Privacy Policy

Roz is a private, relationship-aware AI secretary that runs on your Mac. It is operated by Bearking LLC (“Bearking,” “we,” “our,” or “us”), a Wyoming limited liability company. This policy explains what we collect, what stays on your device, when anything leaves your Mac, who our providers are, and your rights.

The most important thing to understand about Roz is different from most software you use:

Your data lives on your Mac. Roz reads the sources you permit — like Mail, Calendar, Messages, and WhatsApp — locally, on your device, and stores what it learns in a local, encrypted vault on that device. That content does not leave your Mac unless you choose a plan or feature that requires our servers, and even then only the specific data needed for that feature leaves. We never receive a copy of your inbox, your messages, or your relationship vault.

We never sell your personal information — never have, never will. We do not use your content to train AI models.

Contents

• What runs where: the plans
• What we collect and why
• AI processing and your content
• Diagnostics and crash reports
• Subprocessors
• When we access or disclose information
• Your rights
• What happens to your data if you stop paying, cancel, or delete
• How we secure your data
• Data retention
• Location of data
• Changes and questions

What runs where: the plans

Where your content is processed depends on the plan you choose. This is the heart of Roz’s privacy model, so we spell it out plainly:

In every plan, your account and billing details are handled by our servers (below). What differs is whether the content Roz reasons over stays on your Mac, goes directly to your own provider, or is relayed through us to a provider we manage.

What we collect and why

Our guiding principle is to collect only what we need to run your account and the parts of the service you asked for.

Identity and access. When you create an account, we ask for your name and email address so we can create the account, authenticate you, and send essential service messages. Authentication is handled by our provider WorkOS.

Billing information. If you buy a paid plan or license, your card details are submitted directly to our payment processor, Stripe, and do not touch Bearking servers. We store a record of the transaction — such as the last four digits of the card, billing address, plan, and amount — for invoicing, tax, fraud prevention, and support.

Your local content (on your device — we don’t receive it). Roz reads the sources you connect and builds a local, encrypted vault of what it learns about your people, obligations, and cadence. This is stored on your Mac. We do not have a copy and cannot see it. You control which sources Roz may read, and you can revoke that access at any time in the app.

Prompt content (hosted plans only). On Base and Pro, the specific content needed for a feature — for example, the text Roz needs to draft a reply or brief you on a person — is sent through our relay to an AI provider. See AI processing.

Support correspondence. When you email us, we keep that correspondence so we have context if you reach out again.

Website analytics. Our marketing site (roselyn.ai) uses Fathom Analytics, a privacy-respecting analytics service that does not use cookies, does not build advertising profiles, and does not track you across sites. We do not run session replay.

AI processing and your content

Roz uses large language models to perceive and reason over the content you permit. How that works depends on your plan:

• On-device: the model runs locally on your Mac. Prompts do not leave your device.
• BYOK: Roz sends prompts directly from your Mac to the provider you chose (for example, Anthropic or OpenAI), authenticated with your API key. Those prompts are governed by your agreement with that provider, not this policy, and are not routed through our servers.
• Hosted (Base/Pro): Roz sends the prompt content a feature needs through our relay to an AI provider we manage (Anthropic and/or OpenAI). Our relay does not store the bodies of your prompts. The AI providers process that content to generate a response and may retain it transiently under their own terms (for example, for a limited abuse-monitoring window). We configure our provider accounts to prohibit the use of your content to train their models where that setting is available. We do not — and will not — use your content to train our own models.

We deliberately do not claim “zero retention” end-to-end, because your content briefly passes through third-party AI providers whose retention we do not fully control. We tell you exactly what we do and don’t do so the promise is one we can keep.

Diagnostics and crash reports

Diagnostics and crash reporting are off by default. If you opt in, we collect aggregate, scrubbed technical information to fix bugs and improve reliability — never the content of your sources or vault. You can turn this off at any time.

Subprocessors

We use a small set of third-party providers to run the service. Each processes only the categories of data noted, under a data-processing agreement.

We will keep this list current and update it before adding a subprocessor that materially changes how your data is handled.

When we access or disclose information

No Bearking human looks at your local content — we don’t have it. For the limited account and billing data on our servers, and for hosted-plan prompt content in transit, our access is limited to:

• Support you request. If we need to look at account data to help with a support case, we ask for your consent first.
• Fixing a broken process. On rare occasions an automated process fails and we must look at a minimum amount of data to fix it. We aim to fix the root cause so it doesn’t recur.
• Protecting the service. We review logs and metadata to keep the service and your account secure.
• When required by law. Bearking is a U.S. company and our servers are in the U.S. We disclose data only when compelled by valid U.S. legal process, and we aim to notify you first unless legally prohibited.

If Bearking is ever acquired or merges with another company, we’ll notify you before any personal information is transferred or becomes subject to a different privacy policy.

We do not sell your personal information, and we do not use it for third-party advertising.

Your rights

We strive to apply the same data rights to everyone, regardless of location:

• Access & portability. Export the account data we hold about you as JSON, from your account settings or by request. Your local vault can be exported directly from the app at any time.
• Correction. Ask us to correct account information.
• Deletion. Delete your account and the data we hold: this cancels your subscription, revokes your login, and removes your records from our systems. Deleting your local data is done in the app (or by deleting the app and its vault) and is entirely in your control.
• Restriction / objection. Ask us to limit how we process your information.
• Non-discrimination. We won’t charge you more or give you worse service for exercising these rights (though some requests, like deletion, may end your ability to use the service).

To exercise a right, email privacy@roselyn.ai. We may need to verify your identity first. California residents: Bearking does not meet the CCPA/CPRA business thresholds and does not sell or share personal information as those terms are defined; we honor access and deletion requests voluntarily.

What happens to your data if you stop paying, cancel, or delete

Your local data is never held hostage. If a payment fails or your subscription lapses, only server-backed features pause. Your local vault, your exports, your ability to uninstall, and your data on your Mac remain fully accessible. A billing problem never locks you out of your own data.

If you cancel, server-backed features stop at the end of your term and we delete the account data we hold within 60 days (backups within a further 30). If you delete your account, that deletion begins immediately.

How we secure your data

Data in transit between you and us is encrypted with TLS. Your local vault is stored encrypted on your Mac, with keys protected by the macOS Keychain / Secure Enclave — you never manage a key by hand. On our servers we hold as little as possible (account and billing records) and protect it with encryption and access controls. See our Security page for how to report a vulnerability, and email security@roselyn.ai for security concerns.

Data retention

We keep information only as long as needed for the purpose it was collected, to run your account, to meet legal and tax obligations, and to resolve disputes. Specific windows are noted above.

Location of data

Roz is operated from the United States, and the account and billing data we hold is stored in the U.S. If you are outside the U.S., information you provide to us will be transferred to and stored in the U.S. At launch, Roz is offered to U.S. customers only.

Changes and questions

We’ll update this policy as the product and the law evolve, and we’ll refresh the date above when we do. Questions about this policy or your data? Email privacy@roselyn.ai or write to us at Bearking LLC, 30 N Gould St Ste N, Sheridan, WY 82801-6317.