Privacy policy
Effective November 1, 2026 · 한국어
Rollov is a daily task list, with notes and projects, on the web at my.rollov.app and as apps for Android and iOS. This policy explains what personal information Rollov processes, why, who helps run the service, how long data is kept, and the rights you have. It applies to the apps, my.rollov.app and rollov.app.
In short
- Rollov keeps what you write and the account details it needs to sync it, and nothing more.
- No ads, no third-party analytics or tracking, and your data is never sold or shared for advertising.
- Crash reports describe the error, never what you wrote, and can be turned off in Settings.
- End-to-end encryption is available: with it on, Rollov cannot read your tasks and notes.
- The AI features send only what each one needs to Anthropic, only when you use them, and can be turned off.
- You can export everything or delete your account from Settings at any time.
1. Who is responsible
Rollov is run by YDLY Co. ("we"), which is responsible for your personal information as its controller. Contact us about anything in this policy at support@rollov.app; see also Contact and privacy officer.
2. What we collect and why
| Information | Why we use it | Legal basis (EEA/UK) |
|---|---|---|
| Account: email address, password (stored only as a hash), account id; if you sign in with Google or Apple, the email address and name they share and their id for you; if you add a passkey, its public key (never your fingerprint or face, which stay on your device) | Create your account, sign you in, send account emails (confirmation, password reset) | Contract |
| Settings: timezone, day-start hour, reminder time, language, daily capacity for planned work, encryption and AI switches | Turn the page at your midnight, send the reminder you asked for, keep your preferences across devices | Contract |
| Your content: tasks, notes, projects, templates, events, people (with the details you give them, such as work, phone numbers, emails and dates), sections and day pages, with the history of every change and the device time it was made, and when each focus session you time on a task started and ended | Store and sync your lists, roll unfinished tasks over, keep past days as you left them | Contract |
| Reminder subscriptions: the push address and keys your browser gives Rollov, and the browser's name | Deliver the daily reminder to that browser | Consent (you turn it on, and can turn it off) |
| AI usage: number of AI requests, tokens and cost per feature and day (never the content) | Keep each account within its monthly allowance and show you your usage | Contract; legitimate interests (preventing abuse) |
| Service logs: IP address, time, the request made and the browser or app version, recorded by our hosting providers | Operate the service securely, prevent abuse, fix problems | Legitimate interests (security and reliability) |
| Crash reports: the error message and where in the app it happened, the app version, the browser or operating system, and the page's path; for a change the server refused, only which kind of item, the operation and the error code. No task or note text, account id or email | Find and fix errors in the app | Legitimate interests (reliability); you can turn them off in Settings |
End-to-end encryption. If you turn it on, the titles and text of your tasks, notes and projects and the names of sections are encrypted on your device before they are sent, with a key derived from your passphrase. We cannot read them; templates and time estimates are encrypted with them. Dates, statuses, order, focus session times and links between items stay readable so rollover, recurring tasks and reminders keep working.
Contacts you import. In the apps, Rollov reads the phone's contacts only when you choose to import from them, and only to show you the list; the contacts you pick become people in Rollov, with their names, work, phone numbers, emails and birthdays, and are stored and synced like the rest of your content. The others never leave the phone.
Images and files you attach. Photos, videos and files you add to a task, note or person (from the camera, your photos or your files) are stored and synced like the rest of your content, and encrypted with it when end-to-end encryption is on. Rollov sees only the ones you pick, never the rest of your photo library.
What we do not collect. We do not collect your location, your address book (beyond the contacts you pick to import), your photo library (beyond the images and files you attach), advertising identifiers or payment details, use third-party analytics or advertising tools, or track you across other apps and websites. We do not make decisions about you by automated means that have legal or similarly significant effects.
3. Data on your device
So that Rollov works offline, a copy of your data is kept in your browser's or the app's storage on each device you sign in on, along with your session and device preferences (such as language and view options). Rollov does not use cookies for tracking or advertising. Signing out removes your data from that device. If you choose "Remember on this device" for encryption, the key is kept in that device's storage, protected by a key the browser does not let be read out.
Other calendars. If you add a calendar by its link, the link and its events are kept only on that device; Rollov's server fetches the link for your device each time it refreshes and keeps nothing of it. In the apps, if you let Rollov see the phone's calendars, their events are read on the phone and shown there, and are not sent to Rollov. If you turn on "Rollov on this phone", Rollov writes your events, time blocks and due dates into a Rollov calendar on the phone. If you make a feed link for another calendar app, anyone with that link can see your events, time blocks and due dates (items you locked show only what they show while locked); we keep only a hash of the link, and you can replace it or turn it off in Settings. Feed links are not available with end-to-end encryption on. If you connect Google Calendar on the web, we keep the access Google gives Rollov (not your Google password) and your Google email address on our server until you disconnect; your Google events are read through our server for your device each time it refreshes and are kept only on that device, and changes you make to them in Rollov are sent to Google. If you turn on "Rollov in Google Calendar", your events, time blocks and due dates are written to a Rollov calendar in your Google account, where Google's privacy policy applies to them. This is not available with end-to-end encryption on. Disconnecting revokes Rollov's access at Google and deletes what we kept.
