If you self-host, Rosey runs entirely on infrastructure you control — your own machine, Fly.io account, or Raspberry Pi. There's no central server or shared database, and no administrator access. Your household's data stays within your own deployment.
If you use our hosting, your data resides in an isolated partition on a Fly.io virtual machine (Fly.io is SOC 2 Type II audited) and is never combined with data from other households.
In both cases, messages you send Rosey pass through Anthropic's Claude API, which does not use your data for model training by default. Your chat platform (Telegram, WhatsApp, or Alexa) processes the conversation as it would any other message.
Hosted Rosey includes text PII redaction for common sensitive fields like emails, phone numbers, addresses, invite codes, and API-key-shaped secrets before messages are sent to AI providers. The private mapping stays in your household's isolated runtime, outside Rosey's memory folder, so the model can work with placeholders while replies still feel natural. Voice notes and images may still be processed by provider APIs when those features are enabled.