Privacy Policy

Data controller: Alexandro Ricevuto (VAT IT17928271000, Tax code RCVLND77M20H501P), registered office Via Angelo Olivieri, 31 — 00122 Rome (RM), Italy. Contact: support@secretworlds.it. Governing law: Italy.

HOW TO DELETE YOUR ACCOUNT AND YOUR DATA You can request deletion of your Roadiary account and all associated data at any time. How to request it: send a request to assistenza@secretworlds.it specifying the email address associated with your account. What gets deleted: user profile, camper profile, trips, stops, photos, expenses, journal notes, maintenance reminders and travel companions associated with your account. What is retained: for accounting and tax obligations, we may retain data relating to purchase transactions (Premium) for the period required by applicable law, separately from your deleted profile. The request is fulfilled within 30 days.

1. DATA CONTROLLER The controller of data collected via the Roadiary application ("the App") is Alexandro Ricevuto (VAT IT17928271000, Tax code RCVLND77M20H501P), with registered office in Via Angelo Olivieri, 31 — 00122 Rome (RM), Italy, contactable at support@secretworlds.it for any request relating to this policy or to exercise the rights described below.

2. WHAT DATA WE COLLECT The App collects the following categories of data, needed for it to work: • Account data: email address, password (encrypted), preferred language, units of measure, currency. • Camper profile data: name, photo, make, model, year, number plate, purchase date, total vehicle mileage, camper's home base. • Trip data: name, dates, status of trips; stops with place names, geographic coordinates (when entered by the user or via geolocation), notes, photos; distances travelled (manual or calculated via an external service). • Financial data: trip expenses (amount, category, date, receipt photos), expense splitting data with travel companions (only names entered by the user). • Maintenance data: work performed on the vehicle, deadline reminders, attached documents/photos. • Location data (GPS): collected exclusively upon voluntary and explicit user action ("Use my current location" feature or manual entry of a place converted into coordinates via autocomplete). No continuous or background tracking. Legal basis: specific consent, separate from the general acceptance of the Terms of Service.

3. WHY WE COLLECT THIS DATA • Provide App features (trips, expenses, maintenance): performance of the contract • Automatically calculate distances (Premium feature): performance of the contract, on explicit user action • Notifications about maintenance/trip deadlines: performance of the contract / legitimate interest • Manage the Premium subscription: performance of the contract • Improve the App: legitimate interest We do not use data for third-party marketing, we do not sell it, we do not share it with advertisers.

4. THIRD-PARTY PROVIDERS AND DATA TRANSFERS OUTSIDE THE EU • Supabase, Inc. / Lovable Cloud (database, authentication, photo storage, server functions): runs on Amazon Web Services (AWS), servers in the United States (Ohio region, us-east-2). Extra-EEA data transfer based on Standard Contractual Clauses (SCC) and/or AWS's adherence to the EU-US Data Privacy Framework. • OpenRouteService (HeiGIT, University of Heidelberg, Germany): receives place names/coordinates to calculate distances and suggest addresses. Processing on European infrastructure. We do not share data with other third parties, we do not sell it, we do not use it for advertising.

5. DATA RETENTION Data is retained for the entire duration of the account. On deletion, removed within a reasonable timeframe, subject to legal obligations.

6. DATA SECURITY Appropriate technical measures: encrypted connections, secure authentication, database-level security rules preventing one user from seeing another's data.

7. YOUR RIGHTS Right of access, rectification, erasure, restriction, portability, objection, complaint to the Italian Data Protection Authority (www.garanteprivacy.it) or your local EU data protection authority. To exercise them: support@secretworlds.it. The App also provides account deletion and data export from Settings.

8. CHILDREN'S DATA The App is not intended for people under 16. We do not knowingly collect data from minors.

9. CHANGES TO THIS POLICY We reserve the right to update this Privacy Policy, with in-app or email notice for substantial changes.

10. WEBSITE COOKIES This website (roadiary.com) uses technical and analytics cookies. For full details on cookies, Google Analytics and Meta Pixel used on the landing page, see our dedicated Cookie Policy: /cookie-policy-en