Privacy
Rocky handles health data. This page says what happens to it, in the plainest language we can manage. If something here is unclear, that is our failure and we would like to know.
What we hold
What you tell the agent, in your own words. Your calendar, if you connect it. Sleep, workouts and heart-rate data, if you connect Apple Health. What the agent proposed, whether you approved it, and what happened afterwards — that record is the product.
Who else sees it
Besides us, your data reaches five companies and no others: Anthropic, which runs the model that writes the replies, Google, which signs you in and holds your calendar, Supabase, which hosts the database, Open-Meteo, which gives the forecast where you train and Resend, which sends the early-access email you asked for. Each one is listed because your data genuinely goes there.
There is no advertising here
We sell a subscription. We have no advertising business, and there is no advertising code and no third-party analytics in the product — nothing about you is sent to an analytics company. We do record which parts of Rocky you use — a tap on a tab, a card approved — in our own database, to work out what to build. Those rows hold the name of the thing you tapped and never what you said, ate or weigh, and deleting your data deletes them too.
Photos you send
A photo of a meal is read once, by the model, so Rocky can name what is on the plate and ask you to confirm it. We never store the image, and we never look at your photo library — you choose each photo and send it. A receipt photo is different again: that one is read on your phone and the picture never leaves it.
Deleting it
You can delete everything. It removes every row we hold about you — your sessions, your signals, and everything the agent worked out about you — and it cannot be undone.
What we do with your Google Calendar data
If you connect your calendar, we read the events in the weeks around today so the agent knows what your week looks like, and we move an event when you approve a change that moves it. That is all. We do not create events, we do not delete them, we do not read any other Google product, and we do not use anything from your calendar for any purpose other than showing you your week and changing it when you say so. We do not transfer it to anyone, and we never use it to train a model.
Nothing here trains a model
What you tell the agent is sent to Anthropic to produce a reply, and that is all it is used for. We do not train or fine-tune any model on your data, and we never will without asking you first, in plain words, for that specific thing.
We do not sell it
We have never sold anyone's data and we will not. If that ever changes, it will change by us asking you, not by us updating this page.
If you join the waitlist
The waitlist stores the address you typed, the time you typed it, and — if the link you arrived by said so — one word for where it came from. Nothing else: no name, no cookie, no tracking pixel, no device fingerprint. The form can add a row and cannot read one, so a stranger with the public key cannot pull the list out. We will email you when there is something to let you into, and nothing else.
Where it goes, specifically
- Anthropic — It runs the model that writes the replies. (api.anthropic.com)
- Google — Signing you in, and connecting your calendar. (accounts.google.com)
- Google — Keeping that connection alive. (oauth2.googleapis.com)
- Google — Reading and moving events on your calendar. (www.googleapis.com)
- Supabase — It hosts the database your rows live in. (supabase.co)
- Open-Meteo — The forecast where you train. Roughly where, to about a kilometre — never who. (api.open-meteo.com)
- Resend — Sending the one early-access email you asked for. Your address and that message, and nothing from inside the product. (api.resend.com)
Rocky is not a doctor
It does not diagnose, treat, or give medical advice, and it will say so and stop rather than answer a medical question. If you are dealing with symptoms, pain that is not ordinary training soreness, medication, or a diagnosed condition, that is a conversation for a clinician and not for us.
Asking us anything
Write to us and we will answer, including what we hold on you and requests to delete it.
Google API Services
Rocky's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.