Privacy Policy

Roost is operated by MAJOTOAI LLC (“Roost,” “we,” “us”), the data controller for the information described here. For any privacy question or request, contact privacy@majotoai.com.

• Parent account: your email address, display name, and password (stored only as a salted hash by our authentication provider).
• Household & children: the household you create and the child profiles you add, each with a display name and the chores, homework, screen-time balance, points, and progress you assign or track. You choose what to enter; Roost does not ask children for personal details directly.
• Activity ledger: a tamper-proof record of earned and spent screen-time minutes and completed tasks, so balances are auditable.
• Meals & calendar: meal plans, recipes, grocery lists, and calendar entries you create.
• Technical data: basic, security-necessary information such as your session and, in server logs, IP address and device/browser type. We do not use analytics, advertising, or third-party tracking cookies.

Roost is designed to be set up and controlled by a parent or legal guardian. Child profiles are created by the adult who runs the household, and by doing so you provide and can withdraw consent for the limited information about your child that Roost holds.

• We collect only what is needed to run chores, screen time, and rewards: a display name and the tasks/points you set. We do not require a child’s full name, birth date, photo, or contact details.
• We never show children advertising, never sell or share their data, and never use it to build profiles for marketing.
• The parent can view, edit, export, or delete a child’s data at any time from the app, or by emailing us. Deleting the household or the parent account removes the children’s data with it.
• If you believe a child’s information was provided without the proper adult’s consent, email privacy@majotoai.com and we will delete it.

We use your data only to provide and operate Roost: to sign you in, run households, track chores and screen time, generate meal suggestions you ask for, send transactional email (such as password resets and receipts), and keep the service secure. We do not sell your data, and we do not use it for advertising.

Meal suggestions are generated by an AI provider using only the prompt and preferences you enter; we do not send it children’s data.

Where the GDPR applies, we rely on:

• Contract — to provide the account and features you sign up for.
• Consent — for the child information a parent chooses to add, which you can withdraw at any time.
• Legitimate interests — to keep the service secure and working (balanced against your rights).

We do not sell data. We use a small set of vetted service providers who process data only on our instructions:

• Supabase — database and authentication.
• Vercel — application hosting.
• Resend — transactional email.
• An AI provider — meal suggestions you request (prompt content only).

Roost is operated from the United States, and our providers may process data in the US. Where data is transferred out of the UK/EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses (and, where applicable, the EU-US Data Privacy Framework) to protect it.

We keep your data while your account is active. When you delete a child profile, a household, or your account, we delete the associated data (backups age out on a rolling short cycle). You can delete your account from Settings, or email us to do it for you.

Depending on where you live (including under the UK/EU GDPR), you have the right to:

• access the personal data we hold about you and your family;
• correct inaccurate data (rectification);
• delete your data (erasure);
• receive a copy in a portable format (portability);
• object to or restrict certain processing;
• withdraw consent at any time, without affecting prior processing.

To exercise any of these, use the controls in the app or email privacy@majotoai.com. You also have the right to lodge a complaint with your local data protection authority (in the EU, your national supervisory authority; in the UK, the ICO).

Every table in Roost enforces row-level security so a household can only ever read its own data; data is encrypted in transit and at rest by our infrastructure providers. No system is perfectly secure, but we hold security as a first-order requirement.

If we make material changes, we will update the date above and, where appropriate, notify you in the app. Continued use after an update means you accept the revised policy.