Privacy Policy

Last updated: October 1, 2026

This Privacy Policy explains how ROKIMO (“we”, “us”, or “our”) handles information when you use our website, desktop application, account system, billing features, and related services (together, the “Services”).

We built ROKIMO as a Roblox game buddy. We want you to understand what we collect, why we need it, and what choices you have, without legal fog.

If you do not agree with this policy, please do not use the Services.

1. Who this policy covers

This policy applies to:

Visitors to our website
People who create a ROKIMO account
Users of the ROKIMO desktop app
Anyone who contacts us for support or sends a message through our contact form

2. Information we collect

Account information

When you register or update your profile, we may collect:

Name or display name
Email address
Password (stored in hashed form; we never store plain-text passwords)
Profile details you choose to provide
Sign-in method (for example email/password or Google)

Some features, including starter credits, may require a verified email address.

Billing and credits

To run credit-based billing we may process:

Subscription plan and status
Credit balances (including durable credits and monthly subscription credits)
Credit ledger entries (grants, deductions, redemptions, adjustments)
Purchase history and invoice-related metadata from our payment providers
Redeem-code redemptions

Payment card details are processed by our payment providers (for example Stripe, Creem, or Waffo). We do not store full card numbers on our servers.

Product usage

When you use AI and buddy features, we may process:

Prompts, messages, and related request context you send through the product
Screen content only when you explicitly allow screen understanding
Voice audio only when you use voice features, processed to respond to you
Personal memory you build in the product (preferences and context you choose to keep)
Usage metadata needed for billing and reliability (for example token counts, model routing metadata, timestamps, error codes)

We use this information to provide the feature you asked for, bill usage fairly, prevent abuse, and improve reliability, not to sell a profile of how you play.

Device, security, and anti-abuse data

To protect accounts and the Services, we may collect:

IP address
Browser or app version and operating system
Approximate request timing and related technical logs
Bot-protection signals (for example Cloudflare Turnstile tokens) when enabled at signup or other sensitive actions

We use IP-based limits and similar controls to reduce abuse of free credits and promotional offers.

Communications

If you email us or use the contact form, we collect the information you send (name, email, message content) so we can reply.

If you subscribe to product updates, we process your email for that purpose until you unsubscribe.

Cookies and similar technologies

Our website uses cookies and similar technologies for essential functions such as sessions, security, and language preference. See our Cookie Policy for details.

3. How we use information

We use information to:

Provide, operate, and improve the Services
Authenticate you and sync your account across web and desktop
Grant, deduct, and display credits; run subscriptions and credit packs
Route AI requests through our managed proxy
Detect fraud, abuse, and policy violations
Provide customer support and service notices (billing, security, material product changes)
Comply with law and enforce our Terms of Service

We do not sell your personal information.

We do not use your gameplay habits, voice, or screen content to build advertising profiles.

4. AI processing and third parties

AI providers

When you use AI features, your prompts and related request data are sent to our servers and may be forwarded to third-party AI providers we configure to fulfill the request. Standard product use does not require you to supply your own vendor API keys.

Those providers process data under their own terms and privacy practices. We only share what is needed to complete the request.

Other service providers

We use trusted vendors for functions such as:

Hosting and infrastructure
Authentication and email delivery
Payment processing
Bot protection (for example Turnstile)
Optional analytics needed to keep the website reliable

These providers act as processors / service providers for us and are expected to handle data only for the services they provide to us.

5. Legal bases (where applicable)

If you are in a region that requires a legal basis for processing (for example the EEA/UK), we typically rely on:

Contract: to provide the Services you request
Legitimate interests: security, abuse prevention, service improvement, and communication about the product
Consent: where required (for example optional marketing email, or features that depend on permissions you grant such as microphone or screen access)
Legal obligation: when the law requires us to keep or disclose information

6. Retention

We keep account, billing, and usage records for as long as needed to:

Provide the Services
Resolve disputes
Enforce our terms
Meet legal, tax, and accounting requirements

Subscription credits reset each billing period under our product rules. Ledger history may be retained for auditing.

If you delete your account, we will delete or anonymize personal data that is no longer needed, except where we must retain certain records (for example completed payments) as required by law.

7. Security

We use appropriate technical and organizational measures to protect information, including access controls, encrypted transport (HTTPS), and hashed passwords.

No method of transmission or storage is 100% secure. If we become aware of a breach that affects your personal data, we will take steps required by applicable law, which may include notifying you and regulators where required.

8. Your rights and choices

Depending on where you live, you may have rights to:

Access the personal data we hold about you
Correct inaccurate information
Delete your account or request deletion of personal data
Object to or restrict certain processing
Export a copy of your data
Withdraw consent where processing is based on consent

You can usually:

Update profile details in account settings
Manage subscriptions through the billing portal
Control screen and microphone permissions on your device
Clear or manage cookies in your browser (see Cookie Policy)
Unsubscribe from marketing emails using the link in those emails

To exercise a privacy request, contact us. We may need to verify your identity before responding. We will not discriminate against you for exercising privacy rights available under applicable law.