Privacy Policy
Rocco is an iPhone app that turns real house chores into a cozy game. This policy explains what the app collects, why, who helps us run it, how long we keep it and how you can delete it. Rocco is made by Kerem Kaya, an individual developer in Istanbul, Türkiye ("we"). Questions: keremxkaya08@gmail.com.
The short version
- Your chore photos are checked and then thrown away. We never store the photos.
- No ads inside the app. We count how the app is used (for example, that a chore was finished) without any of your content, and you can turn this off in Settings.
- If you saw a Rocco ad on Facebook or Instagram, we measure whether it led to an install. iOS asks your permission first; if you say no, no advertising identifier is read. "Share usage data" in Settings turns this off too.
- We never sell your data and we never use your photos, chats or codes for advertising.
- You can delete your account and its data in the app at any time.
What we collect
| Data | Why |
|---|---|
| Sign-in details: a user ID from Sign in with Apple or Google, and the email address they share (Apple may give a private relay address) | To create your account and keep your progress on our server. |
| Profile: display name, character look and outfit, the chores you picked, your daily minutes and reminder time, and your first-day answers (what brought you here, the home style you like, how often you plan to show up) | To build your daily plan and show your character. |
| Game data: coins, buttons, items, clothes, rooms, completed chores, streaks and badges | To run the game. |
| Chore photos | To check that a chore is done before coins are paid. See "How chore photos work" below. |
| Ask Rocco: your questions, Rocco's answers and, if you attach a photo, a one-sentence description of it (the photo itself goes to Google Gemini for the answer and is not stored) | To answer cleaning questions and keep your conversation. |
| Friends and shared home: your friend code, friend requests, friends, stickers and gifts you send, blocks and reports; for a shared home, its members and their items | To run the Street and the Home plan, and to keep the community safe. |
| Purchases: subscription status, plan, renewal and expiry dates; for button packs, the store's purchase ID, product, date and whether it was refunded | To unlock the app while your subscription is active, and to add (or, after a refund, take back) the buttons you bought. |
| Usage records for AI requests: time, model and size of each photo check or Ask Rocco request | To limit daily use and control costs. |
| Usage events: short records of actions in the app, never their content. See "Usage analytics" below | To learn which parts of Rocco work and improve them. You can turn this off. |
| Ad measurement: app opens and installs, that you signed in, purchases made through the App Store (such as a subscription, a free trial or a button pack), basic device details (such as device type and iOS version), your IP address, an anonymous app-install ID and, only if you allow tracking when iOS asks, your advertising identifier. See "Ad measurement" below | To tell whether a Rocco ad on Facebook or Instagram led to an install, so we can spend less on ads that do not work. You can turn this off. |
We do not collect your location, contacts, browsing history or crash diagnostics. We read your advertising identifier only if you allow tracking (see "Ad measurement"). Reminders are scheduled on your phone by iOS; we do not send them from a server.
Ad measurement
- Rocco uses the Meta SDK (Meta Platforms, Inc.) so Meta can tell whether a Rocco ad you saw on Facebook or Instagram led to an install, a sign-in or a subscription.
- After you sign in, iOS asks (once) whether Rocco may track you across other companies' apps and websites. If you choose Ask App Not to Track, Rocco does not read your advertising identifier. The events listed above are still sent, without that identifier, and Rocco does not link them to you.
- If you choose Allow, Meta receives the events listed in the table above together with your advertising identifier. You can change this at any time in iPhone Settings > Privacy & Security > Tracking.
- Rocco starts the Meta SDK only after you sign in and your own "Share usage data" choice has been read (if you turned it off on another phone, that choice follows your account). If it is off, nothing is sent to Meta, whatever you chose in iOS.
- Meta never receives your name, photos, Ask Rocco conversations, friend codes or home codes. Meta's own policy applies to what it receives: facebook.com/privacy/policy.
How chore photos work
- You take the photo inside the app; Rocco never reads your photo library for chores.
- The first time, the app asks for your permission before any photo is sent to Google's Gemini AI.
- The photo goes to our server and to the Google Gemini API (paid tier) to check the chore. Google does not use paid-tier requests to train its models. Neither we nor our server keep the photo after the check.
- We keep a short check record for 60 days: the result, a reason code, a short text note of at most 120 characters (for example "bed made, pillows in place"), for a quick job its name and what it should look like when done (at most 200 characters, for example "unpack the suitcase") and fingerprints of the image (mathematical hashes, not the image) so the same photo cannot be used twice. After 60 days the record is deleted.
- For quick jobs that earned you coins, we also keep a small chore history so Rocco can learn your rhythm and ask about a chore when it usually comes round: the kind of job (for example "ironing"), its latest name, on how many days you did it, the first and last day, the number of days between the last few times, and your answers to Rocco's question. No photos and no times of day. It stays until you delete your account.
Usage analytics
To learn which parts of Rocco help people keep their home tidy, the app counts how it is used with PostHog (PostHog Inc., data stored on servers in the EU, in Frankfurt, Germany). This is on by default. You can turn it off at any time in Settings > Share usage data; then neither the app nor our server sends usage events for your account.
