When you share a current or past trip, Roam Pal makes a locked (encrypted) copy on your device. The selected trip is carried in the link and is not uploaded to a Roam Pal trip database. Home and caravan-storage locations, access needs, memberships, booking references, private notes, photos and videos are always excluded. A named holiday stay is included only if you choose it.
The key that unlocks the copy is part of the link. Anyone you give the link to can open it, so treat it like a private document. They get their own copy to change, but live shared editing is not currently provided.
Other things you share yourself
When you share a journey support plan, your Access Passport (your access needs) or your location, Roam Pal uses your device’s own share or copy options. It goes only where you send it. We do not receive it.
4. What leaves your device when you use Roam Pal
Whenever your device asks another computer for something, that computer sees your internet address (IP address) and basic details about your browser. This is how the internet works. Below is who Roam Pal asks, and what else they see.
Google Firebase Hosting works for us, and the Hub is our own service. The other services are separate organisations. Each one decides how it uses what it receives, under its own privacy notice. For maps, photos, video pictures, routes and place searches, we use their free public services without an account.
On every visit
- Google Firebase Hosting sends you the Roam Pal website. Google receives your internet address, the page you asked for and your browser details. Google does this for us. Section 8 says what Google keeps. Privacy notices: Firebase and Google.
- Our Hub at adaidigital.co.uk is ADAI Digital’s own service. When Roam Pal opens, and about every five minutes after while it stays open, your device asks the Hub how many times each automatic video has been reported. The request carries no cookies and does not say which page you are on. Like any request, it passes through Firebase Hosting, which sees your internet address. Many of these requests may be answered by Google’s cache, so they never reach our Hub. Our Hub does not save your internet address from this request. The answer holds only counts, with no names, notes or addresses. If the app cannot get a recent answer, it hides automatic videos to be safe. Videos checked by a person are never hidden this way.
When you look at the map, a place or its videos
- OpenFreeMap, delivered through Cloudflare, sends the map pictures. It receives your internet address and which part of the map you are looking at. Privacy notices: OpenFreeMap and Cloudflare.
- Wikimedia Commons is where the place photos come from, under their open licences. The photos load from Wikimedia’s servers, which may set their own cookie (WMF-Uniq). It receives your internet address and which photo. Privacy notice: Wikimedia privacy policy.
- YouTube (Google) sends the small pictures for place videos. It receives your internet address and which video picture. If you choose to watch, the video opens on YouTube. Privacy notice: Google.
Only when you use one of these features
- The live accessible places layer. Your device asks the Overpass API at overpass-api.de, run by FOSSGIS e.V. It sends the edges of the map area on your screen. Privacy notice: FOSSGIS (in German).
- Driving times and road routes. Your device asks the OSRM demo server at router.project-osrm.org, which FOSSGIS sponsors. It sends the points on the route. These can include a start place you saved, such as your home. Privacy notice: FOSSGIS (in German).
- Postcode look-up, when you add your own place. Your device sends the postcode you typed to postcodes.io, a free service maintained by Ideal Postcodes. We could not find a privacy notice for postcodes.io itself. Here is the privacy policy of Ideal Postcodes, the company that maintains it.
- Putting a booking on the map. Your device sends the place name from the booking to the Photon place search at photon.komoot.io, run by komoot. Privacy notice: komoot.
- Downloading Roam Mate. If you choose to download the Roam Mate model, your browser fetches the files from Hugging Face and GitHub. They receive your internet address and which files. Your questions stay on your device. Privacy notices: Hugging Face and GitHub.
- Speaking a question. The microphone button in Roam Mate uses your browser’s own speech service. Some browsers send the sound to the company that makes the browser, to turn it into words. Your browser’s privacy settings explain what it does.
- Booking links (“Stay nearby” and “Find flights”). These go to Hotellook and Aviasales through Travelpayouts. The “Stay nearby” link carries the place name. Both links carry our partner code, so we may earn a small commission at no cost to you. It never changes what we recommend. Once you follow a link, that website’s own privacy notice applies. The partner programme is run by Travelpayouts: Travelpayouts privacy notice.
- Other links, such as directions in Google Maps, the Met Office forecast, AccessAble, Euan’s Guide, and venue or transport websites. Nothing is sent until you follow a link. A directions link carries its start and end points.
5. What you can choose to send us
Reporting a video
A place video found by a computer, and not checked by a person, carries the words “Found automatically. Not checked by a person.” Every place video, and every video on a creator’s profile, has a “Report this video” button.
- When you report a video. Nothing is sent until you press Send. Then these go to our Hub at adaidigital.co.uk: your ticks, any note you write, the video, the place, the page you were on (without anything after the #) and the Roam Pal version. Please do not put personal details in the note.
