RUDAPrivacy policy
Version of September 12, 2026. Replaces the version of September 8, 2026. Pending legal review. If this translation and the Spanish text differ, the Spanish text prevails.
This policy explains what data the RUDA app and the rudabotica.app website process, why, who it is shared with, how long it is kept and what you can do about it.
Who is responsible
Disruptive Consciousness LLC, 2201 Menaul Blvd, Albuquerque, New Mexico 87107, United States. For any privacy matter: hola@rudabotica.app.
Health data
In RUDA you can record health data: whether you are pregnant, whether you take medication, your allergies, what you want to address, how you felt each day and how a preparation worked for you. You can also tell Rudo, the AI guide, about your health. None of this is required: the app works without it, with fewer warnings.
This data is processed only because you choose to write it, and only to show you cautions, filter preparations and answer your questions. It never goes to usage measurement, to error reports or to RUDA's internal panel, and it is never used for advertising.
What data is processed and why
| Data | Purpose and location |
|---|---|
| Username and password account: username, password and recovery key | Signing in. The password is stored derived with scrypt and a per-person salt; only a fingerprint of the recovery key is stored. Neither can be read back from the database. |
| Apple or Google account: the identifier that provider assigns to your account for RUDA | Signing in without a password. Only that identifier is stored. Your email, your name and the token issued by Apple or Google are not stored. |
| Guest account: an internal identifier and a randomly generated username | Before paying, the app creates a guest account, with no name, email or password, so the purchase is tied to an account. After paying you can secure it with Apple, with Google or with a username and password, or leave it for later. |
| Public alias and short bio | Signing what you publish on the wall. It is the only name other people see. |
| Open session | Keeping you signed in. The server stores a fingerprint of the token and its expiry, not the token. |
| Your notebook: name or nickname, age range, pregnancy, medication, allergies, needs, cabinets, own recipes, saved items, pantry, shopping list, experiences with their notes, daily record and routine reminder | Your library and your cautions. It is stored on your device. The current version of the app does not upload it to RUDA's server. If you export a copy from My account, that copy stays wherever you keep it. |
| Rudo conversations: what you write, the earlier messages of that conversation, up to eight short memories of earlier conversations, and your language | Answering you. All of this passes through RUDA's server and is sent to Anthropic (Claude) or, if it does not answer, to OpenAI (ChatGPT). Your health profile and your account are not sent to them, but everything you write is, including any health data you mention. RUDA's server does not store the text: conversations and memories are stored on your device. |
| Record of each Rudo conversation, without text: account, date, number of messages, whether it ended, provider and model that answered, and your answer to "Did this help?" with its reason, chosen from a fixed list | Counting the conversations available on your plan, controlling costs and knowing whether answers help. |
| Posts, replies, "This helped", follows and reports | The community wall. Stored on the server under your alias. A guest account cannot publish until it is secured. |
| Contributions to the community count: recipe, need, result and date | Showing how many people a recipe helped. Only if you choose to contribute, never with your note, and shown only when there are five or more people for the same recipe and the same need. |
| Purchases: transaction identifier, plan, purchase and expiry dates, whether it is a free trial, whether it auto-renews, status (active, cancelled, expired, in grace period or refunded), price, currency and store country, and the notices Apple and Google send about that purchase | Giving you access on any device, learning about renewals, cancellations and refunds, and keeping accounts. When you buy, the app gives Apple or Google your account's internal identifier so the purchase is tied to it. RUDA does not receive your card or billing details. |
| Installation data: a random identifier the app generates when installed, platform, app version, language, time zone, approximate country, date of first use and days of use | Measuring how many people come back to the app, on which versions and in which markets. RUDA creates that identifier; it is not the phone's advertising identifier. |
| App usage: events from a fixed list, such as "opened the app", "created a cabinet", "viewed the plans", "chose a plan" or "secured the account", and the date each installation first took those steps | Understanding which parts work and where people get stuck. The list does not include recipes, needs, results, daily records, wall text or Rudo text. |
| Origin: your answer to "Where did you hear about us?", the campaign link code you arrived with and, on Android, the install data provided by Google Play | Knowing which channels bring people. On iPhone, RUDA does not know per person which link you came from: Apple only provides per-campaign totals. |