- What is sent: short events about actions, for example that the app was opened, a chore was started or completed, a photo check passed or asked for another try, a subscription or button pack was bought and which plan, the wardrobe or the shop was opened, an item or outfit was bought (its catalog ID, category and price), a friend was added, a home code was shared or used, a question was asked to Rocco, or a reminder was opened (its type). Also a summary of your first-day answers (for example your daily minutes, home style and rhythm), and technical details: the app version and build, operating system name (iOS), device type, whether it is a simulator, screen size, language, time zone, the analytics library version and a session ID. The device name, model and iOS version are not sent.
- Usage profile: with your account we also keep your plan, how many people share your home, the app language and whether purchases come from Apple's test store.
- Never sent: names, your conversations with Rocco, photos, friend or home codes, email addresses, links or anything else you type.
- Identifier: your Rocco account ID. Before you sign in, events carry a random ID made by the app, which is linked to your account when you sign in. We do not use the advertising identifier and we do not track you across other companies' apps or websites.
- Your IP address is not stored, and we do not use it to find your location.
- When you delete your account, your usage events are deleted from PostHog too, within 30 days.
What other people can see
- Friends you accept can see your display name, your character and your home. They cannot see your chores, photos, coins or conversations with Rocco.
- People in your shared home (Home plan) see the shared home, its rooms and items, and each member's name and character.
- Nobody else can find you. Friends are added only with your personal code, and every request needs your approval.
- You can remove, block or report anyone. Reports go to us and we review them within 24 hours.
Who helps us run Rocco
| Service | What it does |
|---|---|
| Supabase (servers in the United States) | Our database, sign-in and server functions. |
| Google (Gemini API, Google Sign-In) | Checks chore photos, answers Ask Rocco, and signs you in if you choose Google. |
| Apple (Sign in with Apple, App Store) | Signs you in if you choose Apple and handles all payments. We never see your payment details. |
| RevenueCat | Keeps track of your subscription and button pack purchases. It receives your purchase information and an account ID, not your name or photos. |
| Meta Platforms, Inc. (Meta SDK) | Measures whether a Rocco ad on Facebook or Instagram led to an install, a sign-in or a subscription. See "Ad measurement" above. |
| PostHog (servers in the EU, Frankfurt) | Counts how the app is used (product analytics). It receives the usage events described above and an account ID, never your name, conversations, photos or codes. |
These services process data only to provide their part of Rocco. We do not sell your personal information. The only advertising-related sharing is the ad measurement described above, and your advertising identifier is read only with your permission in iOS.
How long we keep data
- Your account, profile, game data, friends and Ask Rocco history: until you delete your account.
- Chore check records: 60 days.
- Chore history for quick jobs (kind, latest name, days): until you delete your account.
- AI cost records (which feature was used, token counts and an estimated cost, never your photo, question or answer): linked to your account until you delete it, then kept without your account.
- Usage events at PostHog: until you delete your account, and never longer than the storage period of our PostHog plan. Turning off "Share usage data" stops new events.
- Reports: until they are resolved, then only as long as needed to keep the community safe.
- Signing out removes the Ask Rocco conversation from your phone.
Deleting your account
In the app, go to Settings > Delete account. This permanently deletes your account and all data above from our server (AI cost records stay, no longer linked to you), removes you from your friends' streets and your shared home, disconnects Sign in with Apple, deletes your record at RevenueCat and deletes your usage events at PostHog (PostHog finishes this within 30 days). Deleting your account does not cancel an App Store subscription; cancel it in iPhone Settings > Apple Account > Subscriptions. You can also email us to delete your data.
Children
Rocco is not directed to children under 13 (or the higher minimum age where you live) and we do not knowingly collect their data. If you believe a child has an account, email us and we will delete it.
Your rights
Wherever you live, you can ask us what data we hold about you, to correct it, to get a copy, or to delete it. Residents of California and other US states with privacy laws have these rights by law. Email keremxkaya08@gmail.com; we answer within 30 days and will not treat you differently for asking.
Users outside the United States
Rocco is available worldwide and most of its servers are in the United States, so your data is processed there; usage events are stored in the EU. Our service providers protect these transfers with the safeguards the law requires, such as the European Commission's Standard Contractual Clauses.
If you are in the EU, the UK, Türkiye or another country with a similar law, Kerem Kaya is the controller of your data and we rely on these legal bases:
- Contract: your account, game data, friends, shared home and subscription, which you need to use Rocco.
- Consent: sending chore photos to Google Gemini. You can turn photo checks off in Settings at any time.
- Legitimate interests: keeping the community safe (blocks and reports), preventing abuse, controlling AI costs, and counting how the app is used to improve it (you can turn this off in Settings > Share usage data).
You also have the right to object, to restrict processing, and to complain to your local data protection authority.
Security
Data travels over encrypted connections. Each account can read and change only its own data; friends and home members can read only what is listed above.
Changes
If we change this policy, we will update the date above and, for important changes, tell you in the app.