This policy covers the Rollie app, website, and launch lists. Shakil Choudhury, trading as Rollie, is responsible for the personal data described here. Contact support@rollieapp.com about your privacy.
Data on your device
Rollie stores people, notes, memories, interests, reminders, photos, and related information in local account storage. You control the information you add. Local search does not send your search text to a server.
If you import contacts, selected names, contact details, and supported birthdays are copied to Rollie on your device. Import does not enable contacts sync or change your phone's address book.
Voice transcription uses on-device recognition on supported phones. Rollie does not save the audio. The text you choose to keep becomes part of your note.
Rollie does not sync your relationship database between devices or keep it on our servers. You can save a copy of it as a file and keep that file wherever you choose, such as Files, iCloud Drive, or Google Drive. The copy is encrypted with a key kept with your Rollie account. Our servers store the key, never the copy. Your phone's own backup can also include Rollie's database, under your phone's backup settings.
Online suggestions and recaps
Rollie asks for permission before sending note content for online processing. You can change your choice in Settings. If you decline, you can still save and use notes on your device.
Processing can send note text, capture dates, saved names, and relevant saved details. A person's recap can also use linked notes, confirmed details, interests, reminders, birthdays, and recorded contact. This information can include personal data about people you mention.
Convex handles server requests. Vercel routes model requests, and Google and Typesafe AI receive information for processing. These services have their own retention and processing terms. This policy does not promise that their retention is the same as Rollie's temporary storage.
Accounts and purchases
Clerk handles sign-in and account identity. Rollie can hold an account identifier, email address, and profile information in Convex, together with usage limits and processing records.
We use Resend to send a welcome email to your verified account email address. Your device supplies its time zone so we can schedule the email for the next evening. Resend receives the address and message, without your notes or saved contact details. Creating an account does not add you to a marketing list.
When you allow notifications, Rollie keeps a notification code for your phone with your account, unless you turn off Details ready in Settings. When details from a note you saved are ready but the app has not collected them, Rollie sends one alert through Expo and Apple or Google. The alert does not include names or note text. The code is removed when you turn the alerts off, sign out, or delete your account.
Your app store handles payment details. RevenueCat verifies purchases and subscription status. Rollie stores the identifiers and entitlement records needed to provide paid access. Rollie does not receive your full payment card details.
Diagnostics and support
The app shares usage and diagnostic data with PostHog to help us improve Rollie. This is on by default. The welcome screen tells you about it, and you can turn it off at any time under Share usage and diagnostics in Settings or Privacy. Usage data is a short list of events, such as saving a note. Diagnostic data includes an error code and the code location of the error. Both include your app and system versions and a random ID created for this install. They do not include your notes, people or reminders, and they do not identify your account. Turning this off stops sharing and deletes the install ID from your phone.
Rollie's servers send restricted processing information to PostHog, such as error codes, timings, token counts, and estimated processing costs. This does not depend on the app setting and does not include the app's install ID.
Neither includes note text, names, or contact details. Neither records session replays or tracks which screens you use.
If you contact support, we receive your email address and the information you send. Include only what we need to resolve your request.
If you send a message from Help and feedback in the app, we receive the message, your account email address, and, unless you turn it off, your app version, phone model, and system version. Your notes are not attached. We use a private team messaging service to handle these messages. Rollie's own copy is deleted after 30 days or when you delete your account. The messaging service keeps a separate copy until we delete it.
We also use a private team messaging service for account creation and deletion notices. These contain an account identifier, the event and its date, without your notes or contact details. The service keeps these notices until we delete them.
Website analytics
We use PostHog to count website page views, launch list form openings, and signup results by platform. This helps us understand interest in Rollie. These events include browser and device information, but exclude email addresses, written answers, URL query parameters, and page fragments.
Website analytics does not use cookies or browser storage, create person profiles, or record session replays. PostHog receives your IP address and browser information to count visitors using a hash that changes daily. It does not link your visits across days or devices.
Launch emails
If you join the launch list, we store your email address, selected platform, signup date, a record that you joined through the website, whether you offered to beta test, and anything you write about what would make Rollie useful. We use it to notify you when Rollie launches on your selected platform. If you offered to beta test, we may also email you an invitation to the beta and ask for feedback. We use what you write to decide what to build. We also send your written answer, selected platform, beta-testing choice and signup reference to a private team messaging service, without your email address.
We delete the signup within 30 days after the launch notice, or 12 months after signup if that comes first. Email support@rollieapp.com to request earlier removal. The launch list is separate from your Rollie account.
Why we use personal data
We use account and purchase information to provide the service you request and meet our contract with you. We use your consent for the launch email list and for optional processing where consent is required. You can withdraw consent without changing the lawfulness of earlier processing.
We use limited operational information for our legitimate interests in running a secure, reliable service and preventing abuse. We also keep information when the law requires it.
How long data stays
Local relationship data stays until you remove it or clear the app's storage. Signing out does not delete it.
Rollie's servers hold note text and context temporarily to process your note. These inputs are removed when processing finishes or fails. Inputs expire after 24 hours if processing has not finished.
We keep the suggested details and follow-ups only while they wait for your device to download them. Once your device saves the results and confirms delivery, we remove them from Rollie's servers. If delivery is not confirmed, results expire seven days after processing finishes. Scheduled cleanup removes expired content. Limited request metadata, without note text or results, can remain for a further 30 days to prevent duplicate processing. Recap results can remain for seven days.
Account, subscription, and usage records remain as needed to provide the service. Account deletion starts removal of the associated server records. Some billing delivery records can retain an opaque customer identifier for up to 30 days. Stores and other providers may retain their own records under their policies.
Welcome email content, recipient addresses and delivery events held in Convex expire through scheduled cleanup within 31 days. Account deletion removes the account's welcome record and attempts to cancel unsent email. An email already being sent can still arrive. Resend keeps a separate copy under its own retention policy.
After deletion, Rollie keeps a minimal record of account identifiers to prevent old sessions and delayed requests from recreating account data. This record contains no profile details or relationship content.
We keep support correspondence as needed to handle the request and any related dispute or legal duty. Read the account deletion page for the steps and limits of deletion.
Your choices and rights
You can edit or remove information in the app, change your online processing choice, and manage microphone, contacts, and notification permissions in your phone settings.
Depending on the circumstances, UK data protection law gives you rights to access, correct, erase, restrict, object to processing, or receive a portable copy of personal data. Email support@rollieapp.com to make a request. We may need to verify your identity.
We cannot access or remotely erase data held only on your device. This also limits what we can include in a response about local notes.
You can complain to the Information Commissioner's Office.
Age limit and policy changes
Rollie is intended for people aged 18 and over. If you believe a child has opened an account, contact us.
We will update this page when our data practices change. We will give appropriate notice of material changes.