Privacy

Pilot version. Last updated October 2026.

For a plain-language tour of how Rosie keeps your household’s information safe, see Security and trust.

The waitlist

If you join the waitlist, we keep your email address, which sign-up form you used and when you joined. We use it only to tell you when Rosie is ready for your family. We don’t add you to newsletters, share it or sell it.

To be taken off the waitlist, email hello@rosiemyrobot.com and we’ll delete your address. Your waitlist entry is kept separately from a Rosie account, so deleting your account doesn’t remove it; just ask.

What Rosie reads

With your permission, Rosie gets read-only access to your Gmail. Once a day she reads the last 24 hours of messages to write your morning briefing. Gmail’s promotions, social and forum tabs are skipped, and obvious bulk mail is filtered out before anything else happens.

What Rosie keeps

Rosie does not store your emails. Email text is held in memory only while your briefing is being written, then discarded.

She keeps:

• your name, email address, time zone and briefing time
• each briefing she writes: her short summaries, titles, due dates and suggested to-dos, plus the Gmail message IDs that let you open the original email
• how many promotional emails she left out
• any feedback you send about a briefing
• the things you mark as done, so Rosie stops bringing them up
• if you’re in a household: the shared board’s summaries, who has seen each item, who is on it, and the items you chose to keep private (as Gmail message IDs only)
• your Google access token, encrypted (AES-256-GCM)

During the pilot, briefings are kept until you delete your data, so you can look back at them.

You can see all of it, explained in plain words with the exact stored values, under Your data in the app, and download it as a file.

Anonymous counts

To learn what families need most, Rosie keeps simple counts from each briefing: how many items were about school, bills, appointments or family, whether they needed you, and the general kind of action (for example “pay” or “sign or submit”). These counts contain no email content, titles, names or email addresses. They carry a scrambled key that can’t be turned back into your account, which is removed if you delete your account.

Where it’s stored

Rosie runs on Vercel, and her database is hosted by Neon in the United States. Connections are encrypted in transit.

Who sees your data

Only you can see your briefings.

Households. If you invite a partner, or accept an invite, you link up as a household. Rosie then decides whether each item is household business (school, home bills, the children’s appointments, family plans) or personal. Personal is the default. Household items are shared with the other adults in your household as Rosie’s short summary, along with whose inbox it came from, whether each person has looked at it in Rosie, who is handling it or marked it done, and when someone replied in its email thread. Your emails themselves are never shared, and only you can open them. You can keep any shared item private, turn automatic sharing off so Rosie asks you first, or leave the household; leaving, clearing your history or deleting your account removes everything from your inbox from the household board.

To invite someone, Rosie keeps their email address and the invite (the link itself is stored encrypted, so you can copy it again) until it’s used, cancelled or the household is deleted.

To write your briefing, the text of your recent (filtered) emails is sent to Anthropic’s Claude API for processing. Your briefing email is delivered by our email provider. We don’t sell your data or use it for advertising.

Rosie’s use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies

Rosie uses one sign-in cookie to keep you signed in for up to 30 days, plus a short-lived one during Google sign-in. No advertising or tracking cookies.

What Rosie never does

She never sends, deletes, moves or changes your email.

Deleting your data

To delete what Rosie has saved but keep using her, choose “Clear my briefing history” in the app. This deletes every saved briefing, your feedback and the things you’ve marked done, and keeps your account and Gmail connection.

Choose “Disconnect and delete my data” in the app at any time. This revokes Rosie’s Google access and deletes your account, every briefing and all your feedback straight away. The anonymous counts described above stay in our totals with nothing linking them to you. You can also remove Rosie from your Google account’s security settings.

Questions

Email hello@rosiemyrobot.com.