Storaro's Rome Privacy Notice

Storaro's Rome: Privacy Notice
Version 1.0 · Effective October 21, 2026

This notice explains what information the Storaro's Rome app collects, why, and your choices. The app is run by Almo Enterprises Corp, trading as Storaro Art, 404 SE 9th St, Apt 1, Fort Lauderdale, FL 33316, USA. We are the "controller" of your information. Our website and store are covered by the Storaro Art Privacy Notice. This notice adds the details specific to the app.

1. What we collect

Information	Why	Legal basis (EU/UK)
Email address and password. The password is stored securely by our hosting provider; we never see it.	To create and secure your account, and to confirm your email	Contract
Confirmation status and the date and version of the Terms you accepted	To show you agreed and to keep the app free of fake accounts	Contract; legitimate interests
Your choice about receiving Storaro stories and offers by email	To send marketing only if you said yes	Consent
Partner or guide code, if you arrived through a partner's link	To credit the partner who introduced you	Legitimate interests
Listening activity: which stop you played and when	To understand which stories people enjoy, to plan new narrations, and to report anonymous totals to partners	Legitimate interests
Technical data such as IP address, device and browser type and error logs, collected by our hosting provider	To run, secure and fix the app	Legitimate interests
Location, only if you allow it on your phone	To show where you are on the map and the stops near you	Consent

Location. Your location is used in the app while it is open. We do not save a history of your movements, and we do not sell location data. You can switch it off any time in your phone's settings.

No sale. We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

2. Who we share it with

Base44 (app hosting, sign-in and database) and its infrastructure providers process data on our behalf.
Email delivery provider used by Base44 sends confirmation and password emails.
Shopify: if you open storaroart.com from the app, the store's privacy notice applies. Purchases made after a partner link are credited to that partner through our affiliate system (GoAffPro).
Partners and guides receive only commission information and anonymous totals, such as how many people listened at a stop. They do not receive your email unless you separately agree.
Authorities, when the law requires it.
A buyer or successor, if our business is sold or reorganised.

3. How long we keep it

Account information is kept while your account is open, and deleted or anonymised within 30 days after you ask us to close it.
Listening records linked to you are kept for up to 24 months, then deleted or anonymised.
Records of your consent, and of the Terms you accepted, may be kept as long as needed to prove them.

4. Your rights

Depending on where you live, including under the EU and UK GDPR, the California CCPA/CPRA and the Florida Digital Bill of Rights where they apply, you can:

ask for a copy of your data;
correct it;
delete it or your account;
move it to another service;
object to or restrict certain uses;
withdraw consent at any time.

Write to sales@storaroart.com from the email on your account, and we will reply within 30 days. To stop marketing emails, use the unsubscribe link in any email. EU and UK users may also complain to their data protection authority. In Italy, that is the Garante per la protezione dei dati personali.

5. International transfers

We are based in the United States, and the app's service providers may process data in the United States and other countries. Where EU or UK law requires it, transfers rely on safeguards such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework, where the provider participates.

6. Children

The app is for people aged 16 and over, and users under 18 need a parent's or guardian's permission. We do not knowingly collect information from children under 13. If you believe a child has given us information, contact us and we will delete it.

7. Security

We use reasonable technical and organisational measures, and our providers use encrypted connections. No system is completely secure, so please use a strong password that you do not use elsewhere.