Privacy Policy

What is collected

• Your identity. Signing in with Apple gives Roughly your email address and, if you choose to share it, your name. Roughly never sees your Apple password. If you use Apple's Hide My Email, only the relay address is stored.
• Meal photos and their analysis. Photos you take, plus the food items, calories and protein estimated from them.
• Health and fitness entries. Weight, waist measurement, training sessions, steps, sleep and recovery values, and mood scores — whatever you log.
• Your conversations with the coach, including weekly check-in answers.
• A push notification token, if you turn notifications on, so the coach can remind you about a check-in.
• An App Attest key identifier, which Apple issues to prove the requests come from a real, unmodified copy of the app. It identifies the app instance, not you.
• Your subscription, if you buy one. Which plan, whether it is in its free trial, when it renews or ends, and the identifier Apple uses for it. Roughly never sees your card — Apple takes the payment and hands back only a signed receipt. This is kept because it is what decides whether the coach answers.

There is no analytics SDK, no advertising identifier, no tracking across other apps or websites, and nothing is sold or shared with data brokers.

How it is collected

All of it comes from you, directly, as you use the app. There is no background collection, nothing is gathered from other apps or sites, and nothing is bought from anyone else.

• By typing or speaking it. Everything you tell the coach in Chat, and anything logged through the Siri shortcut. The food, training, weight, sleep and mood figures on Today are read out of those sentences — the app has no forms.
• By taking or choosing a photo. Only when you tap the camera button and pick an image. Roughly has no access to your photo library otherwise, and never reads it in the background.
• From Apple, when you sign in — your email address, and your name only if you choose to share it — and when you buy a subscription, as a signed receipt.
• From your device, when you ask for it. A push token if you turn notifications on, your timezone so the day resets at the right hour, and an App Attest key identifier that proves the request came from a genuine copy of the app.

What it is used for

Four things, and nothing else.

• Answering you. Your messages, your photos and the figures already logged for the day are sent to Anthropic so the coach can reply about your day rather than a generic one, and so a photo can be read as a calorie and protein estimate.
• Showing you your own record — the rings, the trends and the “from your conversation” feed on Today.
• Reminding you that the weekly check-in is waiting, if you turned notifications on.
• Running the subscription and keeping the service honest — deciding whether the coach answers, and counting model calls so a runaway client cannot spend without limit.

It is not used to train any AI model, to build a profile of you, to advertise, or for anything at all outside the app.

The AI service, and what is sent to it

The coach is an AI. It runs on the Claude API from Anthropic PBC, which is the only AI service Roughly uses and the only third party that ever sees what you write. Roughly asks you before any of it is sent, in the app, and will not send anything until you agree.

What is sent to Anthropic

• The messages you type to the coach, and the coach's own previous replies.
• Photos of meals you choose to send, and any caption you write with them.
• The figures already logged for the day the message is about — what you ate, what you trained, your targets, weight, sleep, mood and caffeine — so the coach answers about your day rather than a generic one.
• Your weekly check-in answers, in your own words.

What is not

• Your name and email address are never sent. Direct identifiers typed into a message — an email address, a phone number, a card or national ID number — are stripped out on our server before it leaves.
• Your Apple ID, your subscription and payment details, and your device tokens.

What Anthropic does with it

It processes what is sent and returns the reply or the estimate. That is all. Anthropic does not train its models on data sent through the API, does not use it for its own purposes, and does not sell or share it. Roughly has a commercial agreement with Anthropic that binds it to protections equivalent to those described in this policy, and Anthropic publishes its security and compliance position. You can read their side of it yourself: privacy policy, how they use API data and their security and compliance.

Saying no, and changing your mind

The app shows you all of the above and asks before it sends anything. You can withdraw permission at any time in Settings → Data and the AI coach. Withdrawing stops anything further being sent; everything already logged stays where it is and stays readable, and the coach stops replying until you say yes again. To remove the data as well, use Settings → Delete account.

Who else sees it

• Anthropic PBC — the coach itself. Described in full above.
• Vercel hosts the service, runs the database and stores meal photos.
• Apple delivers push notifications, verifies App Attest, and is the merchant for subscriptions — it processes the payment and tells Roughly only that a valid subscription exists and when it expires.

That is the whole list. Each is a processor doing a job for Roughly under a contract that holds it to protections equivalent to the ones in this policy, and permits it to use your data only to perform that job. None of them get it for their own purposes, none may sell it, and there is no fourth.

How long it is kept

Your data stays until you delete it. Roughly does not expire old entries, because the point of a coach is remembering what happened months ago.

Deleting everything

In the iOS app: Settings → Delete account. On the web: Settings → Delete account. Either one permanently erases your account and every entry attached to it — meals, photos, chat history, check-ins, measurements, training, targets and your notification tokens. It is immediate and cannot be undone.

You can also revoke Roughly's access at any time in iOS Settings → your name → Sign in with Apple, though that alone does not delete what is already stored — use the in-app delete for that.

Where it is processed

BotGuild AI LLC is in the United States, and Roughly runs on Vercel infrastructure there. If you use the app from anywhere else, what you log is transferred to and stored in the United States — including your meals, your conversations with the coach and your photographs.

The same is true of the coach itself: Anthropic is a United States company, so the messages and photos sent to it are processed there too. That transfer is the one you are asked about in the app before it happens.

Security

Traffic is HTTPS only. Your session token is held in the iOS Keychain, never in plain storage, and never synced to iCloud. Requests from the app are signed with an Apple-issued App Attest key so a stolen token cannot be replayed from somewhere else.

Children

Roughly is not directed at children under 13 and should not be used by them.

This is not medical advice

Roughly estimates. It is a coach, not a clinician, and its calorie and protein figures are approximations from a photo — the name is the honest part. Nothing it says is medical advice, diagnosis or treatment. Talk to a doctor or a registered dietitian before changing how you eat or train, especially if you have a health condition, are pregnant, take medication that food or exercise affects, or have any history of disordered eating.

Where the figures do come from is written down rather than asserted — the equation behind your starting target, the classification behind the processing gauge, the half-life behind the caffeine reading, each with the published source: Where the numbers come from. The same list is in the app, under Settings.

Terms

The agreement for using Roughly — including the subscription, and the AI model behind the coach — is in the Terms of Service.

Changes and contact

Roughly is operated by BotGuild AI LLC, United States. If this policy changes materially, the date at the top changes with it. Questions, a request about your data, or a deletion you cannot complete in the app: myhumblecoder@gmail.com.