Your household’s information, handled with care.

No. Rosie asks Google for read-only Gmail access, and that’s all Google gives her. She has no permission to send, delete, move, label or change anything, so she couldn’t even if she tried. Google shows you exactly this permission before you agree.

Email is where most family admin lands: school notes, bills, appointments and plans. Rosie reads the last day of it each morning so she can pull out the few things that matter and save you digging through the rest.

Only messages from the last 24 hours, once a day. Before anything else happens:

• Gmail’s Promotions, Social and Forums tabs are skipped entirely.
• Obvious bulk mail, like store newsletters, is filtered out by simple rules.
• Work email, shopping and personal conversations that aren’t household logistics are left out of your briefing.

Not without asking you first. Rosie starts by only watching and reporting. Later features, like reminders, calendar suggestions or drafted replies, will each arrive as a separate step that you choose to turn on, and every action will need your clear go-ahead. We call this the trust ladder: Rosie earns each step.

No. Email text is held in memory only while your briefing is being written, then discarded. Rosie keeps her own short summaries (a title, a sentence, a due date and any to-do) and the Gmail message ID, so the “See the email” link can open the original in your own Gmail.

• Your name, email address, time zone and briefing time
• Your briefings: Rosie’s summaries and the Gmail message IDs they came from
• Any feedback you give on a briefing
• Your Google access token, encrypted

Yes. Everything travels over encrypted connections (HTTPS and TLS). The token that lets Rosie read your Gmail is also encrypted on its own with AES-256-GCM before it’s saved, so it isn’t usable even to someone looking directly at the database.

Rosie runs on Vercel, and her database is hosted by Neon in the United States.

During the pilot, your briefings are kept until you delete your data, so you can look back at them. Your account stays until you delete it.

Under Your data in the app, choose Disconnect and delete my data and confirm. In one step Rosie tells Google to cancel her access, then deletes your account, every briefing and all your feedback. Only anonymous counts with nothing linking them to you remain. You can also remove Rosie at any time from the security settings in your Google account.

Yes. Under Your data in the app, choose Clear my briefing history. It deletes every briefing Rosie has saved, your feedback and your list of things marked done. Your account, settings and Gmail connection stay, so your next briefing still arrives. Go to your data controls

Only anonymous counts, so we can learn what families need most: how many items were about school, bills, appointments or family, and the general kind of action, like “pay” or “sign or submit”. No email content, titles, names or addresses are counted, and nothing in them points back to you once your account is deleted.

No, never. Rosie has no ads and no tracking cookies. Her use of data from Google follows Google’s API Services User Data Policy, including its Limited Use rules.

Rosie uses Anthropic’s Claude AI to read your filtered emails and write the summaries. Your emails are sent to Claude securely for each briefing and aren’t stored by Rosie afterwards. People at Rosie don’t read your emails.

Rosie uses Claude through Anthropic’s commercial API. Under Anthropic’s commercial terms, data sent this way isn’t used to train their models. Rosie doesn’t train any models of her own.

Rosie treats every email as information to summarise, never as instructions to follow. And because her Gmail access is read-only, a sneaky email has nothing to make her do. Rosie also checks every item in your briefing against the real emails it came from and drops anything that doesn’t match, so she can’t list things that aren’t in your inbox.

She will sometimes. When Rosie isn’t sure about a date or amount, she says so rather than guessing, and every item links to the original email so you can check. Each briefing has “Useful”, “Not really” and “You missed something” buttons, and we read that feedback to make her better.

Not unless you link up as a household, and even then never your emails themselves. On your own, you see only the briefing from your own inbox. If you and a partner link up, Rosie shares only clear household things (a school form, a home bill, the kids’ appointments, family plans) as her own short summary on a board you both see. Personal email stays personal, you can keep any shared item private, and you can turn automatic sharing off so Rosie asks first.

On the household board, for each shared thing: Rosie’s summary, whose inbox it came from, whether each of you has looked at it in Rosie, who said “I’ll handle it”, who marked it done, and when someone replied in the email thread (noticed read-only from their own Gmail). Only the person whose inbox it came from can open the email.

If you leave the household, clear your history or delete your account, everything that came from your inbox comes off the board straight away.

Rosie is run by a very small team during the pilot. Access to the database is limited to running and fixing the service, and we don’t look at your briefings unless you ask us to help with one.

Google treats read access to Gmail as sensitive, and rightly so. Until Rosie completes Google’s app verification and an independent security assessment, only families we’ve invited can connect. That’s also why Google may show a notice that the app is in testing.

We keep it only to tell you when it’s your family’s turn. No newsletters, no sharing. Email hello@rosiemyrobot.com if you’d like it removed.

Email hello@rosiemyrobot.com. We take every report seriously and will reply quickly.