Last updated: 24 September 2026
Operator: Timothy Goode, trading as Goodeboy
Contact: privacy@goodeboy.com
Ronda lets you keep in touch with people you have actually met while
travelling. This policy describes exactly what the app stores, where it goes
and what you can remove. It is written to match what the software does, not to
cover us for things it does not do.
is required.
which city you are in without sending your coordinates anywhere.
and both of you scanned a code. There is no search and no friend requests.
tracking SDK in the app.
with it.
marketing to it.
link, a profile photo, and up to six photos of your trip.
Photos are stored in private buckets. They are never publicly addressable —
each one has to be signed for a specific viewer, and the server only signs it
for someone you have met.
Your device converts its position into a city name on the device itself.
The coordinates are not transmitted to us and we never store them. We hold no
street address, no venue, no accommodation name and no live position.
When the Round map needs to place a city, the app sends the city name —
for example "Hanoi, Vietnam" — to Apple's geocoding service to get that
city's location. That is a fact about the world, not about you.
You can switch off city sharing, or hide yourself entirely, at any time in
You → Who can see you.
there is no way for the other person to read them.
connected.
18, so we record that you confirmed and when. We do not ask for or store
your date of birth.
Precise or background location, your contacts, your photo library beyond the
images you choose, your full name, your date of birth, payment details,
advertising identifiers, or any behavioural analytics.
| Who | What they handle | Why |
|---|---|---|
| Supabase | Database, authentication, file storage, server functions | Runs the service |
| Apple (APNs) | Push notification delivery | Sends reunion pings |
| Expo | Relays push notifications to Apple | Push delivery |
| Apple (geocoding) | The city name you are looking up | Places cities on the map |
They process this on our instructions to run the app. We do not sell personal
data and we do not share it for advertising.
As long as your account exists. Delete your account and it goes.
Deleting your account removes your profile, photos, city history, trips,
connections, messages, private notes and push tokens.
One thing survives: if you have been reported, the report remains so that a
pattern of behaviour cannot be erased by making a new account. Your identifier
is detached from it, so the record no longer names you.
Depending on where you live you may also have rights to access, correct,
export or restrict the processing of your data. Write to
privacy@goodeboy.com and we will respond within 30 days.
By email, at privacy@goodeboy.com. We answer within 30 days.
If you are not happy with how we handle a privacy matter, you can complain to
the Office of the Australian Information Commissioner at oaic.gov.au.
Ronda is for adults. You must be 18 or over to use it, and you confirm this at
sign-up. If we learn an account belongs to someone under 18 we delete it.
Singapore (AWS ap-southeast-1). If you are outside that region your data is transferred there
to run the service.
If this policy changes materially we will say so in the app before the change
takes effect.