Skip to content
Get the app

RÖM Privacy Policy

Last updated: 30 October 2026

This policy explains what personal data RÖM ("RÖM," "we," "us") collects when you use the RÖM app and website (the "Service"), why we use it, who we share it with, how long we keep it, and the rights you have. It forms part of our Terms & Conditions. RÖM is based in the United Kingdom, and UK data protection law, including the UK GDPR, applies.

1. What we collect

Account details. Your name, email address, username, password (stored only as a hash), profile photo, bio, and, if you add them, your phone number, date of birth and sex. If you sign in with Apple or Google, we receive your name and email from them.

Profile and training details. Your goals, height, sports, experience level, training days, city and country. Coaches and facilities also provide business details such as an address, services and availability.

Location. When you record an activity, we store its GPS route. If you set a privacy zone, we store its location and size so we can hide that part of your routes. If you use Beacon live sharing, we store your current location while it is on, and only the latest point. Location-based discovery uses the approximate location on your profile.

Health and fitness data. Activities (distance, pace, heart rate, elevation, calories), body stats, nutrition logs, check-ins and progress photos you add. If you connect Apple Health, Health Connect or a wearable (Garmin, Oura, Polar, Suunto, Wahoo or WHOOP), we store the data you allow, such as heart rate, heart rate variability, blood oxygen, blood pressure, sleep, weight, body fat, VO2 max and the device's readiness, recovery and strain scores. Connection tokens for wearables are stored encrypted. A coach sees your health data only if you grant them access, and you can revoke it at any time.

Content you create. Posts, stories, comments, reactions, highlights, clubs and community posts, form-check videos, and the photos, videos and voice notes you upload.

Messages. Direct and group messages, their media, reactions and read receipts. Messages are not end-to-end encrypted.

Payments. Your subscriptions, purchases, refunds and, for coaches and facilities, payouts. Card details are handled by Stripe, Apple or Google, never stored by RÖM.

Calls and sessions. Session bookings and, where a call is recorded, the recording.

Device and usage data. Your device's push notification token; the IP address and device type of each sign-in; the posts and ads you see and tap; your searches; and app usage events, including session recordings with images and typed text masked.

We do not access your phone's contacts.

2. Why we use it

  • To provide the Service — your account, profile, feed, messages, activities, coaching, bookings and payments. The lawful basis is our contract with you.
  • Health data — only to show it to you, and to coaches you grant access to, because you choose to connect it. The lawful basis is your explicit consent, which you can withdraw by disconnecting the source.
  • Safety and security — to secure accounts, detect abuse, and check uploaded images for nudity and graphic content. The lawful basis is our legitimate interest in keeping RÖM safe.
  • Improving RÖM — to understand how the app is used and fix problems. The lawful basis is our legitimate interest.
  • Recommendations and ads — to rank your feed and show promoted posts from coaches and facilities. See section 4.
  • Legal obligations — for example, keeping records we are required to keep.

3. AI features

When you ask RÖM to analyse an activity or your nutrition, or to generate a training programme or meal plan, we send the details needed for that request — such as the activity's distance, pace, heart rate and splits, your food log, or your goals, equipment and dietary needs — to our AI provider (Anthropic or OpenAI). We also create text embeddings of posts, using OpenAI, to improve recommendations. We do not send your name or email with these requests.

4. Ads

RÖM shows promoted posts from coaches and facilities on RÖM. These are RÖM's own ads: nothing about you is sent to advertisers, ad networks or data brokers to choose them.

Personalised ads are off unless you turn them on. You can choose during sign-up or in Settings › Ads & privacy, and turn it off as easily at any time. If it is on and you are 18 or over, we may choose ads using: the sports you picked or record, your goal, your experience level, your country, your city and an area rounded to about 10 km, and the kinds of things you look at or join on RÖM (programs, facilities, clubs and events). If it is off, or you are under 18, or we do not know your age, you still see ads, but they are not chosen using you. The lawful basis is your consent; we record when you gave or withdrew it, where, and against which version of this policy.

