Roonify Inc.

Privacy Policy

Last Updated: May 19, 2026

Our Philosophy

Roonify exists to help people have conversations that are hard. That requires trust, and trust starts with how we treat your information.

We believe privacy is not a feature. It's a foundation. Everything we build (every interaction, every form, every product decision) begins with a simple question: does this protect the person using it?

This policy explains, in plain language, what we collect, why we collect it, what we do with it, and what we will never do with it. If anything here is unclear, please reach out. We'd rather answer your question than hide behind legal language.

What We Will Never Do

Before we explain what we collect, here's what we commit to never doing:

• We will never sell your personal information.
• We will never share your information for marketing purposes with third parties.
• We will never train AI models on Your Content without your explicit consent.
• We will never share your scores, patterns, or relational data with anyone outside your account.
• We will never contact you without your consent.
• We will never make it difficult for you to leave. If you want your data deleted, we delete it.

These are not aspirations. They are commitments.

What We Collect

We only collect what we need, and nothing more.

When You Create a Roonify Account

To set up your account, we collect:

• An email address (used for sign-in and account communications)
• A display name
• Account preferences and settings you choose
• The consents you give during onboarding (privacy, AI-assisted analysis, community standards)

When You Use the Product

When you use Roonify's tools (Daily Practice, Healing Circles, Journal, Relational Vitals), we process and store the content you create ("Your Content"), including:

• Messages you write in Circles
• Journal entries
• Reflections and responses in Daily Practice
• Responses to Relational Vitals self-assessments
• Pre-conversation mood selections
• Draft messages, including drafts you have not yet sent

We also generate and store data derived from your use of the product:

• The responses Roonify's AI provides to you
• Severity classifications and pattern signals detected by our AI
• Your scores across the five Relational Vitals pillars
• Pattern data that powers your dashboard, Constellation, and progress over time
• Daily Practice completion and streak data

When You Subscribe

To process a paid subscription, we (or our payment processor, Stripe) collect:

• Your payment method details (held by Stripe, not by Roonify)
• Your Stripe customer identifier and subscription state
• Billing history records as required for tax and accounting purposes

Roonify does not store your full payment card number. That information lives with Stripe under their security and compliance practices.

When You Visit Our Website

We use Google Analytics on our marketing website (roonify.com) to understand how visitors find and use the site. This includes general information collected in aggregate: pages viewed, time on site, browser type, device type, and approximate geographic location based on IP address. This data is not used to personally identify you.

Note: we may extend the use of analytics into the product in the future to understand how features are used. If we do, we will update this policy before that change takes effect and explain what is collected and why.

For more detail on tracking technologies, see our Cookie Policy.

What We Treat as Private

We treat Your Content as private to your account. It is not visible to other users, not posted anywhere, not shared with advertisers, and not used to train AI models without your explicit consent.

How AI Works in Roonify

Roonify uses AI to help you communicate more clearly. When you write in a Circle or complete a Daily Practice exercise, your content is processed by our AI coaching system to respond to you in real time.

Where Processing Happens

To deliver AI coaching, the content of your messages is sent from Roonify's servers to third-party AI inference providers, who process the content and return a response. The current providers are routed through OpenRouter, an inference platform that connects to open-weight language models.

Our Agreement with Providers

We have a signed Data Processing Agreement with OpenRouter that contractually limits how your data is handled: providers process your content only to generate the response Roonify requested, do not retain it for their own use, and do not use it to train their models. We choose this approach deliberately. If our provider arrangements change in a way that affects your data, we will update this policy.

What the AI Does with Your Content

The AI processes your content to detect communication patterns, classify emotional tone and severity, and generate coaching responses or reframe suggestions. It does not rate you or pass judgment for anyone else. The pattern recognition that happens behind the scenes exists to help you see your own communication habits.

Limitations of AI

The AI is not a licensed clinician, a therapist, or a human listener. It can make mistakes, miss context, or produce responses that do not fit your situation. It is not appropriate for crises.

Your Consent

By creating an account, you consented to AI-assisted analysis within your Roonify sessions. You can withdraw this consent by deleting your account.

How Pattern Tracking Works

As you use Roonify, our system notices patterns in how you communicate. These patterns appear in your personal dashboard, your Relational Vitals, and your Constellation so you can see your own growth over time.

This is not a grade. It is not a score that anyone else sees. It is a mirror, designed for you.

• Pattern data is private to your account.
• It is not shared with other users, advertisers, or third parties.
• You can delete it along with the rest of your account data at any time.

If, in the future, we ever want to use anonymized pattern data for research (for example, to contribute to communication science or improve Roonify itself), we will ask for your explicit, opt-in consent first. We will never assume it.

