Privacy Policy

Roshii is operated by an individual, not a company. Its operator is the data controller for everything described here and can be reached at hello@roshii.io.

Only what the app needs to work. There is nothing collected in the background.

• Your account. Email address, a hashed password (never the password itself), the display name you choose, and the time zone your browser reports, which is what decides when your day rolls over.
• What you are working on. Goals, tasks, deadlines, whether you completed or skipped each one, and your streak.
• Your conversations. Every message you send the guide and every reply, along with a short summary written at the end of each day and a running description of how you tend to work, which the guide uses to sound like it remembers you.
• Your onboarding answers. What you told us in the opening questions.
• Reminders, only if you turn them on. For each device you allow, the push address your browser gives us and the keys that encrypt what we send to it, plus a record of which days a reminder was sent. We use the times you finish tasks, already listed above, to work out when your reminder should arrive.

Roshii does not ask for your real name, your address, your phone number, or your location, and there is nowhere to enter them. It does not read your contacts, calendar, or files. If you make an optional in-app purchase, your payment details go to Apple, never to us — see section 5.

People tell an accountability guide about their health, their moods, their work, and their worst days. Anything you type into the chat is stored, including that. If a message looks like you are struggling badly, the app flags it so the guide answers with support instead of coaching, and that flag is stored on the message. It is used to keep a hard day out of the long term description of how you work, and for nothing else. No human is notified, and no human reads it.

We would rather you knew that than found it out later. If there is something you would not want stored, do not type it.

We process your account details and your goals, tasks and messages to give you the service you asked for, which is the performance of our agreement with you. Where what you write reveals something about your health, we rely on your explicit consent, given by the second tick box at signup, which asks about exactly that and nothing else. You can withdraw that consent at any time by clearing your chat history or deleting your account. We keep a small amount of technical information, such as rate limit counts, because we have a legitimate interest in the service not being abused.

A small number of companies process data on our behalf, plus a push service if you turn on reminders and Apple if you make an in-app purchase (both below), and no one else. We do not sell your data, share it for advertising, or hand it to anyone for their own purposes.

• Anthropic PBC (United States) runs the model behind the guide. Your message, your recent conversation, your goals and tasks, and the description of how you work are sent to Anthropic each time the guide replies or generates a plan. Under Anthropic's commercial terms this is not used to train their models. Anthropic keeps a copy for 30 days, which its staff may access for safety and security purposes, and then deletes it. If their automated safety systems flag a conversation, they may keep it for up to two years.
• Supabase hosts the database. Everything above is stored there, on servers in Mumbai, India.
• Render hosts the app itself, on servers in Singapore. Its logs record requests and errors.

If you turn on reminders, another party is involved: the push service run by the maker of your browser, which is Google, Apple, Mozilla, or Microsoft. It receives the push address for your device and delivers each reminder to it. What it carries is encrypted and says only that you have tasks open or a streak going, never what a task is called.

If you make an in-app purchase, Apple processes the payment and holds your payment details; we never receive or see them. RevenueCat confirms the purchase with Apple on our behalf and tells us only that the purchase happened, tied to an anonymous purchase identifier, not your name or card details.

We may also disclose data if the law genuinely requires it, or to protect someone from serious harm. If that ever happens we will tell you unless we are forbidden from doing so.

Because of the above, your data leaves the country you are in. It is stored in India, processed in Singapore, and sent to the United States for the guide to answer. If you are in the UK or the European Economic Area, that is an international transfer, and we rely on the standard contractual clauses in our providers' terms to make it lawful. If you are not comfortable with your data being handled in those places, Roshii is not for you.

One cookie: a session cookie that keeps you signed in. It is HTTP only, sent only over HTTPS, and it lasts thirty days. It is strictly necessary for the app to work, which is why there is no cookie banner. There are no analytics cookies, no advertising cookies, no tracking pixels, and no third party scripts or fonts on any page.

Your account data, tasks, goals and daily summaries are kept for as long as your account exists, because the guide's memory is the product. Your chat messages themselves are deleted automatically once they are six months old; the guide still remembers those days through their daily summary. If you do not use Roshii for twelve months, we email you a warning, and thirty days later we delete your account and everything in it unless you have signed in since. When you delete your account, all of it is deleted immediately from the live database, with no recovery period and no archived copy held by us. Provider backups may hold a copy for a short period before they roll over. Anthropic's own 30-day copy of the messages already sent to it is separate from those backups, and is not something we can delete early; it ages out on its own.

The record of which days a reminder was sent is deleted after 90 days. A device's push address is deleted when you log out on that device, when its push service tells us it no longer works, or when you delete your account. Turning reminders off in Settings stops them on every device.

Clearing your conversation in Settings deletes those messages the same way.

Your tasks, goals, streak and report are on the dashboard. You also have the right to see everything else Roshii holds about you, including every past conversation, the daily summaries, the description of how you tend to work, the flags on hard moments, your onboarding answers and goals you deleted, to have any of it corrected or deleted, and to get a copy of all of it as one file. Beyond that you have the right to restrict or object to what we do with your data, and to withdraw consent. Depending on where you live these rights come from the UK or EU GDPR, from California law, or from local law, and we apply them to everybody rather than checking where you are first.

