1. Introduction and Scope

Rohy AI ("we," "us," or "our") provides this Privacy Policy to describe our practices regarding the collection, use, disclosure, and retention of information in connection with the artificial-intelligence-enabled journaling and self-reflection platform (the "Service"). By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by the practices described herein. If you do not agree with the terms of this Privacy Policy, you are not authorized to access or use the Service.

2. Categories of Information Collected

We collect information that you provide directly to us and information that is generated or derived through your use of the Service, including without limitation:

Account and profile data: identifiers such as email address, name, and credential information (e.g., hashed password), together with any optional profile or metadata you elect to provide (e.g., telephone number, date of birth, geographic location) in connection with account registration or profile updates.
User-generated content: content that you submit, upload, or transmit to or through the Service, including journal entries, chat messages, and file uploads, which we process for the purpose of providing personalized AI responses and insights.
Usage and technical data: usage metrics (e.g., feature utilization, word counts), device and browser identifiers, IP address, log data, and similar technical information necessary for the operation, security, and improvement of the Service.
Derived and analyzed data: AI-generated analyses, inferred personality and emotional patterns, mental wellness summaries, emotional scores, and other structured insights produced from or derived from your content, which may be stored for personalization and used in aggregated or de-identified form for analytics and product improvement.
AI-generated analysis: journal analysis, personality modeling, behavioral data processing, emotional scoring, AI insights and predictions, and future trajectory simulations.
Voice transcription: speech-to-text data from voice journaling and personality quiz voice input.
Stored personality profiles: AI-extracted personality traits, emotional patterns, and behavioral profiles.
Shareable insight cards: when you share AI-generated insight cards, the shared content may be visible to recipients; sharing is at your discretion.
Push notification endpoints: device descriptors, securely generated VAPID endpoints, and Apple Push Notification service (APNs) cryptographic tokens required for transmitting opt-in cross-platform messaging workflows securely to your remote devices.

3. Purposes of Processing

We process the information described above for the following purposes:

To provide, maintain, operate, and improve the Service, including personalized AI responses and journal analysis.
To build, update, and maintain AI-extracted or inferred profile data (e.g., inferred traits, preferences, communication style) for personalization over time.
To produce internal psychological, sentiment, and mental-state summaries for use within the Service and for analytics and product improvement in aggregated or de-identified form where applicable.
To process payments, enforce our Terms of Service, and comply with legal and regulatory obligations.
To send service-related communications (e.g., verification emails, password resets) and, where consent is required by applicable law, marketing communications.
To transmit timely push notifications—including systemically scheduled daily journaling cadences, behavioral reminders, and AI-generated reflective insights—directly to your authorized, participating device endpoints.
To protect against fraud, abuse, security incidents, and other harmful activity.

5. Data Security and User Consent

We implement technical and organizational measures designed to protect the security, integrity, and confidentiality of your information, including encryption in transit and at rest, access controls, and secure development practices. AI personality simulation features, journal analysis, emotional scoring, and related processing are performed subject to your consent, which you provide by creating an account and agreeing to our Terms of Service and this Privacy Policy. Notwithstanding the foregoing, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

6. Data Retention

We retain your account data, User Content, journal entries, chat messages, personality profiles, emotional scores, AI insights, and related data for as long as your account remains active. Our data retention policies apply to: journal data analysis outputs, personality modeling data, behavioral data, voice transcription (where stored), and AI-generated insight cards. Derived analyses and summaries may be retained to support the Service and may be retained following account deletion in de-identified or aggregated form. You may request deletion of your personal data and content as described in Section 8; we will delete or anonymize such data as required by applicable law and our internal retention policies.

7. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights with respect to your personal data, including the right to access, correct, port, or delete your personal data, to object to or restrict certain processing, and to withdraw consent where processing is consent-based. You may update account information through the Service settings and may request data export or deletion by contacting us. We will not discriminate against you for exercising your privacy rights. Residents of California and certain other jurisdictions may have additional rights under applicable state or regional laws.

8. Access and Control of Sensitive Data

Internal psychological, sentiment, and mental-state summaries derived from your journaling and chat activity are used to improve your experience and the Service. Such data is not exposed to unauthorized third parties. Access is restricted to systems and personnel with a legitimate need to access such data for the operation of the Service. You may request access to or deletion of this data by contacting us; we will respond in accordance with applicable law.

9. Cookies and Similar Technologies

We use cookies and similar technologies (e.g., local storage) for authentication, session management, security, and analytics. You may control cookies through your browser settings; however, disabling certain cookies may impair the functionality of the Service.

10. Minors; Parental and Guardian Consent

The Service is not directed to individuals under the age of eighteen (18). Users who have not attained the age of eighteen (18) must obtain the express consent, approval, and supervision of a parent or legal guardian prior to creating an account or using the Service. By creating an account or using the Service, you represent and warrant that you either (a) are at least eighteen (18) years of age, or (b) have obtained such parental or guardian consent. We do not knowingly collect personal information from individuals under eighteen (18) without verified parental or guardian consent. If you believe we have collected personal information from a minor without the requisite consent, please contact us and we will take steps to delete such information promptly.

11. International Data Transfers

Your information may be transferred to, processed in, or stored in the United States or other countries in which we or our service providers maintain operations. By using the Service, you consent to such transfer. We take such measures as we deem appropriate to ensure that your information receives an adequate level of protection in accordance with applicable law.

12. Modifications to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. Material changes may be communicated via email or through a notice within the Service. Your continued use of the Service following the posting of changes shall constitute your acceptance of the revised policy.

13. Contact

For questions regarding this Privacy Policy, to exercise your rights, or to report a concern, please contact us at the email address provided on our website or within the Service.