- What we keep. The report form says: “We keep what you tick, any note you write and the page you were on. A scrambled code made from your connection lets us count each person once. We never store your address. We delete it after 90 days.” We also keep the time, the video and the place, so a person can check the video. Automatic deletion is now switched on, so we delete a video report 90 days after it arrives.
- Scrambled codes. Our Hub uses your internet address to make scrambled codes. It does
not store your internet address. The codes are made with a secret key, so they do not show your address.
- One code joins your address with the video. It makes sure you count as one person for that video. It is made only for videos found automatically. We keep it for up to 30 days after your last report about that video, or sooner if we decide about the video.
- One code joins your address with the date. It stops one connection sending more than 20 video reports a day. We keep it for 2 days.
- Videos we cannot count. Our Hub can count a report only when it has the video’s YouTube code and the place record. A video on a creator’s profile has no place record, and some videos have no YouTube code. A report about one is not counted towards hiding. It goes through the same review service as ordinary feedback. A person reads this report. The report form says: “We keep what you tick, any note you write and the page you were on. We delete it after 6 months.” Automatic deletion is now switched on, so we delete this report 6 months after it arrives.
- If a report does not send. The app tells you, and offers to open your own email app with the report filled in. Nothing is sent unless you send that email yourself.
- On your device. The app remembers which videos you reported, only to show “You reported this video”. That list stays on your device.
- Hiding reported videos. An automatic video is hidden after one report that ticks “Offensive or inappropriate” or “Does not play”, or after two people, on different internet connections, report it for other reasons. A person then checks it. This is a decision about the video, not about you. A video that a person has already checked is never hidden by reports.
Access corrections
- You can tell us whether a place’s access details were right or wrong, and add a note. These stay on your device until you choose to send them.
- When you press “Send to Roam Pal for review”, each one goes to our Hub at adaidigital.co.uk: the place, whether you said right or wrong, the date you marked it, your note, the page address and title, and the Roam Pal version. It is marked “Anonymous traveller”. We receive no name or contact details.
- The app shows a receipt number. Keep it if you may want us to find or delete your correction later.
- A person reads every correction before anything changes. We delete correction reports 6 months after they arrive.
- You can also email your corrections from your own email app, or copy them.
“Is this your venue?”
Each place has a link: “Is this your venue? Send a free correction”. It opens a page on adaidigital.co.uk. The link carries only the place’s code and name. That page asks for the venue name, what is wrong, an optional web link, and your name, role and email address. A person checks every correction. We delete these 6 months after they arrive. The page has its own privacy notice at adaidigital.co.uk/privacy.
Emails
- Feedback, and the email options for reports and corrections, go to hello@roampalguide.com. Trip Check and other questions go to admin@adaidigital.co.uk.
- We receive your email address, any name your email shows, and what you write.
- Please do not send medical records or detailed health information.
- How long we keep emails: we delete emails we no longer need. We review them at least once a year.
Anonymous service measurement (off unless you turn it on)
- In Settings, “Help improve Roam Pal with two aggregate app counts” starts off.
- If you turn it on, the app may send one of two signals to our Hub at adaidigital.co.uk: that a supported browser confirmed it installed Roam Pal, or that the installed app was opened (at most once a day). The request contains only “roampal” and the signal name. It carries no cookies and no page address.
- Our Hub adds the signal to a daily total. It keeps no record of each signal. Google Cloud’s request log still notes that a request arrived (see section 8).
- You can turn it off at any time, without losing any feature.
6. Payments
The Roam Pal app and its guides are free to use and do not take payments, and there is no account. Roam Pal Plus is not offered. Lens, the photo explanation feature, is not offered either. Trip Check, a separate human-checked review service, is arranged by email: see the Trip Check page. Any payment is arranged only after we reply. We tell you how to pay in our reply, before you pay anything.
7. Why we use your information (lawful basis)
The law says we need a reason, called a lawful basis, for each use. Most of ours are “legitimate interests”. That means a use that is needed to run Roam Pal, and fair to you. You can object to these uses (see section 11).
- Sending you the website, and keeping it working and safe. Legitimate interests.
- Showing maps, photos, video pictures and the features you choose. Legitimate interests.
- Video reports, report counts and hiding reported videos. Legitimate interests in keeping the videos accurate and safe.
- Access corrections and venue corrections. Legitimate interests in keeping access information accurate.
- Replying to your emails. Legitimate interests in replying to you.
- Trip Check. To take the steps you ask for before a contract, and to carry it out. Access needs can be health information, which needs an extra legal condition. For Trip Check health and access details, ours is Article 9(2)(a): your explicit consent, which you give by ticking the box on the Trip Check request. You can withdraw it at any time by emailing us.