4. AI features
Rollov offers quick add in plain language, a morning brief and "Ask your history". They run on Claude, made by Anthropic. When you use one, Rollov sends Anthropic only what that feature needs: the line you typed, today's date and your section and project names (quick add), today's tasks with their dates and sections (the brief), or your question and the search results your device finds for it (Ask). Rollov stores none of it. Under its commercial terms, Anthropic does not use this data to train its models and keeps it for up to 30 days, as described in its privacy policy. Each feature has its own switch in Settings, and they start off on encrypted accounts.
5. Who we share it with
We do not sell your personal information or share it for cross-context behavioral advertising. We do not give it to third parties for their own purposes. We use these service providers, who process it only on our instructions to run Rollov:
| Provider | What it does | Data | Where |
|---|---|---|---|
| Supabase, Inc. | Accounts, database, server functions, account emails | All of section 2 | Seoul, South Korea |
| PowerSync | Syncing data between the database and your devices | Account id, your content and settings | Japan |
| Vercel Inc. | Hosting the website, the web app and app updates | Service logs | United States, served from a nearby location |
| Anthropic, PBC | The AI features, when you use them | What each feature sends (section 4) | United States |
| Functional Software, Inc. (Sentry) | Collecting crash reports | Crash reports (section 2) | United States |
| Your browser's push service (Google, Apple or Mozilla) | Delivering the daily reminder and task reminders | Push address; the daily reminder holds only task counts, and a task reminder names the task only if you turn that on (never on encrypted accounts) | Depends on the browser |
We may also disclose information if the law requires it, to protect the rights and safety of users or the service, or as part of a merger or sale of the service, in which case this policy keeps applying to your data and we will tell you beforehand.
International transfers. Some providers are based in, or process data in, countries other than yours, including the United States. Where the law requires it, transfers rely on safeguards such as the European Commission's standard contractual clauses, which these providers include in their data processing terms. Section 11 gives the details Korean law asks for.
6. How long we keep it
- Account, settings and content: until you delete your account. Deleting a task in the app keeps it in your history, so past days stay as they were; deleting your account removes everything.
- Reminder subscriptions: until you turn reminders off, the browser stops accepting them, or you delete your account.
- AI usage counts: until you delete your account.
- Service logs: deleted automatically by our providers within 30 days.
- Crash reports: deleted automatically within 90 days.
- Backups: the database provider's backups expire within 30 days, so deleted data leaves them by then.
When you delete your account, your data is deleted from our database straight away and cannot be recovered. We do not keep it for any other purpose, unless a law requires us to.
7. Security
Data is encrypted in transit (HTTPS) and at rest by our database provider. Every row is protected by access rules so each account can only reach its own data, server keys are kept out of the apps, and access to production systems is limited to the people who run Rollov. Optional end-to-end encryption keeps your content unreadable to us. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.
8. Your rights and choices
Wherever you live, you can:
- See and correct your data in the app at any time.
- Get a copy of everything in a portable format: Settings, Export (JSON or Markdown).
- Delete your account and all its data: Settings, Account, Delete account, or see deleting your account.
- Withdraw consent to reminders, or turn off AI features, in Settings.
- Ask us to access, correct, delete or restrict your data, object to its use, or explain how it is used, by writing to support@rollov.app. We may need to confirm the request comes from the account's email address. We answer within 10 days (Korea), one month (EEA/UK) or 45 days (California), and do not charge for it.
EEA and UK. You have the rights of access, rectification, erasure, restriction, portability and objection under the GDPR and UK GDPR, and can complain to your local data protection authority.
California and other US states. In the last 12 months we collected the categories of identifiers (email, account id, IP address), internet activity (service logs) and the content you create, for the purposes in section 2, and disclosed them only to the service providers in section 5. We do not sell or share personal information, and do not use or disclose sensitive personal information for purposes that would give you a right to limit it. You have the right to know, delete and correct your information, and we will not treat you differently for using these rights. You can use an authorized agent, who must show your written permission.
South Korea. See section 11 and the Korean version of this policy.
9. Children
Rollov is not meant for children under 14 and we do not knowingly collect their data. If you believe a child has given us data, write to us and we will delete it.
10. Changes
If this policy changes, the effective date above changes with it. We announce significant changes in the app or by email before they take effect, and keep earlier versions available on request.
11. For users in South Korea
Under the Personal Information Protection Act, the Korean version of this policy lists, for each provider in section 5, the data transferred abroad, the country, when and how, the purpose and retention period, and how to refuse. Refusing a transfer means not using the part of Rollov that needs it: Anthropic only receives data when you use an AI feature, which you can turn off, and Sentry only receives crash reports while they are on in Settings, while the database, sync and hosting are needed to provide the service. We do not provide your data to third parties for their own use.
12. Contact and privacy officer
Privacy officer: Jin Woo Lee, YDLY Co., support@rollov.app. We answer privacy questions, requests and complaints at this address.