VrooMate Privacy Policy

Effective date: 28 October 2026 | Operator: Harish Babu Sammeta, trading as ZesToraX | Contact: support@zestorax.com

Who operates VrooMate

Harish Babu Sammeta operates VrooMate under the brand ZesToraX. Our app page is https://zestorax.com/vroomate/. For privacy questions and access, correction or deletion requests, email support@zestorax.com.

Adults and account information

VrooMate is for people aged 18 or older. Account setup uses your name, nickname, selected numeric age, gender preference, contact email, profile photo, conversation language, interests and reasons for using the app. Some older profiles retain an age band or date of birth. Age is self-reported, not independently verified. A typed contact email is not automatically a verified login identity. Phone verification and optional authenticated Google linking establish account identity. Google processes phone numbers for verification and spam and abuse prevention across its services. We record policy acceptance and its time.

Speech, conversations and personalization

The microphone is used during a session you start. In the text-input calling mode, the Android speech service converts speech to text; this service can process audio on-device or remotely. VrooMate sends finalized text and conversation context to Google AI, which returns speech and captions. In a separately enabled direct-audio mode, microphone audio is sent to Google AI. VrooMate does not persist raw microphone or generated-call audio recordings on its backend. Provider processing and retention are governed by the applicable provider terms and account settings; this policy does not promise offline recognition or zero provider retention.

We store bounded recent text messages, replies, character memories, language/style preferences and saved ways each companion addresses you. Your interests, purposes, age and relationship selections help personalize replies. Each character has separate memory; an explicit switch may pass the recent topic for continuity. This is not an unlimited archive. Account-specific text history is also cached on your device. Avoid sharing passwords, verification codes, payment-card details or unnecessary sensitive information.

Photos, location and journeys

My Day and Vehicle Help send an image only after you choose or capture it, preview it and press Send. Images are resized and re-encoded before Google AI processing. VrooMate does not persist these activity image files; text captions, photo-shared indicators and replies remain in activity history. Profile photos are stored with your account. The system picker avoids broad photo-library access; camera use requests permission separately.

Location is requested for nearby places, maps, routes and navigation. Google Maps, Places and Routes process the coordinates and queries needed for those actions. Saved journeys and recent results are stored with your account; results may be cached briefly. Location is not required for ordinary conversation. Navigation can use foreground guidance while running. No idle background-location tracking or background-location permission is implemented.

Device permissions

Microphone, Bluetooth/headset and audio permissions support conversation and routing. An active foreground microphone session can show an Android notification with an End action. Session continuation depends on the calling mode and Android restrictions. Optional phone-state access observes idle, ringing or in-call state locally to pause or resume audio; it does not collect telephone numbers, telephone call audio or call logs. You can revoke permissions in Android settings, which can limit related features.

Payments, notifications and reports

Google Play processes purchases. We receive product IDs, purchase tokens, order/verification status, account-binding identifiers, point grants, grant expiry and usage records to credit points, reconcile retries and handle refunds. We do not receive your full payment-card number. Keyed phone identity and hashed verified-email ownership markers help prevent duplicate trials and starter purchases.

The account inbox stores notification text and read status. Optional Google push notifications use a device registration token bound to your account. Opt-out and sign-out remove or rebind tokens where connectivity permits. Push payloads contain generic updates rather than conversation contents. Reminders follow your settings and applicable quiet times; permission does not guarantee delivery. Inbox entries expire after 24 hours, with deletion by scheduled cleanup. Purchase records follow their separate retention rules.

If you submit feedback or an AI report, we store your concern and only any reply excerpt you choose to include. Reports are linked to your account for review and are not automatically emailed. Optional verified receipt email uses Resend when transactional email is configured. Google security and crash-reporting services process app-integrity signals and device/crash diagnostics when enabled. No advertising SDK is included in this app source.

Providers and security

Google provides authentication, account storage, hosting, app integrity, crash reporting, AI, search, maps, push and payment services. The backend is hosted on Google hosting services in asia-south1 (Mumbai); other Google services may process data in their configured or global regions. Device speech/read-aloud providers and, when enabled, Resend also process the information needed for their functions. Processing can occur outside your country under the providers' applicable service and data-processing terms. AI processing follows the configured paid-service terms and account settings; check Google's current terms for its own processing practices. We use encrypted transport and access controls; no system guarantees absolute security.

Retention and deletion

Account data remains while your account is active unless you clear supported history or memory. In-app account deletion schedules removal of active account data after a 30-day grace period; cancellation is available before finalization. Cleanup removes the sign-in account, profile/photo, memories, journeys, reports, notification tokens and pending receipt-email records. In-app deletion clears account caches on the device; uninstalling clears local app storage but does not itself delete a cloud account.

Limited pseudonymous trial and starter-offer eligibility records may remain for fraud prevention for up to two years after account deletion; purchase-verification records may remain for up to seven years after the purchase for billing integrity and applicable recordkeeping. These records are not an anonymous dataset. Operational logs and provider backups follow the configured Google/other provider retention and deletion processes; deleting an active account does not immediately erase independent provider records or backups. Contact us about a specific retention or deletion question.

Your choices and changes

Use Account > Additional settings to edit personal details, interests, purposes, addressing preferences and notification choices, or to request memory/account deletion. If you cannot use the app, email support@zestorax.com with the subject VrooMate account deletion, identifying your account without sending passwords or one-time codes. We verify ownership through authenticated account controls or a secure verification process before acting. We aim to respond within 30 days, subject to applicable law and necessary ownership checks. Applicable privacy rights depend on your location. Material changes will be announced in the app or through the contact details associated with your account, with an updated effective date.