Your work stays yours.

What this policy covers

This policy covers Rodora for iOS and rodora.app. The Mac edition is a separate product with its own local library and licensing. The website cannot read either app’s library or API keys.

Your local library and keys

Images, videos, thumbnails, prompts, drafts, generation history, favorites and privacy choices are stored in the app’s local container. We do not operate a Rodora cloud library or sync service.

API keys are saved in the device’s Keychain with device-only access. Rodora does not sync them to your Mac or upload them to Temporary Studios. A key is sent to its corresponding provider to authenticate your requests, including connection verification.

Your device’s backup settings may include app data. Rodora’s device-only Keychain entries do not migrate to another device. Keep separate exports of work you need to preserve.

When you generate or edit

Before your first generation through a connection, Rodora asks permission to send your prompt, selected reference images and generation settings to that service and the model providers it uses. Results are downloaded into your local library. The provider can associate these requests with your provider account and receives normal network information such as your IP address.

The supported connections are fal.ai, Replicate, OpenRouter, Vercel AI Gateway and Higgsfield. Their data retention, subprocessors and use of content are governed by their policies and your account settings. We do not promise zero retention or that every model provider uses data in the same way.

Rodora receives no copy of these requests on a Temporary Studios server. Providers bill you directly; Rodora for iOS has no subscription or credit purchases.

Optional image titles

Automatic titles are off until you choose to enable them. Naming sends a small image or video-poster preview to Google’s Gemini through an approved fal.ai, OpenRouter or Vercel AI Gateway connection. The fal.ai route also passes through OpenRouter. Your original generation prompt is not sent for naming.

Naming is an additional provider-billed request. You can turn it off in Settings → Privacy & AI, or request an individual title from a result’s menu. Rodora asks permission before using a new connection for naming.

Your choices and deletion

Photo selection uses Apple’s system picker. Camera and saving-to-Photos permissions are requested when you use those features, and can be changed in iOS Settings.

Remove a connection in API Connections to delete its saved key. Withdraw provider permission in Privacy & AI to prevent new content uploads through that connection. Requests already accepted by a provider can continue, and Rodora can still check and download their results.

Moving media to Trash hides it from the library and keeps it recoverable; it does not permanently erase the file. Removing the app deletes its local app container, but does not delete exported files, backups or copies held by providers. Keychain items may survive an app uninstall: remove connections in Rodora first if you want their saved keys removed. Manage provider-side deletion directly with that provider.

Website visits and support

The website is hosted by Vercel. Hosting systems process ordinary request information, including IP address, requested page and browser information, to serve and secure the site. We do not add advertising trackers or marketing analytics. See Vercel’s privacy policy.

If you contact support, we receive the message and contact details you choose to send and use them to respond. Do not include API keys or private images unless they are needed and you choose to share them.

Contact and changes

For support or a privacy request, contact Temporary Studios: rodora@temporarystudios.com.

We update this page when our practices change. If a future feature needs additional data sharing, Rodora will explain it and request any required permission before using it.