1. What this policy covers
The Deeporax Store and the apps, extensions, and tools listed on it, including Roostie, Scrollshot and Nivala. Your Deeporax website account itself is covered by the policy at deeporax.com/privacy, which applies wherever you are signed in there. None of Roostie, Scrollshot or Nivala uses that website account.2. One account, many apps
Signing in to any of our website apps uses the same Deeporax account, so your email and Google user ID are handled once, under the main policy. An app only sees that you are signed in and which plan you are on. Roostie, Scrollshot and Nivala are different: Roostie creates an anonymous identity on the device and never asks for an email, Scrollshot has no account or sign-in at all, and Nivala creates an anonymous identity and only ever asks for an email if you choose to back up your household.3. What an individual app collects
Each app's store page lists what it needs and why. Some collect nothing at all, and we do not add analytics to an app just because we can. The Roostie, Scrollshot and Nivala sections below are the complete list for each.4. Roostie
Roostie is a mission-based alarm. Alarms, streaks, and settings stay on your device. The free alarm features work offline and do not require an account.4a. Roostie identity and cloud rows
On first launch Roostie creates an anonymous user id on our server so push tokens and purchase restore can be tied to an install. That id is not your name or email. You can erase the server row and wipe the device from Settings → Privacy & data → Delete my data. Deleting data does not cancel an App Store subscription; cancel that in Apple ID → Subscriptions.4b. Roostie AI features
Three Pro features send data off the device, and only after you accept a consent sheet that names them: (1) Photo mission — a photo of a morning task is sent to our servers to check it against the task, then discarded. It is never saved to your photo library or ours. (2) Snooze negotiation — microphone audio is recorded only while you argue with the orb for another snooze, sent to our servers to be understood and answered, then discarded. We do not keep a transcript. (3) Morning briefing — a short regional news brief. The brief is generated once per region per day on our server and cached. It carries no personal profile. The app does not request location permission; approximate region comes from the network request that reaches our server.4c. Roostie purchases
Subscriptions are processed by Apple. We receive entitlement status through RevenueCat so the app can unlock Pro. We do not store your full payment card details.4d. Roostie permissions
Camera — only for photo missions and camera-verified push ups. Microphone — only while the voice orb is listening. Notifications and system alarms — so a wake can ring when the phone is locked or silent. No Face ID. No precise location permission.5. Scrollshot
Scrollshot is a Chrome extension that captures full-page, visible-area, or region screenshots of the page you're on, then lets you crop and mark them up without leaving the browser. It has no backend of its own: every capture is stitched, cropped, and encoded entirely on your device, and nothing leaves it unless you choose to download it, copy it, or open a saved file. Scrollshot does not use the Deeporax website account and does not require sign-in.5a. Scrollshot and page content
When you trigger a capture, Scrollshot reads the pixels of the active tab to build the screenshot, using a background canvas the browser requires for that processing. That image is never transmitted anywhere by the extension — it only leaves your device if you personally download it, copy it to your clipboard, or open a saved file.5b. What Scrollshot stores, and where
Your last 20 captures are kept in a local IndexedDB store in your browser, so you can revisit them without recapturing. Your preferred file format and save destination are kept in chrome.storage.local. Both stay on your device, tied to your browser profile, and are removed when you uninstall the extension. Neither is synced to a Deeporax-operated server.5c. Scrollshot permissions
Active Tab lets it see and capture only the page you're currently on, and only when you click the icon, use a keyboard shortcut, or use the right-click menu — it has no access to other tabs or background browsing. Scripting scrolls the page into position while stitching a full-page capture, on the active tab only, during a capture you started. Downloads saves a capture when you choose Save; Clipboard Write copies one when you choose Copy. Offscreen is an invisible background canvas the browser requires for image stitching, with no UI of its own. Context Menus adds a capture option to the page's right-click menu, and Storage remembers your preferences between sessions, on-device only. Scrollshot does not request access to any specific website beyond what Active Tab already grants for the page you're actively using it on.6. Nivala
Nivala works out dinner for a household. Where the work can be done on the device rather than on a server, it is, and the subsections below are the complete list of what can leave your phone. Questions about Nivala go to cfaysal099@gmail.com.6a. What stays on your device
The suggestion engine, and your household, meal diary, dishes and settings. Until you add an email they stay on your phone and nowhere else. Cook-time reminders are scheduled through your phone's own alarm and notification system — the same mechanism a phone alarm uses, so a reminder can still sound when the phone is locked or on silent — and nothing about them is sent to us. Photos on meals you log stay on your phone. The one exception is if you tap “Estimate calories from photo”: after you agree on a prompt that names the provider, that single photo is sent through our server to xAI, an AI service, to name the dish and estimate the portion. We do not store the photo, and nothing that identifies you is sent with it. If you don't use that button, the photo never leaves your phone.6b. Anonymous sign-in ID
On first launch Nivala creates an anonymous sign-in with our database provider, Supabase: no name, no email, no password. It holds none of your data. It exists so a backup can be attached later.6c. Backup with an email (optional)