Deleting your account is a button in Settings. It erases all of your data at once, and it cannot be undone. For anything else, including a copy of your data, write to hello@roshii.io and we will answer within thirty days. We will never charge you for asking, and we will never treat you differently for having asked. If you are unhappy with how we handled it, you can complain to your local data protection authority. The two sections below spell this out for the UK and Europe, and for the United States.

The UK and EU GDPR apply to you, and this section says how.

• Controller. The individual operator of Roshii, reachable at hello@roshii.io. Roshii is operated by an individual, not a company, so there is no registered office to name.
• Legal bases. Article 6(1)(b), performance of our contract with you, for your account, goals, tasks and messages. Article 6(1)(f), our legitimate interest in the service not being abused, for rate limiting and error logs. Article 9(2)(a), your explicit consent, for anything you write that reveals your health, given by the second tick box at signup, which is separate from your acceptance of the terms. Article 6(1)(a), your consent, for reminders, given when you say yes in the app and again in your browser's own prompt.
• Withdrawing consent. Clear your chat history, ask us at hello@roshii.io to delete what you choose, or delete your account. For reminders, turn them off in Settings or block notifications in your browser. Both take effect immediately. Withdrawing does not undo processing that already happened, and it does not affect your account details, which we hold under the contract.
• Your rights. Access, rectification, erasure, restriction, objection, portability, and withdrawal of consent. Erasure of everything at once is the Delete account button in Settings. For any of the others, write to hello@roshii.io and we will answer within one month.
• Automated decision-making. Roshii generates task suggestions, plans, and a description of how you tend to work. None of it produces a legal effect or anything similarly significant for you, so Article 22 does not apply. No decision about you is made by the app that you cannot simply ignore.
• Transfers. Your data goes to India, Singapore, and the United States. None of those has a UK or EU adequacy decision covering this arrangement, so we rely on the standard contractual clauses in our providers' terms, together with the technical measures in section 13 below.
• Complaints. Your national supervisory authority, or the Information Commissioner's Office in the UK. Please try us first.

We have not appointed an Article 27 representative in the EU or the UK. If Roshii grows to need one, we will appoint one and name them here. Until then, you, and your supervisory authority, can reach us directly at hello@roshii.io.

HIPAA does not apply to Roshii. We are not a healthcare provider, a health plan, or a business associate of one. What you tell Roshii does not carry the protections that medical records carry, which is another reason not to type anything into it you would not want stored.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We never have. There is no advertising in Roshii, no analytics, and no third party trackers, so there is nothing to opt out of and no Global Privacy Control signal for us to act on. If that ever changes, we will say so here first and give you a way to opt out before it starts.

Under California law, and under the comparable laws of Colorado, Connecticut, Virginia, Texas, Oregon, Montana and other states, you have the right to know what we collect, to get a copy of it, to correct it, and to have it deleted. The categories we collect are listed in section 2, why we collect them in section 4, and who receives them in section 5. We collect sensitive personal information, because what you write to the guide can reveal your health. We use it only to provide the service you asked for, never to infer characteristics about you for anyone else's purposes, and you consented to that separately at signup.

Exercise any of these by writing to hello@roshii.io, or delete everything yourself with the Delete account button in Settings. We will not charge you, will not make the service worse for you, and will not ask you a second time to talk you out of it. If you want an authorised agent to act for you, send us their written permission. We may ask you to confirm the request from your account's email address, which is the only way we can tell it is you.

This section is for people in Washington State, under the My Health My Data Act, and in Nevada, and it applies to everybody else too because it is easier to keep one promise than two.

• What we collect. What you write to the guide, which may describe your physical or mental health, your moods, your sleep, your habits, or your treatment. Plus the flag the app sets on a message that appears to describe a crisis.
• Why. Only to give you the service: so the guide can reply, so it remembers what you told it, and so a hard day is kept out of the long term description of how you work. Nothing else.
• Who gets it. Anthropic, Supabase, and Render, as processors acting on our instructions and named in section 5. Nobody else. We do not sell consumer health data, and we will not, which under Washington law would require your separate written authorisation that we will never ask for.
• Your rights. To know what we hold, to get a copy, and to have it deleted, including from our processors. Deleting your account does all of it at once, with one exception outside our control: Anthropic's 30-day copy of messages already sent to it expires on its own schedule. Write to hello@roshii.io if you would rather we did it, and we will confirm when it is done.
• No inferences. We do not use what you write to infer a diagnosis, to score you, or to build a profile for anybody outside the app.

Passwords are stored as salted hashes and cannot be read back. Traffic runs over HTTPS, with HSTS and a content security policy set. Every page that touches your data requires you to be signed in, forms carry cross site request forgery tokens, and every request reads your data by the identity in your session rather than by anything the browser sends. The database is reachable only by the app.

No system is perfectly secure, and we will not pretend otherwise. If a breach happens that puts you at risk, we will tell you and the relevant regulator without undue delay, and within seventy two hours where the law requires it.

Roshii is for people 18 and over. We do not knowingly collect anything from a child. If we learn that a minor has an account we will delete it and everything in it. If you are a parent or guardian and think that has happened, write to hello@roshii.io.

If this policy changes, the version and date at the top change with it, and we will tell you in the app or by email before anything material takes effect.