| Crashes and errors: error type, where it happened, screen, app version, operating system and phone model, and performance samples | Finding and fixing failures. They go to RUDA's own log with nothing that identifies you (emails and long codes are masked before storage) and to Sentry, with your account's internal identifier if you are signed in. |
| Support messages: category, message, email if you choose to leave one, platform, version, language and the screen you write from, and RUDA's replies | Handling your request. The reply reaches you inside the app and, if you left an email, by email as well. |
| Messages to RUDA's Instagram accounts: your Instagram contact identifier, the post you wrote or commented from, whether you received the automatic message and whether you tapped the link | Replying by direct message and measuring which posts bring people. Only if you write or comment on Instagram. On Android, if you install RUDA from that link, the installation may be associated with that contact. |
| Clicks on rudabotica.app campaign links: the link code, the day and whether the device was an iPhone, Android or other | Counting clicks per campaign. The IP address is not stored. |
Approximate country and IP address
The country comes from the header added by the network that protects the server (Cloudflare) or, if it is missing, from the phone's time zone. RUDA does not use GPS and does not ask for location permission.
The IP address is used at the moment of the request to limit abuse and is not stored in RUDA's database. Cloudflare and Render see it as the connection passes through and keep it in their technical logs for the periods of their services.
Camera, photos and reminders
The camera and the photo library are there to look at your pantry while you mark the ingredients you have. The photo is shown on screen and is neither uploaded nor stored.
Reminders are scheduled by your phone. RUDA does not receive any identifier to send you notifications.
Usage measurement and errors
RUDA uses PostHog to count usage events and Sentry to receive error reports, in the app and on the server. They are configured as follows:
- No automatic capture of taps, no session recording and no screenshots.
- The app asks PostHog not to derive your location from the IP address, and Sentry is configured not to store the IP address or the personal data it adds by default.
- Sentry does not receive request bodies, cookies, headers or URL parameters.
- Both receive the installation identifier and, if you are signed in, your account's internal identifier. Never your name, your email, your alias or any health data.
- None of this is forwarded to Meta, to advertising networks or to data brokers.
What RUDA does not do
- It does not send health data to usage measurement, to error reports or to the internal panel.
- It does not track you for advertising: it does not use the phone's advertising identifier and does not combine your data with other companies' data to show or measure ads.
- It does not sell your data or share it for advertising.
- It does not show ads.
- It does not use your GPS location, your contacts or your microphone.
Who can see what
Your notebook, your Rudo conversations and what Rudo remembers about you are on your device. They do not appear on the wall and are not shown to other people.
What you publish on the wall is visible to anyone using RUDA, signed with your alias. It is anonymous with respect to your real name because RUDA does not ask for it, and stops being anonymous if you write identifying details. A deleted post stops being displayed and served; it cannot be pulled back from the screen of someone who already saw or copied it.
The RUDA team uses an internal panel that runs only on its own computers, with a password and two-step verification, and that logs every change it makes. From there it can see a summary of your account (alias, username, sign-in method, plan, purchases, country, language, version and platform), how many posts and conversations you have, your support messages and the text of posts other people reported. That panel does not read your notebook, your Rudo conversations, what Rudo remembers or your health needs.
Who it is shared with
These providers process data on RUDA's behalf, only to provide the service listed:
| Provider | What it does | Country |
|---|---|---|
| Render | Hosts the app's server | United States (Virginia) |
| MongoDB Atlas, on Amazon Web Services | Database | United States (Virginia) |
| Cloudflare | Network that protects and routes traffic to the server | United States, with a network in several countries |
| Anthropic | Rudo's main model (Claude) | United States |
| OpenAI | Rudo's fallback model (ChatGPT) | United States |
| PostHog | Usage measurement | United States |
| Sentry | Error reports | United States |
| Resend | Emailing support replies, if you left an email | United States |
| InstantDM | Automatic replies to Instagram direct messages | To be confirmed |
| Hostinger | Hosts the rudabotica.app website and these pages | To be confirmed |
Under their API terms, Anthropic and OpenAI do not use Rudo's messages to train their models and keep them for a limited time to monitor abuse. Requests to OpenAI are made asking that the response not be stored.
