Privacy and encryption

#Private by design

Rollov has no ads and no tracking. Your data is yours: it is kept on your device, synced to your account, and never shown to anyone else. Two separate tools add more privacy:

• the app lock hides things on screen from someone holding your device;
• end-to-end encryption seals your content on your device, so not even Rollov's server can read it.

Read the privacy policy for exactly what is collected.

#The app lock

Settings › Privacy & security › App lock asks for a PIN (4 to 8 digits), a password or a pattern before showing:

• the whole app,
• chosen pages: Days, Notes, Projects, Calendar, Search, Ask or Insights (with the pages inside each),
• or single items: lock a task, a note, a project or a person from its details.

On phones, fingerprint or face unlock works on top of the secret. The whole-app lock closes again after the time in the background you choose (right away, 1, 5 or 15 minutes); locked pages and items close as soon as you leave them. While anything is locked, the app switcher shows nothing.

A locked item stays in its place, shown as 🔒 Locked (or a title you choose), and still rolls over. Search, the graph and the widget leave it out.

Forgot it? The lock screen's Forgot it? removes the lock with your account password, or, for Google, Apple and passkey accounts, after signing in again.

#End-to-end encryption

Settings › Privacy & security › Encryption turns on end-to-end encryption, for everything or per type: tasks, notes, projects, people and events. The text of what you write (titles, notes, descriptions, details, comments, section names and files) is sealed on your device with a key that only your passphrase or recovery key opens. Rollov's server stores only what it cannot read.

When you turn it on:

1. Choose a passphrase you will remember.
2. Save the recovery key Rollov shows once, somewhere safe. It opens your data if you forget the passphrase.
3. Your existing content is sealed in the background on this device.

On each new device you unlock with the passphrase, and can choose to remember it on that device.

#What stays readable

So that rollover, repeats and reminders keep working on the server, some things stay readable: dates, statuses, order, time tracked, file types and sizes, settings such as event category names, and your device names. Settings lists them, and what is unavailable with encryption on: the calendar feed, Google and CalDAV calendar sync, link previews, and task names in reminders.

#AI features

Rollov's AI features use Claude. Each has its own switch in Settings › AI:

Each sends only what it needs, Rollov stores nothing they send (apart from the scrapbook's notes on links, kept for you), and none of it is used to train AI models. On encrypted accounts they start switched off. Settings › AI also shows how much of the month's allowance you have used.

#Airplane mode

Airplane mode stops Rollov reaching the network on its own on this device. A strip across the top says it is on, the control center shows what is waiting to sync, and Sync now syncs once when you choose. It is kept per device.

#Crash reports

Settings › Privacy & security › Crash reports chooses whether the app sends reports when something goes wrong, so we can fix it. Reports never include what you wrote: no titles, no text and no addresses of what you opened.

#Security

All traffic is encrypted with HTTPS, and every account's data is kept apart on the server. Sign-in is protected against bots, and deleting the account needs a recent sign-in. See Account for signing in, exporting and deleting your data.