Add an email in Settings and we send a six-digit code. Once you enter it, backup switches on and your data is saved to our database under that email: dietary rules, allergens, dislikes, calorie goals, religious-observance settings, the meal diary with nutrition figures, your own dishes, pantry and leftovers. It stays up to date while the app is open and online. Rows are protected so only your account can read them. On a new phone, Restore your data with the same email and a fresh code brings it back. We never set a password, use the address only for those codes and for replying if you write to us, and there is no Apple or Google sign-in. Some things never sync: meal-log photos, liked and disliked dishes, reminders, theme and the rating-prompt state.6d. Nivala location
Only while the app is open, and only for restaurant search, setting your area, and the weather. Coordinates go to Google Places through our own relay, to Photon (Komoot / OpenStreetMap) for address search, and to Open-Meteo for the forecast. Never in the background.6e. Nivala dish photos
A photo added to a dish you create is uploaded to our storage on Cloudflare (R2) and processed by Cloudflare Images to remove the background. It sits at an unguessable address, not listed anywhere and not shown outside your household, but it is not access-controlled either.6f. Nivala ads
Nivala shows banner and interstitial ads through Google AdMob. AdMob reads your device's advertising identifier and how you interact with an ad, so Google can choose and measure ads. We request non-personalized ads only, and this is kept separate from your household and meal data. In the EEA and UK, Google's consent form asks before any ad is requested, and you can reopen it in Settings → About → Ad preferences.6g. Nivala ratings and feedback
After real use Nivala may ask once if you are enjoying it. “Yes” opens Apple's or Google's own rating sheet, which we never see. “Not really” opens your email app addressed to us. “Don't ask again” is remembered on your device.6h. What Nivala does not collect
Your name, a password, contacts, calendar, messages, or anything while the app is closed. No analytics SDK beyond ad delivery, and nothing is sold to data brokers.6i. Deleting Nivala data
With an email added: Settings → Backup → Delete account. You confirm, and we permanently erase the account and everything backed up under it, then clear your phone. It cannot be undone. Without an email there is nothing on our servers to delete; Start over or uninstalling clears the phone. Two things deletion does not reach: uploaded dish photos stay in Cloudflare storage because they are not tied to you (email cfaysal099@gmail.com and we will remove them), and our database provider may keep routine backups briefly before they roll off.6j. Nivala and children
Nivala is not directed at children and we do not knowingly collect data from under-13s. A parent may enter a child's dietary needs as a household member; it is treated like everything else here.6k. Nivala processors
Supabase, Google (Places, AdMob), xAI (optional meal-photo estimate), Komoot Photon, Open-Meteo, Cloudflare (R2, Images), and Apple and Google (rating sheet).6l. Nivala permissions
All optional, and each asked for only when a feature needs it. Location — while the app is open only, for restaurant search, setting your area, and the weather; never in the background. Camera / photo library — to add a photo to a dish, to log a meal with a photo, or to use the optional calorie-from-photo estimate (section 6a). Notifications and alarms — so a cook-time reminder can still sound when the phone is locked or on silent, the same way a phone alarm does.7. Apps that keep your data on your device
Some apps never send us anything. The Browser MCP extension can read and change the pages you visit and capture screenshots of them, but that content goes only to the MCP client running on your own machine, over a connection that stays on 127.0.0.1. It does not reach a Deeporax server, and we cannot see it. Scrollshot works the same way: it has no server to send anything to.8. Device permissions
An app asks for a device permission only when a feature needs it, and the store page names the ones it uses. Where the work can be done on the device rather than on a server, it is.9. Update checks
An installed app asks store.deeporax.com whether a newer version exists. That request carries the app's name and the version you are running, and nothing that identifies you.10. Distribution channels
Apps delivered through the Chrome Web Store, the App Store, Google Play, or npm are also subject to that platform's own privacy terms, which we do not control. Those platforms may give us aggregate install and crash statistics; they do not tell us who you are.11. Apps on their own domains
Some products in the store are separate services with their own sites, such as Grokified, Thumbvolt, and Videoquill. What they collect is governed by the policy published on that site.12. AI processing
Where an app generates something for you, the input needed to produce it is sent to AI model providers under contract, for that purpose only. Providers process it to return the answer and are not permitted to use it to train public models or for advertising. We do not sell your content. Do not submit sexual, NSFW, or deepfake material; those uses are banned under the Store Terms and the main Terms of Service.13. Analytics
We measure which store pages are opened and which apps are installed, so we know what to build next. The store itself carries no advertising trackers and builds no cross-site profiles. Roostie and Scrollshot do not include a third-party advertising SDK. Nivala does: it shows Google AdMob ads, as described in section 6f.14. Your rights
Export or delete your data any time from your account, or by writing to us. In Roostie, Settings → Privacy & data → Delete my data erases the server row and wipes local app data. In Nivala, Settings → Backup → Delete account erases the account and everything backed up under it (section 6i). Uninstalling an app removes whatever it kept on your device.15. Changes to this policy
We'll post changes here and update the date above. Material changes get an email where we have one.16. Website payments
If you pay for a Deeporax website plan or credits, Stripe processes the card. We do not store full card numbers. That billing is covered by the Privacy Policy at deeporax.com/privacy. Roostie Pro is billed by Apple or Google, not Stripe, as described in section 4c. Nivala has no paid tier.17. Contact us
Privacy questions to privacy@deeporax.com. Product support to support@deeporax.com. Live chat is on deeporax.com.18. Compliance & data controller
We follow GDPR and CCPA requirements for users in covered regions. The data controller is Deeporax AI Ltd, a company registered in the United Kingdom.