Privacy

What we hold

What you tell the agent, in your own words. Your calendar, if you connect it. Sleep, workouts and heart-rate data, if you connect Apple Health. What the agent proposed, whether you approved it, and what happened afterwards — that record is the product. Rocky remembers preferences you share in chat, and you can see and delete each one in My agent → Memory.

Who else sees it

Besides us, your data reaches twelve companies and no others: Anthropic, which runs the model that writes the replies, Google, which signs you in and holds your calendar, WHOOP, which holds the sleep and recovery readings you connected, Supabase, which hosts the database and sends your sign-in email, Apple, which delivers notifications to your phone, Open-Meteo, which gives the forecast where you are, Resend, which sends the early-access email you asked for, TrainingPeaks, which sends your planned and completed workouts, if you connect TrainingPeaks, USDA FoodData Central, which looks up what a food is made of, from its name alone, Open Food Facts, which looks up a packaged product, from its barcode alone, the NIH Dietary Supplement Label Database, which looks up a supplement's label, from its name alone and Amazon, which takes the grocery order you approve, if you sign in to Whole Foods in Rocky. Each one is listed because your data genuinely goes there.

There is no advertising here

We sell a subscription. We have no advertising business, and there is no advertising code and no third-party analytics in the product — nothing about you is sent to an analytics company. We do record which parts of Rocky you use — a tap on a tab, a card approved — in our own database, to work out what to build. Those rows hold the name of the thing you tapped — and, when you search Connectors for an app Rocky does not have yet, the name you searched for — and never what you said, ate or weigh, and deleting your data deletes them too.

Apple Health

Rocky reads your sleep, HRV, resting heart rate, heart rate, workouts, distance, running power, cycling power, cycling cadence, cycling speed, weight, steps, height, date of birth, sex, active energy, resting energy, cycling distance, swimming distance, dietary energy, protein, carbohydrates, total fat, mindful minutes, VO2 max, heart rate recovery, walking heart rate, respiratory rate, blood oxygen, sleeping wrist temperature, body fat, lean body mass, waist, exercise minutes, stand minutes, flights climbed, time in daylight, running speed, running stride length, ground contact time, vertical oscillation, fiber, sugar, sodium, water and caffeine from Apple Health — so you never have to log them. It reads those and nothing else, and it never writes anything back into Health. Apple does not tell an app which readings you granted, so if something is missing Rocky says it is missing rather than guessing.

Photos you send

A photo of a meal, or of food you are asking about, is read once by the model so Rocky can name what it sees — and, on a label, the brand, strength and size — and ask you to confirm it or answer your question. You can send up to ten at once. We never store the image on our servers. So you can see it in your chat, the picture stays on your phone, in Rocky's own storage: never backed up, never sent anywhere else, and deleted when you sign out or delete your data. We never look at your photo library — you choose each photo and send it. A file works the same way: an image or a PDF you pick, never stored. A PDF is read on your phone first, and if it looks like a medical record nothing is sent; otherwise its text is read once to answer you (a scanned PDF, its first pages as images) and neither is kept. A training plan's sessions go into your Plan, with one Undo. A receipt photo is different again: that one is read on your phone and the picture never leaves it. A photo you log a meal with in Food is read once into foods and amounts; the meal is kept, and so you can see it as that meal's picture, a small copy stays on your phone in the same storage as the chat's pictures. It never reaches our servers, not even its name. A photo of a meal you send in the chat is the same read: the meal goes into Food with an Undo, and shows the picture already on your phone.

Web searches

When you ask Rocky to look something up — a product, a food, what something is made of — or ask for wellness events, or for a dish on Uber Eats, DoorDash or Grubhub, Rocky searches the web through Anthropic’s own search tool. Web lookups only ever see your own words, or the name of a restaurant and dish you ordered — never anything else about you. When an answer about one product is followed by a card for it, that card’s own search sees only that product’s brand and name. When a packaged food or supplement you log or add is not in the food databases, Rocky looks its label up online, and that search sees only the product’s brand, name, flavour and size. An events search sees the words of your question, the date and your time zone; a dish search sees the words of your question, the app and where to look: your city, or — when Rocky already has your phone’s location — the name of the neighbourhood you are in. A dish search reads the app’s own restaurant pages, and when those do not come up, restaurants’ own menus and public menu listings. When you ask for a place to go — food, a sauna, a pool, a trail — a place search sees the words of your question and the area to look in, by name — the one you named, the area of an event on your calendar that you mention (its name, never its street number), or your neighbourhood or city as above. None of them is given what Rocky holds about you — your goal, diet, allergies or anything about your body — beyond what you write in the question yourself; those are only used afterwards, to pick from what the search found. Your phone works out the neighbourhood or the city itself and sends only its name; your location itself is never sent to a search, and the neighbourhood is used for that one search and not kept. If you tap Use my location, the city is kept for these searches. Your phone also checks how far each pick is from you, on the phone, through Apple Maps. These searches never sign in to a delivery app and never order: the button opens that dish or restaurant in its app — or, when its page there was not found, the app’s own search for the restaurant’s name — and you order there. Only if you connect Uber Eats or DoorDash yourself does Rocky sign in to it as you — see Gyms, studios and delivery apps Rocky acts on. We fetch product photos from the maker’s public page. Nothing about you is sent.

