Rosie is a family assistant you reach by text message. This policy describes how [TO BE COMPLETED BEFORE LAUNCH: legal entity name] (“Rosie”, “we”, “us”) handles information from our website, our waitlist, and our SMS service.
What we collect today
Rosie has not launched. Right now the only information we collect from the public is what you type into the waitlist form on this site: your email address, an optional mobile number, and the marketing attribution parameters (UTM tags) already present in the link you arrived from. We do not buy lists and we do not enrich what you give us with data from brokers.
What we collect once Rosie is running
When you join Rosie, the service works over SMS through a single shared phone number. That means we collect and process:
- Your mobile number. It is how Rosie recognizes you: an incoming text is matched to a verified member of a verified family. A number that is not verified is not treated as anyone.
- The messages you exchange with Rosie, and the assistant memory built from them so she can be useful over time.
- Anything you explicitly connect — for example a calendar or inbox — and only after you connect it.
- Basic operational records such as delivery status and error logs from our messaging provider.
Your mobile information is never sold or shared for marketing
No mobile information will be sold, rented, or shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third parties. We do not sell, rent, or trade your phone number, your messages, or your family’s information. Your consent to receive text messages from Rosie is used for exactly one thing: sending you text messages from Rosie.
Who can see your family’s data
Rosie is built so that one family’s world stays walled off from every other family’s. Isolation is enforced in layers, not by convention: every read and write goes through a tenancy-scoped data layer using a server-resolved identity, the database itself enforces row-level security on tenant data as a backstop, and each member’s assistant memory is keyed to that member — never to a phone number, which can be reassigned, and never shared across members.
Inside your family, Rosie shares context between members according to the family’s own settings and each member’s role — for example a child’s Rosie does not get access to household administration.
Service providers
We use a small number of vendors to run the service — a messaging provider to send and receive SMS, a cloud database and hosting providers, and model providers to power the assistant. They process data on our instructions to deliver the service and are not permitted to use it for their own marketing. The current list of providers is [TO BE COMPLETED BEFORE LAUNCH: list the specific processors/subprocessors and link a subprocessor page].
How long we keep things
We keep information for as long as we need it to run the service and to meet our legal obligations, then delete it. Specific retention windows are [TO BE COMPLETED BEFORE LAUNCH: retention periods — waitlist records, message history, assistant memory, operational logs, and the grace period after account deletion].
Your choices
- Stop the texts. Reply STOP to any Rosie message to opt out of SMS. Reply HELP for help. Message frequency varies. Message and data rates may apply.
- Leave the waitlist. Ask us and we will remove your record.
- Access, correct, or delete your data. Contact us and we will act on your request. Additional rights that may apply to you depending on where you live are [TO BE COMPLETED BEFORE LAUNCH: state/regional privacy rights (e.g. CCPA/CPRA, GDPR) and how to exercise them].
Children
Rosie is designed for families, and families include children. A child only uses Rosie through a family account created and administered by an adult, and a child’s Rosie is restricted to age-appropriate capabilities. Our full position on children’s data, including verifiable parental consent, is [TO BE COMPLETED BEFORE LAUNCH: children’s privacy / COPPA policy and minimum age].
Security
Data is encrypted in transit and at rest, access is scoped to the minimum needed to operate the service, and tenant isolation is enforced at the database level as described above. No system is perfect; if a breach affects you we will notify you as required by law.
Changes
If we change this policy we will update the effective date at the top, and for material changes we will tell you directly.
Contact
Questions about privacy? Reach us at [TO BE COMPLETED BEFORE LAUNCH: privacy contact email and mailing address]. Our terms of service, including the full SMS messaging terms, are at Terms of Service.
This policy is governed by [TO BE COMPLETED BEFORE LAUNCH: governing law / jurisdiction].