Privacy Policy

Rova ("we", "us") is a map of wellness studios in Brisbane, Australia. This policy explains what personal information we collect when you use rova.club, how we use it, and the choices you have. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

What we collect

• Your account: your email address and a password. Your password is stored by our sign-in provider in scrambled (hashed) form. We can't see it.
• What you do on Rova: the studios you like or save, and the studios, suburbs and categories you search for or open.
• Profile photo (optional): if you upload one, we store a small square copy. It's kept in a public storage location, so anyone with the image's web address could view it. Only upload a photo you're happy to share. Choosing a different icon or asking us to delete your account removes it.
• Studio photos you add: the photo (shrunk on your device, with location data removed), which studio it is for, and the account that added it. Approved photos are shown publicly with the credit "a Rova member", and your name or email is not shown.
• Waitlist and city votes: the email address you give us when you join the Brisbane list, and any cities you vote for.
• Messages: anything you email to us, such as a request to add a studio.
• Technical and usage data: pages viewed, buttons tapped, browser and device type, approximate location from your IP address, and referring page. We collect this through Google Analytics and our hosting provider.

We don't ask for payment details, because you book and pay with each studio directly. We don't collect your precise location.

Why we use it

• To create and run your account, and to keep your likes and saved studios for you.
• To send emails you need, such as confirming your account or resetting your password.
• To tell you when Rova opens in your area or when studios you care about add information, if you joined the list.
• To understand how the site is used so we can fix problems and improve it.
• To keep Rova secure and prevent misuse.

Cookies and local storage

We keep a sign-in token in your browser's local storage so you stay logged in, and a cookie if you unlock the private preview. Google Analytics uses cookies to measure traffic. We don't use advertising cookies. You can block or clear cookies and site data in your browser settings, but some features, such as staying logged in, may stop working.

Who we share it with

We don't sell your personal information. We share it only with service providers who help us run Rova, and only as needed to do so:

• Supabase for our database and sign-in.
• Vercel for hosting the website.
• Google Analytics for usage statistics.
• An email delivery service for account and list emails.
• OpenFreeMap, which supplies the map images, so your browser contacts it when a map loads (it sees your IP address, like any website).

We may also share information if the law requires it, or to protect the rights and safety of Rova, our users or others.

Storage outside Australia

These providers may store or process information on servers outside Australia, including in the United States and Singapore. We choose providers with appropriate security practices, but by using Rova you understand your information may be handled overseas.

How long we keep it

We keep your account and saved studios while your account is open. If you ask us to delete your account, we'll delete your account details and your likes and saves. Waitlist emails are kept until you ask us to remove you or the list is no longer needed. Some analytics data is kept in anonymous form.

Security

We use reputable providers, encrypted connections (HTTPS), and access rules so that you can only see your own account data. No online service is completely secure, so please use a strong, unique password.

Your choices and rights

• Ask to see the personal information we hold about you, or to correct it.
• Ask us to delete your account and the information linked to it.
• Unsubscribe from any email by replying to it or using the link in it.

Email info@rova.club and we'll respond within a reasonable time, usually 30 days. If you're not happy with how we've handled your information, you can complain to us first, and then to the Office of the Australian Information Commissioner at oaic.gov.au.

Children

Rova is not meant for people under 16. If you think a child has given us personal information, tell us and we'll delete it.

Changes to this policy

We may update this policy as Rova grows. We'll change the date at the top, and for significant changes we'll tell you on the site or by email.

Contact

Rova, Brisbane, Queensland, Australia. info@rova.club