Privacy Policy

1. What we keep

• Your account: a random account id and a one-way fingerprint of your email address (a keyed hash that lets us recognize the address when you sign in; it can't be turned back into the address). Passkeys' public keys (never their private keys) with the label you give them, and sign-in sessions, stored only as hashes.
• Your public name: the name you choose for your ledger entries. It is shown to every member on what you contribute; a nickname is fine.
• Your subscription: your plan, number of computers, billing dates, payment status and amounts, Helcim's reference for your customer record, and the nickname you give your card (your own label, never card data).
• Your computers: for each activated computer, a random install id, its operating system, and when it was activated and last used. No computer names and no network addresses.
• Beta testers: whether you're in the beta, when you joined, and the version of the beta terms you agreed to. Adding a computer with a code keeps only the code's hash, until it expires.
• Your contributions: ledger entries and corrections you or your Claude add, credited to your public name, with their edit history and cited sources.
• Fair-use records: which ledger entries your key read in the last two days and how many titles it listed each day (to apply the reading limits), and notes for our admins when a limit is reached or a request to copy the ledger or the tools is blocked. A note records only its kind and time, never your words; your computer decides locally whether a prompt is such a request and sends only which kind it was.
• Tool fingerprints: each copy of tool code sent to your computer carries a mark that links it to your public name, the tool and its version, so a leaked copy can be traced.

2. What we don't keep

• Your email address. Sign-in emails go to the address you type, which is used to send them and then discarded. When we email you about your subscription (for example a failed payment), we read the address from Helcim at that moment and don't keep it.
• Your card, billing address or phone number. You enter your card in Helcim's secure window, and your billing details go straight through to Helcim, which keeps them to charge you and calculate tax.
• Your prompts, projects and files. Your prompts never leave your computer (to find relevant ledger news, your computer sends only short hash codes mixed with random decoys and does the matching itself). When Claude searches the ledger for you, the search words are used to answer and not stored. Tools run on your computer.
• Who reads what. The public "Brain" map on our website shows only that an entry was used, never what it says, what anyone searched for, or who read it.

Our servers' short-lived technical logs (the method, page and result of each request, never your network address, search words or content) are kept for 14 days to keep the Service running and secure, then deleted.

3. How we use it

To provide and secure the Service: signing you in, keeping your subscription in step with Helcim, enforcing your license, crediting your contributions, and preventing fraud and abuse.

4. Who has your information

• Helcim, our payment processor, holds your card, billing address and email and processes your payments under its own privacy policy. Helcim also sends your receipts.
• Our email provider delivers sign-in and account emails.
• Google Fonts: our web pages load fonts from Google, which receives your network address when your browser fetches them.
• Other members see your public name on the ledger entries you contribute.
• Authorities, if the law requires it, and a buyer if Roejin's business is sold (this policy would continue to apply).

We don't sell or rent personal information, and we don't share it for advertising.

5. Cookies

We use only cookies the Service needs: a sign-in session cookie on account pages. There are no analytics, advertising or tracking cookies.

6. How long we keep it

• Account, subscription and computer records: while your account exists, and up to 12 months after your subscription ends, so you can come back.
• Payment records (dates, amounts, status): as long as tax and accounting law requires (typically 7 years).
• Server logs: 14 days.
• Ledger contributions: they stay in the shared ledger after you leave; you can ask us to change the name on them.

7. Your choices and rights

You can remove computers and passkeys, change your card and its nickname, and cancel on your account page. You can ask us for a copy of what we keep, to correct it, or to delete your account; we'll respond within 30 days. Your card and billing details are held by Helcim; we can pass on requests about them. Depending on where you live (for example California or the European Economic Area), you may have further rights, such as to object to or restrict processing or to complain to a data protection authority. Contact us through the contact form at roejin.com.

8. Security

Connections to our website and service use HTTPS. Sign-in tokens, sessions and device credentials are stored only as hashes, license keys are encrypted at rest, and each computer's credential rotates automatically. No system is perfectly secure; if a breach affects your information, we will tell you as the law requires.

9. Children

The Service is not for children under 13, and subscribers must be adults. We don't knowingly keep children's information; if you believe we have, contact us and we'll delete it.

10. Where it's stored

The Service runs on servers in the United States. If you use it from elsewhere, the little we keep is processed in the United States.

11. Changes

We'll post changes here and, for material ones, email you (at the address Helcim holds) before they take effect.

12. Contact

Send questions and legal notices to Roejin LLC through the contact form at roejin.com.