Your location

Rocky uses your phone’s approximate location only while the app is open, and only for two things: the weather forecast and places near you. Your iPhone gives Rocky an approximate location, never your precise one, and Rocky rounds it further — to about 10 km — before using it. It is never stored: nothing saves where you were, and no log keeps it. If you have not allowed location, Rocky uses the city you saved. You can turn location off at any time in iPhone Settings → Rocky → Location.

Older history

For the last 90 days Rocky keeps your readings day by day. Your Apple Health workouts from the last 12 months are kept one by one — the day, time, length, distance and heart rate of each — so a plan can be built from last year as well as last week. Anything else older than 90 days is kept only as one summary per month: your typical sleep, HRV, resting heart rate and weight that month, how many sessions of which kinds, and for your three main activities the distance, your longest session and your usual length. Apple Health months are worked out on your phone, so older daily readings never leave it; older WHOOP readings are read once, folded into months and not kept. Deleting your data deletes these too.

Your health, conditions and medication

When you sign up, Rocky asks whether any of these apply to you: a heart condition or high blood pressure, chest pain, dizziness or fainting, a long-term health condition, or a doctor telling you to limit exercise. One tap answers none of them. If you tap any of them except the long-term condition, Rocky asks you to check with your doctor and plans no workouts until you tell it you have been cleared; food and sleep keep working. You can also tell Rocky about diagnosed conditions and the medication you take, which are optional. All of it is stored with the rest of what Rocky knows about you and deleted when you delete everything. Conditions and medication are context only — Rocky never gives medical advice, never diagnoses, and points anything medical to a professional.

Deleting it

You can delete everything. It removes every row we hold about you — your sessions, your signals, and everything the agent worked out about you — and it cannot be undone.

A record of each answer, for 30 days

For 30 days we keep a record of each answer Rocky gives you — what it could see about you, what it looked up and what it said — so we can find and fix its mistakes. Only you and Rocky's two founders can read it, it never leaves our own database, and it is deleted after 30 days, or straight away when you delete your data. If you tap 👎 and write what Rocky should have done, that note is kept with the conversation.

What we do with your Google Calendar data

If you connect your calendar, we read the events in the weeks around today so the agent knows what your week looks like. Rocky can add events and move the ones it added, telling you each time so you can undo it; before moving one on its own it checks whether anyone else is invited, and if so it waits for your tap. An event you put there is changed only when you ask Rocky to change it or approve the change. Rocky deletes an event it added when you tap Undo or approve a change to your week that takes it off, and an event you put there only when you tell it to delete that event — never as a suggestion and never on its own. If other people were invited, it tells you whether they were sent a cancellation, and Undo puts the event back on your calendar. We read no other Google product, and we do not use anything from your calendar for any purpose other than showing you your week and changing it when you say so. We do not transfer it to anyone, and we never use it to train a model.

Stores you sign in to

If you sign in to a store in Rocky, you sign in on the store’s own page, on your phone. For Amazon, Rocky keeps two things so its own browser can work in your account: the signed-in session Amazon gives back, encrypted, and your Amazon sign-in and password, sealed on your phone before they leave it, so our server and our database cannot read them. Only Rocky’s browser, on the one computer that runs it, can open them, and only when Amazon asks you to sign in again: it types them into Amazon’s own page and keeps no copy. No AI model ever sees your password or a code. If Amazon sends you a code, Rocky asks you for it, and the code is sealed the same way. Tap Disconnect, or delete your account, and both are erased. Rocky’s own browser builds the cart in your account, even with Rocky closed; it tells the store it is an AI agent, shows you the full total and delivery time, and orders only when you tap. If a run stops, a record of its steps goes to Rocky’s founders so they can fix it, with payment details, addresses and contact details masked. When you ask for groceries, your phone first reads what you have bought at that store — the items’ names, how many of your orders held each, when you last bought it, and each item’s product picture and how many you bought, as your order page shows them — and sends that with your message, so the cart starts from what you already buy. Never a price, an address, an order number or a payment detail. It is not stored, beyond the 30-day record of what Rocky was shown. When Rocky reads one of your orders, or places one and the store confirms it, it keeps that order’s date, items and quantities in your account, so it can fill the same cart again without reading the store; deleting your account deletes them.

In your kitchen

In your kitchen: the foods from your latest store order or a receipt you photograph — food names, the brand and store printed on it, and the date. Your receipt is read on your phone; only item names and the store’s name are sent to Rocky, and item names are processed by our AI provider to tidy them. We never keep the photo, prices, card digits or address. Each new order or receipt replaces the last, and deleting your account erases it. Never sold or used for ads.

