Privacy Policy
Ghoomar is a mobile app (iOS and Android) that turns your scattered to-dos and errands into one optimized driving route. This policy explains what personal data the Ghoomar app and its backend collect, why, where it's stored, who it's shared with, and how you can access, correct, or delete it. It applies to the Ghoomar app and to this website (ghoomar.tech).
Ghoomar is built and operated by Debasish Sahoo, an individual developer based in India ("we," "us," "Ghoomar"). If anything here is unclear, email admin@ghoomar.tech and we'll help.
1. Data we collect, and why
The table below is a quick reference. Full detail on each row follows in the sections after it.
| Data | What it is | Why we collect it |
|---|---|---|
| Account | Email address, first name | Sign you in and identify your account |
| Location — while using the app | Your device's foreground GPS position | Compute and update your day's route |
| Location — home base | An address label plus coordinates you set | Anchor your route to your start/end point |
| Location — to-dos & saved places | Place names, addresses, and coordinates you add | Know where each errand is so we can route to it |
| Route data | Computed stop order, route line, distances | Show you the optimized route for the day |
| On-device map view | Approximate location, device identifiers | Render the map (handled directly by Google's map SDK) |
| Technical/server logs | IP address, request timestamps | Keep the service secure, reliable, and debuggable |
Account information
When you sign in with Google, Apple, or an email one-time code, our authentication provider (Clerk) collects and stores your email address and first name. We never request or store your last name, a profile photo, or a phone number — Ghoomar always shows a generated color avatar instead of a photo, even if your Google or Apple account has one.
Location data
Ghoomar only requests foreground ("while using the app") location access. We never request background or "always" location, and the app has no code path that reads your location when it isn't open on screen.
- Route planning. Whenever you add, complete, or reorder a to-do, or ask Ghoomar to re-plan your day, the app reads your current position once and sends it to our server, which forwards it — along with your home coordinates and the coordinates of your open to-dos — to Google's Routes API to compute the best order and driving route. The position used for that computation is stored as the day plan's starting point.
- Live position on the map. While you have "drive mode" open, the app watches your GPS position to show your live position on the in-app map. This stays entirely on your device — it is not sent to our server.
- Home base, to-dos, and saved places. The address and coordinates of your home base, and of every to-do and saved place you add, are stored on our server so they're there the next time you open the app.
You can revoke location access at any time in your device's Settings. Without it, Ghoomar cannot plan or update your route, since that's the app's core function.
Content you create
To-do titles and details, place names and addresses you save, and the routes we compute for you are stored on our server so your data is available across app sessions and, in the future, across devices.
What we do not collect
Ghoomar does not access your contacts, photos, camera, or microphone, does not collect health or payment data (the app has no in-app purchases today), does not use advertising identifiers, and — as of August 15, 2026 — does not integrate any advertising, analytics, or crash-reporting SDK. We don't know how often the app crashes or which screens you visit; we only know what's described on this page.
2. How we use your data
- To authenticate you and keep your account secure.
- To provide the core feature: turning your to-dos into one optimized driving route.
- To remember your home base, saved places, and to-dos between sessions.
- To respond when you contact us for support.
- To keep the service secure, diagnose problems, and prevent abuse.
We do not use your data to serve ads, and we do not build advertising profiles.
3. What's stored only on your device
Alongside the server copy, the app keeps a local cache of your own to-dos and route for the day, so the app opens instantly and works briefly offline. It lives in your phone's OS-managed cache folder, is excluded from iCloud/Android cloud backups, is cleared automatically after about a week of being unused, and is wiped immediately when you sign out. It is a copy, never the only copy — the server remains the source of truth. Two small on/off flags (whether you've seen the app's intro screens) are kept in your device's secure storage and contain no personal data.
4. Who we share data with
We don't sell your personal data, and we don't share it for third-party advertising. We share data only with the service providers that run Ghoomar's infrastructure, each only for the purpose below:
| Provider | Role | What they receive |
|---|---|---|
| Clerk | Sign-in and account authentication | Email address, first name, session/device data needed to keep you signed in |
| Google (Maps SDK) | Renders the in-app map | Approximate location and device identifiers, sent directly from your device to Google under Google's own privacy policy |
| Google (Places & Geocoding API) | Place search and address lookup | Search text you type, or coordinates to reverse-geocode — sent from our server, not your device |
| Google (Routes API) | Computes your optimized route | Your current position, home coordinates, and to-do coordinates for the day — sent from our server |
| Supabase | Hosts our Postgres database (AWS, Mumbai, India) | Your account, to-dos, saved places, home base, and route data |
| Vercel | Hosts our backend and this website | Standard request/server logs (IP address, timestamps) |
We may also disclose data if required by law, to enforce our Terms & Conditions, or to protect the rights, property, or safety of our users or the public.
5. Where your data is stored
Your account and app data are stored in a Postgres database hosted in Mumbai, India (AWS region ap-south-1). Some processing by Google and Clerk may take place on their infrastructure elsewhere in the world as part of how those services operate globally.
6. How long we keep your data
We keep your data for as long as your account exists. Deleting a single to-do or saved place removes it from the app immediately; behind the scenes we keep a brief soft-deleted record before it's cleared out. Deleting your account (below) permanently and immediately removes everything.
7. Your rights and choices
- Access and correction. Edit your to-dos, saved places, and home address directly in the app at any time.
- Deletion of specific items. Delete any to-do or saved place from within the app.
- Account deletion. See the dedicated section below.
- Location permission. Revoke it anytime in your device Settings.
- Data export. We don't yet have a self-serve export tool. Email admin@ghoomar.tech and we'll send you a copy of your data.
If you're in the UK or European Economic Area, you have rights under GDPR to access, correct, erase, restrict, or port your data, to object to certain processing, and to withdraw consent at any time. Our legal basis for processing account and content data is performance of a contract with you (providing the app); for location data specifically, it's your consent, given when you grant the location permission. You also have the right to lodge a complaint with your local data protection authority.
If you're a California resident, the CCPA gives you the right to know what personal information we collect, to request its deletion, to correct it, and to not be discriminated against for exercising these rights. We do not sell or "share" (as CCPA defines that term) your personal information.
8. Deleting your account and data
In the app: go to Settings → Delete Account, then type "DELETE" to confirm. This immediately and permanently deletes your to-dos, saved places, home location, and route history, and deletes your sign-in identity. This cannot be undone.
Can't open the app? Email admin@ghoomar.tech from the address on your account and we'll delete your account and all associated data within 30 days.
Settings also has a separate "Reset app" option. That one only clears the app's local on-device cache and sign-in state and signs you out — it does not delete anything from our servers. If you want your account and data actually removed, use Delete Account, not Reset app.
9. Children's privacy
Ghoomar is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we'll delete it.
10. Security
We use industry-standard measures — encrypted connections (HTTPS/TLS) between the app and our servers, and access controls on our database and hosting accounts — to protect your data. No method of transmission or storage is perfectly secure, and we can't guarantee absolute security.
11. Changes to this policy
If we make material changes to this policy, we'll update the "Last updated" date above and, where appropriate, notify you in the app or by email.
12. Contact us
Questions about this policy or your data: admin@ghoomar.tech.