Why We Collect What We Collect

Every piece of information we collect has a specific purpose:

• Account information: so we can give you an account and contact you about it.
• Your Content (messages, reflections, journal entries, Vitals responses, moods, drafts): so the product works. The AI can respond to you, you can return to your Circles, your Journal preserves what you wrote, and your Vitals reflect your real activity.
• AI-derived data (responses, severity classifications, pattern signals, scores): so your dashboard, Constellation, and growth tracking can show you a coherent picture over time.
• Subscription information: so we can process your payment and manage your subscription.
• Analytics data: so we can improve the website (and, eventually, the product) experience.

We do not collect information "just in case." If we don't need it, we don't ask for it.

Who Has Access to Your Information

Your information stays within Roonify and the small number of service providers that help us operate:

• Payment processing. Stripe handles your payment information. They are bound by their own terms and compliance standards (including PCI DSS).
• AI infrastructure. We use OpenRouter to route AI inference to open-weight language models. Our agreement with them is described in the section above on how AI works.
• Email and communications. We use Buttondown to send our newsletter and account communications. They are contractually required to protect your data and use it only for the purposes we specify.
• Hosting and database. Your account and Your Content are stored on secure cloud infrastructure operated by reputable providers contractually bound to protect your data.
• Analytics. We use Google Analytics on our marketing site to understand website traffic.

We do not share your personal information with advertisers, data brokers or any third party for their own commercial purposes.

If we are ever legally required to disclose information (for example, by court order or government request), we will comply with the law. We will also make reasonable efforts to notify you, unless prohibited from doing so.

In the event of a merger, acquisition, or sale of assets, your information may transfer as part of that transaction. If that happens, we will notify you and ensure the receiving party is bound by commitments at least as protective as the ones in this policy.

How Long We Keep Your Information

We keep your information only as long as it's needed for the purpose it was collected:

• Account data and Your Content are retained as long as your account is active. If you delete content (a message, a journal entry, a Daily Practice entry), we delete it from active systems.
• If you delete your account, we delete your data from active systems. Backups containing Your Content are purged on a rolling schedule. Anonymized, aggregated pattern data that cannot be traced back to you may be retained.
• Subscription and billing records are retained as required for tax and accounting purposes (typically seven years).
• Analytics data is retained according to the default settings of our analytics provider (typically 14 to 26 months).

You can request deletion of your information at any time. When you do, we delete it. No friction, no waiting periods, no persuasion tactics to keep you on a list.

How We Protect Your Information

We implement reasonable administrative, technical, and physical safeguards to protect your information from unauthorized access, use, alteration, or disclosure. This includes encryption in transit, encryption at rest where supported by our infrastructure, access controls, and ongoing security review.

No system is perfectly secure. We want to be honest about that. We treat your data with the care we'd want for our own and continually evaluate and improve our security practices.

Your Rights

You have rights over your personal information, and we make them easy to exercise:

• Access. You can ask us what information we have about you, and we'll tell you.
• Correction. If something is wrong, let us know and we'll fix it.
• Deletion. You can ask us to delete your information at any time. We will.
• Opt-out. Every email we send includes an unsubscribe link. You can also contact us directly to be removed from any list.
• Export. You can request a copy of your account data.

To exercise any of these rights, email us at policy@roonify.com. We aim to respond within 10 business days.

If you are located in a region with specific privacy laws (such as the European Union, the United Kingdom, or California), you may have additional rights under local law, including the right to lodge a complaint with a data protection authority. To exercise any of these rights, contact policy@roonify.com.

In the event of a data breach that compromises your personal information, we will notify you promptly and transparently, in compliance with the Puerto Rico Citizen Information on Data Banks Security Act and all other applicable laws.

Children's Privacy

Roonify is not intended for individuals under the age of 18. In jurisdictions where the age of majority is higher than 18, we restrict access to those who meet the local age requirement. We do not knowingly collect personal information from anyone below the applicable age. If we learn that we have, we will delete it immediately.

Third-Party Links

Our website and product may link to other websites or services that we don't control. Once you leave our site, we can't be responsible for how those third parties handle your information. We encourage you to read their privacy policies.

International Users

Roonify is operated from Puerto Rico, United States. If you access the service from outside the United States, your data is transferred to and processed in the United States.

By using the Service, you consent to this transfer. Where required by local law (including GDPR for EU users and UK GDPR for UK users), we will honor data protection rights such as access, correction, deletion, and data portability. To exercise these rights, contact policy@roonify.com.

Changes to This Policy

If we make changes to this policy, we'll update the date at the top and post the revised version on our website. If we make material changes that affect how we handle your information, we'll make reasonable efforts to notify you directly by email at least 30 days before the changes take effect.

We will never quietly reduce your privacy protections. If anything changes, you'll know.

A Final Note

We know that most people don't read privacy policies. We wrote this one hoping you would, because at Roonify, privacy isn't a legal obligation we tolerate. It's the reason people trust us enough to do the hard work of communicating better.

If you have any questions, concerns, or just want to understand something better, please reach out at policy@roonify.com. We're real people and we'll give you a real answer.

Roonify Inc. • 5 Calle Pineiro Unit 52, Isabela, Puerto Rico 00662 • policy@roonify.com