Gyms, studios and delivery apps Rocky acts on

When you connect a gym or studio for Rocky to act on — Solidcore, ClassPass, Mindbody, Barry’s, SoulCycle, Life Time, CorePower Yoga, Club Pilates or Crunch — Rocky signs in to that site as you, and sends it only what reading, booking or cancelling your class needs. Nothing is booked or cancelled without your tap on the exact class, time, price and fee. Rocky keeps your login so it can stay signed in for you, and you can disconnect anytime to delete it. When you connect DoorDash, Rocky signs in as you to read your orders, logs a delivered order as a meal you can undo, and orders again only after your tap on the exact items and price. When you connect Uber Eats or Sweetgreen, your iPhone reads your order list on that app’s own page and sends Rocky only what the list says — never your login — and Rocky logs your delivered orders as meals you can undo. It never orders there.

Apps Rocky signs in to

Some apps, like TrainingPeaks, you connect by signing in once in Rocky. Where Rocky keeps that login so it can sign back in by itself, it is kept only in your iPhone’s Keychain, behind Face ID. It is never sent to us, never written in a chat, a log or anything the AI reads, and it is used only to sign back in to that app. Rocky tells the app it is an AI agent and stops if the app blocks it. Your phone reads what you asked for there — for TrainingPeaks, your planned and completed workouts — and sends us only that. For an app Rocky does not read yet, like MyFitnessPal or Peloton, it keeps the login so you never sign in again and reads nothing from it until it says so. Disconnect deletes the login and the session.

Nothing here trains a model

What you tell the agent is sent to Anthropic to produce a reply, and that is all it is used for. We do not train or fine-tune any model on your data, and we never will without asking you first, in plain words, for that specific thing.

Feedback, and the screenshot with it

When you send feedback from the Rocky dot, a picture of the screen you were on is attached so we can see what you saw. You see it before you send, and one tap removes it. Nothing is ever captured in the background. A screenshot can show your own health data, so: only Rafa and Diego can see it, it is never used to train anything, and it is deleted when you delete your account and automatically after 90 days.

We do not sell it

We have never sold anyone's data and we will not. If that ever changes, it will change by us asking you, not by us updating this page.

If you join the waitlist

The waitlist stores the address you typed, the time you typed it, and — if the link you arrived by said so — one word for where it came from. Nothing else: no name, no cookie, no tracking pixel, no device fingerprint. The form can add a row and cannot read one, so a stranger with the public key cannot pull the list out. We will email you when there is something to let you into, and nothing else.

Where it goes, specifically

• Anthropic — It runs the model that writes the replies. (api.anthropic.com)
• Google — Signing you in, and connecting your calendar. (accounts.google.com)
• Google — Keeping that connection alive. (oauth2.googleapis.com)
• Google — Reading your calendar and changing events on it. (www.googleapis.com)
• WHOOP — Reading the sleep, recovery and workouts you asked Rocky to use. (api.prod.whoop.com)
• Supabase — It hosts the database your rows live in, and sends the link when you sign in with email. (supabase.co)
• Apple — Sending a notification to your phone. Apple sees the line on it and the code that identifies your device, and nothing else about you. (push.apple.com)
• Open-Meteo — The forecast where you are: your phone’s approximate location, rounded to about 10 km, or the middle of your saved city if you have not allowed location. Never who, and never stored. (api.open-meteo.com)
• Open-Meteo — Only when Rocky has no location from your phone: the name of the city you saved, to find where its forecast is. Nothing else. (geocoding-api.open-meteo.com)
• Resend — Sending the one early-access email you asked for. Your address and that message, and nothing from inside the product. (api.resend.com)
• TrainingPeaks — Only if you connect TrainingPeaks: we read your planned and completed workouts from your own account. Nothing of ours is sent to it, and your login never leaves your iPhone. (home.trainingpeaks.com)
• USDA FoodData Central — When you log a meal: the name of each food, so we can look up its calories and macros. Nothing else — not who you are, not the meal, not when. (api.nal.usda.gov)
• Open Food Facts — When you scan a barcode we don’t have: the barcode on the package, so we can find the product’s own published numbers. Nothing else — not who you are, not the meal, not when. (world.openfoodfacts.org)
• Open Food Facts — When a packaged product isn’t in USDA’s list: its brand, product and flavor as printed, so we can find its own published numbers. Nothing else — not who you are, not the meal, not when. (search.openfoodfacts.org)
• the NIH Dietary Supplement Label Database — When you log a supplement such as a protein powder: its name, so we can find its own label. Nothing else — not who you are, not the meal, not when. (api.ods.od.nih.gov)
• Amazon — Only if you sign in to Whole Foods in Rocky: Rocky’s own browser builds the cart in your own Amazon account and orders only when you tap. Amazon sees that order, as it would if you shopped yourself. (www.amazon.com)
• Amazon — Only if you sign in to Whole Foods in Rocky: your phone loads each product’s picture from Amazon’s image site, as Amazon’s own pages do. Nothing of ours is sent to it. (m.media-amazon.com)

Rocky is not a doctor

It does not diagnose, treat, or give medical advice, and it will say so and stop rather than answer a medical question. If you are dealing with symptoms, pain that is not ordinary training soreness, medication, or a diagnosed condition, that is a conversation for a clinician and not for us.

Asking us anything

Write to us and we will answer, including what we hold on you and requests to delete it.

Google API Services

Rocky's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.