Private trips stay private.
RoamTab is designed to keep shared travel expenses private and simple. This policy explains what the app handles and when data leaves your device. RoamTab stores the name you enter, participant names, trips, expenses, settlements and optional receipt attachments in the app’s private local container. RoamTab does not provide user accounts, advertising, analytics or cross-app tracking. Only when you choose to scan a receipt, RoamTab sends the selected image over an encrypted connection to the RoamTab receipt-processing service and its AI processing provider. The image is used to extract the merchant, date, currency, line items and total. The production service and processor do not retain the image or extracted content after the request has been processed. To protect the scanning service from abuse, RoamTab creates a random installation identifier and uses Apple’s App Attest service on supported devices. The proxy retains a one-way hash of that identifier, the attested public key, assertion counter and scan-quota counters. This information is used only for app functionality, fraud prevention and rate limiting. It is not associated with the name or expense data stored in RoamTab. Camera access is used only when you photograph a receipt. Photo library access is used only for the image you select. RoamTab does not browse or upload the rest of your photo library. RoamTab does not sell personal data, show advertising or track you across apps or websites. Receipt data is shared only with the processing provider needed to perform a scan, subject to protections consistent with this policy. Local data remains on your device until you delete the related expense, use Data & Backup → Delete All RoamTab Data, or remove the app. Deleting an expense removes its saved receipt attachment. You can export a portable backup before erasing the app. The receipt-processing service does not retain images or extracted content after completing the real-time request. Quota records are removed after 31 days and App Attest keys are removed after 180 days without a receipt scan. If RoamTab’s data practices change, this policy and the App Store privacy disclosure will be updated before the changed behavior is released. For privacy questions or deletion requests, email hi@zeitflow.de.Data stored on your device
Receipt scanning
Camera and photo library
Sharing and tracking
Retention and deletion
Changes
Contact