Privacy Policy

What Rotino collects, why, who it is shared with, how long it is kept and how to have it deleted.

Effective 9 October 2026

The short version

• No account, no ads, no tracking. The app has no sign-in, shows no adverts, does not use the advertising identifier and never asks to track you.
• Your creatures stay on your device. The pictures you make and your gallery are stored only on your device.
• Your words are sent only after you agree. The two words you type go through our server to Google Gemini to make your creature, and our server keeps no copy of them.
• We never sell your data.

What stays on your device

The creatures you make (the pictures, their names and descriptions) and your gallery are stored only on your device, and in your own device backups. They are not uploaded to us. Deleting a creature in the app deletes it from your device, Settings › Delete my data in the app removes all of it, and deleting the app removes everything the app stored.

Making a creature

Before your first creation, the app shows a consent screen that names Google Gemini and explains what is sent and why. Only if you agree:

• The two short words or phrases you type are sent over an encrypted (HTTPS) connection to our server, rotino-api.theapptor.com, which runs on Cloudflare Workers and is operated by The Apptor.
• With them, the app sends your app language code (so the name and description suit your language), a random install ID, the app version and the time of the request.
• Our server sends your two words to Google Gemini, Google's AI service, which we pay to use. Gemini creates the picture, a made-up name and a one-line description, and these come back to your device.
• We never send an account, your name, your email address, photos, contacts or your location, because the app does not collect them.

You can withdraw your consent at any time in the app's Settings. New creations then stop working, because each one is made by Google Gemini.

What our server keeps

Nothing. Your words exist in our server's memory only while your request is being handled, and are not logged or stored. The random install ID is used only for rate limiting and preventing abuse; it is never used to profile you.

Like any internet service, Cloudflare keeps standard request logs (such as the IP address and time of a request) for a short time for security.

Google Gemini

Google processes your two words under the Gemini API Additional Terms of Service for paid services. Under those terms, Google does not use them to train its models. Google returns the picture to our server, which passes it straight to your device without keeping it.

Feedback on creatures

If you answer Do you like this one? (thumbs up or thumbs down, with an optional comment), we store the two words you typed, the creature's name and one-line description, your answer and any comment. The picture is never stored.

This is stored by The Apptor in our archive on Cloudflare (D1), under a random result ID. It is not linked to you or to your device. We keep it for 12 months and use it only to improve results.

Contacting support

If you contact us through the support form in the app or on this website, we receive your email address, your name if you give it, the topic and your message. If you choose to include app details, we also receive your app version, iOS version, device model, language and whether you have Premium. This is stored by The Apptor in our support system on Cloudflare (D1) and emailed to us so we can reply. We keep it for up to 24 months and use it only to help you.

Usage analytics and crash reports

The app uses Google Firebase Analytics and Firebase Crashlytics, with Google acting as our processor.

• Analytics records app usage events such as screens viewed, button taps (for example creation completed) and the Premium screen being shown, linked to a random app instance ID. It does not use the advertising identifier, and ad personalisation is turned off.
• Crashlytics sends a crash report when the app crashes, linked to the same random app instance ID, so we can fix the problem.

None of this is used to track you across other companies' apps or websites. The app shows no adverts and never shows Apple's tracking permission prompt.

Purchases

Premium subscriptions are paid through Apple. Apple handles the payment, and we never see your card or payment details. RevenueCat (revenuecat.com), our purchase provider, receives your anonymous purchase records and an anonymous app user ID, so the app knows whether you have Premium and can restore it.

Notifications

Notifications are scheduled on your device by the app itself. You get a daily reminder only if you set one. If you are not subscribed, the app may also show Tips and offers notifications, but only if you allowed notifications, and you can switch them off in the app's Settings. We do not collect push notification tokens.

Who receives data

We do not sell or rent your data, and we do not share it for advertising. We may disclose information if the law requires it. Some of these companies process data outside the UK and the European Economic Area; where they do, they rely on legal safeguards such as standard contractual clauses.

Why we use your data

• Sending your words to Google Gemini: your consent, which you can withdraw in Settings.
• Install ID, rate limiting and security: our legitimate interest in keeping the service available and preventing abuse.
• Analytics, crash reports and creature feedback: our legitimate interest in fixing problems and improving results.
• Purchases: to provide the subscription you bought.
• Support messages: to answer you.

Children

Rotino is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has sent us personal data, email us and we will delete it.

Your rights

Under UK GDPR and the EU GDPR you can ask us for access to your data, to correct or delete it, to restrict or object to how we use it, and to receive a copy of it. You can also withdraw consent at any time. Because the app has no account, most of what we hold is not linked to you; tell us what you sent and roughly when, and we will do what we can to find it.

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ico.org.uk) or to the data protection authority where you live. We would appreciate the chance to put things right first.

How to delete your data

• On your device: delete a creature in the app, use Settings › Delete my data, or delete the app.
• Feedback: it is not linked to you, so email contact@theapptor.com with the creature's name and the date you sent it, and we will remove it.
• Support messages: email contact@theapptor.com from the address you wrote from, and we will delete them.

More detail is on our Delete your data page.

Changes to this policy

When the app changes what it collects or how it uses data, we update this page and the effective date at the top.

Contact

The Apptor, contact@theapptor.com. You can also use the support form.