Privacy Policy

This policy explains what MyRoshi collects and how it is handled. MyRoshi is operated by Saravanakumar D, an individual sole proprietor based in Bengaluru, India ("we", "us"), who is the data controller. Contact: myroshi.app@gmail.com.

The short version

Your practice content is encrypted with a key that lives only in your browser — we cannot read your reflections, journals, or generated talks. We never see your card details. We don't sell your data or show ads. We collect the minimum needed to run the Service.

What we collect

• Account: your email address (via Google sign-in or a one-time email code) and basic account status.
• Payment: handled entirely by our Merchant of Record, Paddle. We receive a subscription status and a transaction ID — we never receive or store your card details.
• Your practice content (spoken/typed reflections, journals, generated talks, custom voices): stored encrypted in a per-user vault. The decryption key is held only in your browser; we cannot read this content.
• Voice recordings: a recording you make is uploaded, transcribed, and then deleted — it is not written to our server's disk and the temporary copy is removed after processing.
• Usage analytics: aggregate, non-identifying counts (e.g. how many people used a feature on a day) and anonymous website visit counts. No per-person browsing history, no content.

How your reflection is processed

To generate a talk, your reflection is transcribed and sent, together with reference texts, to our AI model provider for that single generation. It is used only to produce your talk and is not used to train models. The resulting talk is returned to you and stored encrypted.

Why we use your data

• To provide and secure the Service and your account.
• To take payment and manage your subscription (via Paddle).
• To understand aggregate usage and improve the Service.
• To contact you about your account, billing, or important changes.

Who we share with (processors)

• Paddle — payments, tax, invoicing, refunds (Merchant of Record).
• Google — sign-in.
• Cloudflare — website and app delivery, security, and temporary audio storage.
• An AI model provider — transient generation of your talks.

We do not sell your personal data.

International transfers

The Service runs on infrastructure in India and on global providers (Cloudflare, Google, Paddle, and our AI provider) that may process data outside your country, including in the United States and the EU. Where required, transfers rely on appropriate safeguards.

Retention

Encrypted practice content is kept until you delete it or close your account. Temporary audio is deleted right after processing. Aggregate analytics are retained in non-identifying form. Billing records are retained by Paddle as required for tax and accounting.

Your rights

Depending on where you live (including under the EU/UK GDPR and India's Digital Personal Data Protection Act, 2023), you may have rights to access, correct, delete, or export your personal data, and to object to certain processing. To exercise them, email myroshi.app@gmail.com. Note that because your practice content is encrypted with your own key, we can delete it but cannot read or reproduce it.

Cookies

We use a strictly necessary cookie to keep you signed in. Paddle and our infrastructure providers may set cookies needed for checkout and security. We do not use advertising cookies.

Children

The Service is not intended for anyone under 18, and we do not knowingly collect data from children.

Changes

We may update this policy; material changes will be posted here with a new "last updated" date.

---