Privacy Policy

1. Scope

This Privacy Policy explains how Rohy AI, operated by Everbright Ventures LLC, collects, uses, stores, analyzes, and discloses information in connection with our website, applications, APIs, journaling tools, chat features, uploads, and related services.

Rohy AI is a reflection and informational platform. We are not a hospital, physician practice, therapy provider, insurer, or emergency-response service. Unless Rohy AI and an eligible organization have entered into a separate written business associate agreement or equivalent regulated-services agreement, Rohy AI is not offered as a HIPAA-covered clinical record system and should not be used as the system of record for protected health information.

2. Information We Collect

• Account details such as name, email address, login credentials, subscription metadata, and support records.
• Content you submit, including journal entries, chat messages, uploads, voice transcriptions, and persona settings.
• Derived information such as summaries, trends, scores, pattern analysis, and other AI-generated outputs.
• Device and usage information such as IP address, browser type, operating system, timestamps, and feature usage.
• Billing and transaction metadata supplied through our payment processors.
• Referral-program information such as referral codes, clicks, signups, reward grants, milestone status, fraud-prevention flags, and share-card events.
• Onboarding, tutorial, achievement, feature-adoption, and advanced-mode preferences used to personalize your experience.

3. How We Use Information

• To provide journaling, chat, summaries, exports, subscriptions, and account functionality.
• To maintain security, detect abuse, troubleshoot issues, and improve product reliability.
• To generate and display AI-assisted summaries, scores, and personalization features.
• To communicate about service updates, legal notices, billing, support, or product changes.
• To comply with law, defend claims, and enforce our agreements.
• To administer referral rewards, prevent self-referral or duplicate-account abuse, and provide aggregate referral analytics to administrators.
• To remember onboarding, tutorial, achievement, theme, language, and account preferences across sessions and devices.

4. AI, Sensitive Content, and Healthcare Limits

Journals and chats may contain highly sensitive personal information, including information relating to emotions, relationships, mental health, habits, or medical history. Our systems may process that content to generate summaries, scores, and pattern insights.

Rohy AI may include features inspired by clinical language, cognitive behavioral techniques, screening frameworks, trend labels, or provider workflows. These features are informational and organizational unless a separate written agreement says otherwise. If your intended use requires HIPAA-compliant infrastructure, regulated clinical handling, a business associate agreement, medical-device approval, or contractual healthcare assurances, do not rely on Rohy AI for that use unless we separately confirm the arrangement in writing.

AI outputs are probabilistic and may be incomplete or inaccurate. They are provided for informational use only and should not be treated as medical advice, diagnosis, or treatment.

5. Sharing and Provider Access

Rohy AI does not automatically share your journals or summaries with providers merely because a provider account exists. Sharing is optional and user-controlled.

• You decide whether to connect with a provider or other recipient.
• You decide what categories of information to share through available controls.
• Providers and other recipients only access information you intentionally share through the platform.
• You may revoke access, subject to technical and legal limitations described in our Terms and product notices.

We may also disclose information to service providers, payment vendors, professional advisers, or legal authorities where necessary to operate the service, comply with law, or protect rights and safety.

Referral links and share cards are intended to share invitation information only. We do not include journal text, raw chat content, clinical model outputs, or private reports in referral share cards unless you separately choose to share that information through another product control.

6. Analytics, Achievements, and Referral Administration

We may process account activity, feature events, word counts, share-card events, referral clicks, referral signups, conversion status, achievement progress, and tutorial completion state to operate the platform, prevent abuse, improve reliability, and help administrators understand aggregate system health.

Administrative dashboards may display operational information such as user identifiers, subscription status, plan usage, referral counts, reward days, fraud-prevention flags, and high-level engagement metrics. Admin access is intended for authorized personnel and is subject to internal access controls, confidentiality expectations, and auditability where available.

7. Cookies, Storage, Retention, and Security

We use cookies, local storage, and similar technologies to support sessions, preferences, product integrity, and limited diagnostics. Additional detail is available in our Cookie Policy.

We retain information for as long as reasonably necessary to operate the service, support accounts, resolve disputes, comply with legal obligations, and defend claims. Retention periods vary by data type and risk.

We use administrative, technical, and organizational safeguards designed to protect information, but no system can be guaranteed completely secure.

8. Your Choices and Rights

Depending on your jurisdiction, you may have rights to request access, correction, deletion, or portability of certain personal information, or to object to or restrict certain processing. We may need to verify your identity before responding.

To make a request, email support@rohy.ai.

9. International Processing

Rohy AI may process and store information in the United States or other jurisdictions where we, our hosting providers, infrastructure vendors, payment processors, support tools, or analytics providers operate. These jurisdictions may have privacy laws that differ from those where you live.

10. Children

Rohy AI is not directed to children under 13. Users under the age of majority may use the service only with appropriate parental or guardian involvement where permitted by law.

11. Changes and Contact

We may update this Privacy Policy from time to time. Material changes will be reflected by revising the date above and, when appropriate, by additional notice.

Questions or privacy requests may be sent to support@rohy.ai. You may also review our Data Disclosure Agreement.