We never use your health or body data (heart rate, sleep, weight, body stats, anything from Apple Health or a wearable), injuries or disability, your exact location or routes, your messages, what you type into search, or religion, sexuality or ethnicity to choose ads.

In Settings › Ads & privacy you can see the ad interests we hold for you and remove any of them, see why you were shown any ad (tap Sponsored), hide an ad or everything from one advertiser, and download your data. Turning personalised ads off deletes your ad interests.

Advertisers see only aggregate results — never your name or profile. An audience under 100 people cannot be targeted, and smaller numbers are never shown. We do not use the advertising identifier on your device, we do not track you across other companies' apps or websites, and we do not sell your personal data. Subscribers on an ad-free plan see no ads.

Usage analytics. We record which screens and pages you open in the app (ids and categories only, not what you type) to improve RÖM and, only if personalised ads are on, to work out your ad interests. You can turn usage analytics off in Settings › Ads & privacy; doing so stops it and deletes what was recorded.

5. Who we share it with

Other RÖM users, according to your privacy settings — for example, your public profile, posts and activities, or only your followers or close friends if you choose.

Service providers that run RÖM for us, under contract:

  • Hosting and storage: Hetzner (servers), Vercel (website), Neon (database), Cloudflare (file storage and video), Mux (course videos)
  • Payments: Stripe, Apple App Store, Google Play
  • Notifications and email: Apple Push Notification service, Firebase Cloud Messaging, Expo, Google (email delivery)
  • Maps and routing: Mapbox, OpenStreetMap routing
  • Calls: LiveKit, Agora
  • Error reporting and analytics: Sentry, PostHog
  • AI: Anthropic, OpenAI
  • Image safety checks: Sightengine
  • Food search: USDA FoodData Central, Open Food Facts (your search terms only)
  • Sign-in: Apple, Google
  • Wearables you connect: Garmin, Oura, Polar, Suunto, Wahoo, WHOOP

When you share outside RÖM — to WhatsApp, Instagram, Facebook, Snapchat or elsewhere — the post you choose goes to that app, and its own privacy policy applies. RÖM receives no data back from them.

For legal reasons, where we must by law, or to protect someone's safety.

Some of these providers process data outside the UK, including in the United States.

6. How long we keep it

  • Stories disappear after 24 hours, unless you add them to a highlight.
  • App usage events are kept for 180 days, and records of what you viewed for 90 days.
  • Ad interests are kept only while personalised ads are on and are rebuilt daily; turning it off deletes them. Records of which ads you saw or tapped lose any link to you after 180 days.
  • Wearable and health samples are kept for 3 years.
  • Everything else is kept while your account is open.
  • Reports of messages. When someone reports a message, we keep a copy of that message and the few around it as evidence for the review. After the decision, that copy is deleted 90 days later if the report was dismissed, or 12 months later if we acted on it — longer only where the case has been referred to the police or a legal claim is live. If the reported person deletes their account, their name and username are removed from the copy.
  • When you delete your account, it is permanently erased 30 days later, with your profile, content, activities, messages and connections. Signing in during those 30 days cancels the deletion. A record that the account was deleted is kept for security, as is any report evidence described above, with your name removed.

7. Your rights

You have the right to access, correct, delete and receive a copy of your personal data; to object to or restrict how we use it; and to withdraw consent at any time. You can:

  • Edit your profile and privacy settings in the app
  • Download a copy of your data in Settings
  • Delete your account in Settings — see how deletion works
  • Disconnect Apple Health, Health Connect or a wearable in Settings
  • See where you are signed in, and sign out other devices, in Settings

To use any other right, email [email protected]. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

8. Age

RÖM is for people aged 18 and over, as set out in our Terms.

9. Security

We protect your data with encryption in transit, hashed passwords, encrypted wearable connection tokens and access controls. No system is completely secure, and we cannot guarantee absolute security.

10. Changes

We will update this page when this policy changes, and tell you in the app about significant changes.

11. Contact

Questions about this policy or your data: [email protected].