Apple and Google process sign-in and purchase data under their own privacy policies. Google also receives your IP address when a rudabotica.app page loads its fonts. If you write to RUDA on Instagram, Meta processes that conversation under its own policy.
RUDA may disclose data when a competent authority requires it under the law.
International transfers
RUDA's server, database and providers are in the United States. If you use RUDA from another country, your data is transferred to the United States. Those transfers rely on each provider's data processing agreement, with standard contractual clauses where the applicable law requires them.
How long it is kept
| Data | Period |
|---|---|
| Account, alias, posts, count contributions and associated purchases | Until you delete the account |
| Session | 30 days, or until you sign out |
| Notebook, Rudo conversations and memories | On your device, until you delete them or uninstall the app. The daily record keeps the last 365 days. |
| Record of each Rudo conversation, without text | 30 days |
| Answers to "Did this help?" | 180 days |
| Rudo usage summed by day, provider and model, with no data about people | No limit: it identifies no one |
| Usage events in RUDA's database | 90 days |
| Days of activity per installation | 400 days |
| Apple and Google purchase notices | 400 days |
| Crashes in RUDA's own log | 30 days |
| Reports in Sentry and events in PostHog | The retention period of the plan contracted with each service |
| Support messages | While the account exists |
| Installation and account summary (platform, version, language, country, first steps and origin) | There is currently no automatic deletion period. When the account is deleted, the installation stops being associated with it. |
| Instagram contacts and campaign link clicks | There is currently no automatic deletion period. You can ask for them to be deleted. |
| Render and Cloudflare technical logs | The periods of those services |
| Backups | As of September 12, 2026, the database has no automatic backups. If they are enabled, their retention period will be published here first. |
How it is protected
Traffic between the app and the server is encrypted with HTTPS. Passwords and the recovery key are stored derived, as described above.
On iPhone and iPad, the notebook is stored encrypted with AES-GCM and the key lives in the system Keychain: an unencrypted device backup cannot open it. On Android it is stored in the app's private storage, which the system encrypts.
What does live on the server (account, wall, purchases, conversation records without text, support and measurement) is stored in the database without a second application-level encryption layer: anyone with administrative access to that database can read it. This is stated here because it is what the code does today.
RUDA's server has a feature to sync the notebook across devices that the current app does not use. If it is enabled, the notebook would be stored in that database under the same condition, and this policy will be updated before it is enabled.
Legal basis
For people using RUDA from the European Union, the United Kingdom, Brazil or other places with equivalent laws:
- Performance of the contract: the account, purchases, Rudo, the wall and support.
- Explicit consent: the health data you choose to record or write to Rudo. You withdraw it by deleting that data.
- Legitimate interest: usage measurement, error reports, security, abuse prevention and campaign measurement. You can object.
- Legal obligation: purchase accounting and requests from authorities.
Your rights
You can ask to access your data, correct it, delete it, take it with you, restrict its use, object to usage measurement and withdraw your consent. Inside the app you can edit your notebook, export a copy and delete your account (how to delete it and what is deleted). For anything else, write from Support inside the app or to hola@rudabotica.app. You will get an answer within 30 days.
To confirm that the account is yours, you may be asked to write from the app while signed in. Never send your password or your recovery key.
You can also complain to the data protection authority of your country.
Minors
RUDA is for people aged 18 and over and does not knowingly collect data from minors. If an account belonging to a minor is detected, it is deleted.
Scope
RUDA does not replace care from a health professional, does not diagnose, does not prescribe treatment and must not be used to decide to stop taking medication. In an emergency, call your local emergency services.
Changes
Changes are published on this page with their date. If a change expands what is done with your data, the app announces it before it applies.
Disruptive Consciousness LLC · 2201 Menaul Blvd, Albuquerque, New Mexico 87107, United States · hola@rudabotica.app