Legal

Privacy Policy

Effective date: October 16, 2026

RobLabs R.U.B.I. is designed around the principle that your data belongs to you. This policy explains what information we handle, how we protect it, and what choices you have.

Public-site visitor analytics

With your permission, RobLabs records your IP address, approximate country, date and time, referring website, public pages viewed, navigation clicks, scroll depth, visible-page duration and external website links clicked on this site. This log is restricted to SuperAdmins. It does not capture form contents, passwords, private conversations or browsing after you leave. Referrals and location may be unavailable; an outbound click is not proof that another website loaded. Records are retained for a rolling 90 days and expired records are removed as new visits arrive. Do Not Track and Global Privacy Control signals are respected. You may withdraw consent below.

What we collect

We collect only what is needed to operate your assistant: account identifiers, the memories, rules and projects you explicitly save, voice/text messages you send to Rubi, device registrations, and credentials for systems you choose to connect. We do not scrape your files, contacts or browsing history without a specific instruction you give.

How credentials are protected

Passwords, API keys, email credentials and integration tokens are encrypted at rest with AES-256-GCM and decrypted only inside the server function that uses them. They never reach the browser, are never written into logs, and are never injected into a model prompt or shared with a third party.

Camera, microphone and biometrics

Rubi can use your camera and microphone only after you grant permission at the browser or device level. Face templates and biometric match events are stored separately from profile data. You can revoke access at any time in your device settings or in Rubi's permissions panel.

Your data is yours

Memories, documents, drawings, monitoring targets and connected-system data belong to your account. We do not sell, rent or share your data for advertising. Authorized staff cannot read your encrypted credentials. You can export or delete your account data from the settings screen.

Third-party services

When you connect Gmail, calendars, Campusverse, smart-home devices or other systems, Rubi acts as your agent on those services. We request only the scopes you approve, and you can disconnect any integration at any time. Each integration keeps its own audit trail.

Communication records

Conversations with Rubi are stored so she can remember context across sessions. You can delete individual messages or entire threads. Email sent or read through connected channels is recorded in an action log that you can inspect.

Retention and deletion

You can delete your account and all associated data from the settings screen. After deletion, live data is removed within 30 days and encrypted backups expire according to our rolling schedule. Some immutable audit records may be retained where required by law.

Contact us

For questions about this policy or to request a copy of your data, email privacy@robgens.ai.