Privacy Policy

Effective October 25, 2026

The short version: Roomsafe is built so that we can't read what you say. There is no account, your room is encrypted on your phone, and our servers keep nothing you say.

This policy covers the Roomsafe app and roomsafe.app. "Roomsafe", "we" and "us" mean IM Management LLC, which operates Roomsafe.

What stays on your phone

Your room lives on your device: your conversations, the memories your guide keeps, the guide and presence you choose, and your settings. All of it is encrypted with a key stored in your phone's secure keychain and protected by your PIN or Face ID. We have no copy and no way to open it.

Burn sessions are never saved, not even on your phone. When you end one, it is gone.

Your phone also keeps simple counters for your plan, such as voice minutes used and text sessions this month, plus purchase IDs so an extra hour isn't counted twice. They contain no conversation content and never leave your phone.

What leaves your phone, and what happens to it

Talking to a guide

To reply, your guide needs to read what you said. When you send a message or speak, your phone sends what the guide needs to answer: your latest words, recent messages from that conversation, and the memories you've chosen to keep. For voice, it sends the audio of what you said, and the reply comes back as audio.

Before anything is sent, your phone encrypts it to a key that exists only inside our sealed server. That server is a confidential computer with an encrypted processor and GPU. Before your phone sends anything, it checks the server's hardware proof, signed by Microsoft and NVIDIA, and the fingerprint of the exact code it runs. If either check fails, it sends nothing.

Inside the sealed server, your words and audio are processed in memory to write, transcribe or speak a reply, then discarded. Nothing is written to disk, and no conversation content is logged. Not even the web server that receives the traffic can read it, and neither can we.

The guides run on open models that we host ourselves. No outside AI company receives what you say.

Network information

Like any internet service, our server sees your phone's IP address and the time and size of each request while it handles that request. We don't keep access logs or connect this information to you. The server runs in Microsoft Azure's US data centers, so Microsoft carries the encrypted traffic but can't read it.

Payments

Subscriptions and extra hours are sold and billed by Apple. Apple handles your payment and Apple ID under Apple's privacy policy. The App Store tells the app on your phone which plan is active. We never receive your name, email, Apple ID or payment details. To cancel, use your Apple ID subscription settings.

App updates

Roomsafe checks for small app updates through Expo, the service that delivers them. Expo sees your IP address, app version and device type when your phone downloads an update, under Expo's privacy policy. These checks contain nothing from your room.

Backups

Backup is optional and off by default. If you turn it on, your phone encrypts your room with a 12-word recovery key that only you have, and you choose where to save the file, such as your own iCloud Drive or Files. We never receive your backup or your words. If you lose the words, nobody can open the backup, including us.

Safety

Crisis detection runs on your phone. If something you say suggests you might be in danger, Roomsafe shows crisis resources, such as 988 in the US, and your guide stays with you. Because we can't see your conversations, we can't contact you or anyone else, and we can't send help. If you are in immediate danger, call 911 or your local emergency number.

Roomsafe is a wellness companion. It is not therapy, it is not a substitute for a licensed professional, and it does not diagnose or treat any condition.

Deleting your data

You can forget any memory or delete your whole room at any time in the app. Deleting your room deletes its key, so the encrypted data can never be read again. Deleting the app removes your room from your phone. There is nothing to delete on our side, because we don't have it.

Legal requests

If a court or government asks us for your conversations, we can't provide them: we don't have them, and we can't decrypt your room. The only things we could ever be asked about are the sealed server's code fingerprints, which we publish.

Age

Roomsafe is for adults 18 and older. It isn't directed to children, and we don't knowingly collect information from anyone under 18.

Your rights

Depending on where you live, laws such as the California Consumer Privacy Act or Washington's My Health My Data Act give you the right to access, delete or correct your personal data, and to opt out of its sale or sharing. We don't sell or share data, and the only copy of your room is on your phone, where you can view, edit and delete it yourself. If you have a question or a request, email us. We won't ask you to identify yourself in ways the app never required.

Changes

If we change this policy, we'll update the date above. If we ever change how your data is handled in a meaningful way, we'll tell you in the app first. We won't weaken the protections above for data you've already given the app.

Contact

Questions about privacy: privacy@roomsafe.app