Buying in the app
The app calls ROBRouter.buy(minTokensOut, to) with ETH. The ROBRouter buys on the Pons curve (or the Uniswap v4 pool after graduation) and shields the result straight into the ROBVault, credited to you. With buyToStealth, the purchase lands on a fresh stealth address instead.
Buying elsewhere
ROB is a plain ERC-20, so any wallet, aggregator or the Pons site can buy it. That ROB is public until you shield it.
Slippage
The app quotes the trade first and passes a minimum output. If the price moves past it, the transaction reverts and nothing is spent.