- Anonymous service measurement. Your consent. You give it by turning the setting on, and take it back by turning it off.
8. Who can see your information
- ADAI Digital. Only the people we let into our Hub’s admin screens can read reports and corrections.
- Google. Google runs our website hosting, our Hub (Google Cloud Run), the database that stores reports (Firestore) and the request logs. Google does this for us, under our instructions. This makes Google our processor.
- Request logs. Google Cloud keeps a request log for our Hub. Each line shows the time, the address asked for and your browser details. Firebase Hosting, the Google service that sits in front of our server, sees your internet address. It keeps internet addresses for a few months, as Firebase states. The log on our server itself shows Firebase Hosting’s address, not yours, for requests that come through it.
- Email providers. Google Workspace handles email for adaidigital.co.uk. MXroute handles email for roampalguide.com. Mail sent to hello@roampalguide.com is passed on to admin@adaidigital.co.uk. Read the MXroute terms, which include its privacy section.
- The outside services in section 4. Your device contacts them directly. They do not work for us.
We do not sell your information. We do not share it with advertisers.
9. Where your information is kept, and transfers outside the UK
- Our Hub runs on Google Cloud in London, in the europe-west2 region. It stores reports in Google’s Firestore database, which is in London too.
- Firebase Hosting sends pages from servers around the world, so your request may be handled by a server outside the UK.
- Google’s data processing terms say that when Google sends information to a country the UK does not treat as adequate, it uses an approved safeguard that it tells us about, or standard contractual clauses. We have accepted Google’s data processing terms for this project.
- Several outside services in section 4 are outside the UK, for example in the European Union and the United States. Your device contacts them directly, and they handle your information under their own notices. We have no separate transfer safeguard with them.
10. How long we keep it
- On your device: until you delete it.
- Video reports: deleted 90 days after they arrive. The scrambled codes: deleted up to 30 days after your last report about that video, or sooner if we decide about the video, and 2 days after for the daily code.
- Totals for each reported video (how many reports, which reasons, and when the first and last came): these hold nothing about the people who reported, and have no deletion date.
- Access corrections and reports about videos we cannot count: we delete them 6 months after they arrive.
- Venue corrections: we delete these 6 months after they arrive.
- Anonymous service measurement: daily totals only, with no deletion date.
- Request logs: 30 days, Google Cloud’s standard setting.
- Emails: see section 5.
11. Your rights
You have the right to:
- ask for a copy of your information
- ask us to correct it
- ask us to delete it
- ask us to limit how we use it
- object to how we use it, where we rely on legitimate interests
- ask for your information in a form you can take elsewhere, where the law allows (data portability)
- take back your consent at any time, where we rely on consent
To ask, email admin@adaidigital.co.uk. It is free. We will reply within one month.
We keep the reports you choose to send us: corrections and video reports, with any name or contact you give. We delete correction reports 6 months after they arrive and video reports 90 days after they arrive. You can also email us and we will delete yours sooner.
Reports carry no name, so tell us how to find yours: the receipt number for an access correction, or the video, the place and the day for a video report. We cannot tell which scrambled code is yours, so we cannot find those codes for you. They are deleted up to 30 days after your last report about that video, or sooner if we decide about the video. The daily code is deleted after 2 days.
You control what is on your device. You can see, change, back up and delete it yourself, without asking us.
12. Do you have to give us information?
Your device must send its internet address to open any website, including this one. Everything else is your choice. There is no account. Reports, corrections, emails and anonymous service measurement are all optional. If you do not send them, nothing changes for you.
13. Automatic decisions
Roam Pal does not make any automatic decision about you that has a legal effect, or a similar serious effect, on you. Reports can hide a video automatically. That is a decision about the video, not about you.
14. Cookies
Roam Pal sets no cookies of its own. It saves your things in your browser’s own storage, which stays on your device. The place photos load from Wikimedia’s servers, which may set their own cookie (WMF-Uniq). We do not set it and we cannot control it. See the Wikimedia privacy policy. Read more on our cookies and local storage page.
15. Children
Roam Pal is a travel planner for everyone, including families. It has no accounts and does not ask anyone’s age. Please do not put a child’s name or health details in a report, correction or email.
16. How to complain
If you are unhappy with how we use your information, please tell us first at admin@adaidigital.co.uk. You can also complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator: ico.org.uk/make-a-complaint, or phone 0303 123 1113.
17. Changes to this notice
We update this notice when Roam Pal changes, and change the date at the top.
ADAI Digital Ltd · Company number 17242851 · Registered office: Suite A, 82 James Carter Road, Mildenhall, England, IP28 7DE. This is the statutory registered office, not a customer visiting address. ICO registration ZC208103.
All policies · Cookies · Data protection · Security · Back to Roam Pal Guide