Privacy policy

Last updated 2026-09-06

Cityroam is a ride-tracking app for electric boards and scooters, built and operated by an individual developer (Christian Toledo), not a company. This page explains what data Cityroam collects, how it's stored, who it's shared with, and how to have it deleted.

Account

Cityroam accounts are issued by the developer directly — there is no public sign-up. An account is an email address and a password, stored on Cityroam's own self-hosted server, not a third-party cloud vendor's shared infrastructure.

Ride data

Every ride is recorded as a trip: its GPS route, speed, distance, duration, riding mode, and the device's own telemetry (battery level, voltage) sampled during the ride. A trip is written to the phone's local storage the instant it ends, then synced to your Cityroam account when a connection is available.

A deleted trip stays recoverable for 7 days, then is permanently removed from Cityroam's server.

Location

Cityroam only reads location while a ride is actively recording — it runs no continuous location tracking while idle, and the background location watch stops the moment your board or scooter disconnects. Route coordinates are sent to Cityroam's own self-hosted routing service (for road-matching) and to Open-Meteo, a third-party weather service, to attach weather conditions to a ride — Open-Meteo receives only coordinates, never your account, name, or any other identifying information.

Connecting to your board or scooter

Cityroam pairs directly with your device over Bluetooth — no cloud connection is needed to ride or record a trip. For Tynee boards, pairing works by signing in once with the Tuya account that already owns the board, so Cityroam can read the board's own connection keys.

Your Tuya email and password are sent directly to Tuya's own servers to sign in — never to Cityroam's backend, and never stored by Cityroam in any form.

The device's connection keys, once read, are stored only on your phone, encrypted by Android's hardware-backed keystore. They are never uploaded to Cityroam's server or seen by the developer.

Health data

If you grant Android Health Connect permission, Cityroam reads your weight (to sharpen range estimates) and, per ride, heart rate and step data to show alongside that trip. With your permission, Cityroam can also write finished rides back to Health Connect as workouts, so they appear alongside your other exercise data. Health Connect access is entirely optional and can be revoked at any time in Android's settings.

What Cityroam does not do

Cityroam has no advertising, no analytics SDKs, and no data brokers.

Your data is never sold, rented, or shared with advertisers or marketers.

The only outside services Cityroam talks to are the ones described above (Tuya, for board pairing; Open-Meteo, for weather) — both receive the minimum data needed to do that one job, nothing more.

Debug logs

Cityroam keeps a local, on-device debug log of app activity to help diagnose problems. It never leaves your phone automatically — it's only shared if you explicitly choose to send it (e.g. attaching it to a bug report).

Data retention & deletion

Trips and account data are kept for as long as your account exists. Since accounts are issued individually rather than through self-service sign-up, deleting your account and all associated data is done by request — cityroamapp@casa-verde.casa and it will be actioned promptly.

Children

Cityroam is not directed at children and is not knowingly used to collect data from anyone under 13.

Changes to this policy

If this policy changes in a way that affects what data is collected or how it's used, the "Last updated" date above will change and, for a material change, the app will surface a notice on next launch.

Contact

Questions about this policy or your data: cityroamapp@casa-verde.casa