Privacy policy

Updated 4 October 2026 ยท Android Version 1.3

More Room is operated by Vikas R. Questions and privacy requests can be sent to support@bargainreels.in.

What the app stores locally

More Room is local-first. Depending on choices you make, the app can store your language, adult-eligibility confirmation, goal, confirmed notes, saved plan, activity sessions and optional reflections, voluntary boundary settings and selected app identifiers, notification/support preferences, aggregate usage observations, optional daily Health Connect totals, and optional wellbeing check-ins. Raw Health Connect records, source-app identifiers, routes, sleep stages and exact health-record timestamps are not retained by More Room. Calendar event titles, descriptions, attendees and locations are not retained as app context. Android backup and transfer are disabled for app data.

Urge breaks (including fetch) retain game name, start/end time, foreground play duration, end reason and optional before/after urge ratings. Ordinary activities can also retain optional urge ratings. After-ratings include the time they were recorded. The latest 200 urge breaks are kept locally until deleted in Progress or by a full reset. This history contains no game high scores or vent/chat text and is not uploaded or added to AI requests. Missing ratings are not inferred.

The extended onboarding saves questionnaire answers and drafts, optional nickname, pet name/coat/bandana, an optional check-in intention and foreground opening dates locally. Opening dates form a check-in calendar and streak; they are not evidence of health improvement or less screen use. These records are not sent to AI or analytics. The optional home-screen widget shows only the pet and check-in streak. Delete check-in history or erase all local data in the app.

Daily reflections and bounded browsing

New screen-on and More Room foreground measurement are separate optional local choices. Partial app intervals are not total screen time; missing measurements are unknown. Daily cards and coaching context are encrypted with Android Keystore and excluded from backup. Cards expire after 30 local dates and new daily measurements after 90 dates; recent exact excerpts expire after seven days (20 local), and lasting memories require explicit Save (20 local). Inspect, edit or delete context separately. Revocation/deletion prevents old pending responses from restoring it.

Deliberately opening a website sends normal HTTPS requests directly to that website under its own privacy terms. Website sign-in/cookies/storage may remain inside the app browser until you clear browsing data. More Room does not copy page, URL, credential, chat or keystroke content into AI or session history. First-host setup is capped at 90 foreground seconds; each timed block is capped at two minutes and stops web interaction/media before the optional check-in. Progress retains only a generic timed-browsing kind, origin, linked block identifiers, foreground duration, end reason and optional ratings. Clearing website data preserves first-host setup-used flags; a full local reset clears both. Instagram and TikTok remain unavailable pending service/region/compatibility review.

Google Play memberships

Google Play handles subscription prices, trial eligibility, payment and cancellations. A dedicated More Room service uses Play Integrity to authenticate anonymous installations and the Google Play Developer API to verify purchases, acknowledge completed purchases and process authenticated subscription notifications. Purchase tokens are processed in memory and are not stored in its ledger or application logs. The service retains hashed installation and purchase identifiers, subscription status, verification times and expiry times; installation links expire after 30 days, while hashed purchase-chain identifiers and canonical membership status remain until expiry plus 60 days, independently of installation credentials. Minimal membership/quota snapshots are encrypted for seven days; they exclude chat and report bodies. No questionnaire, pet, health, calendar or usage records are sent to this service. A previously verified membership can work offline until its verified expiry; restoration and new purchases need a connection. Deleting local app data does not cancel a Google Play subscription.

Optional permissions

Declining or revoking an optional permission leaves the offline activities available.

Optional AI

AI is off until you accept its separate disclosure. When you ask Pip, More Room sends your typed message and only the context items you individually select, such as a confirmed goal, confirmed note, or user-entered availability/phone-use minutes. Raw Health Connect records, heart-rate/HRV and calendar/browser contents are excluded from AI. Normal builds currently disable even derived step/sleep sharing pending a dedicated provider/privacy/store/region review. Individually selected dated usage and More Room/break summaries, a chosen goal/attitude, up to five current-chat messages, up to five exact seven-day excerpts and up to eight confirmed facts total can be shared after their independent choices and preview. Automatic daily generation is off by default and requires a separate continuing-context confirmation; it shares the existing membership allowance. Collection alone does not authorize sharing. Boundary data is excluded.

Optional AI is processed by the dedicated More Room API and ArliAI using Gemma-4-31B-it for generation and separate input/output safety classifications. ArliAI's privacy policy declares that prompts and replies are processed transiently without content storage or logging. It retains non-content usage metadata for up to 60 days. These are provider commitments, not an independent audit. Providers process the selected content outside your device and potentially outside your country. Do not send information you do not want processed remotely.

More Room's service stores no ordinary prompt or reply body; explicitly submitted safety reports have the retention described below. It stores only one-way hashes of anonymous installation tokens, opaque challenge/request identifiers, status, quota timestamps and expiries for up to 30 days. Play Integrity tokens are checked transiently and are not persisted. A rolling allowance permits up to 50 AI requests per verified membership per 24 hours, shared across restored installations. Short-lived AI sessions are valid for 15 minutes, and membership is checked before and after generation. Limited non-content billing, security and reliability metadata may be retained by ArliAI or infrastructure providers under their policies. Processing can occur outside your country. Withdrawal revokes AI sessions and removes the installation binding from request metadata; anonymous quota timestamps remain up to 30 days to prevent resetting the allowance. It cannot undo processing already completed by ArliAI.

Saved AI chats and safety reports

Submitted AI messages and accepted replies are encrypted with Android Keystore on your device, with the latest 200 messages retained. They are excluded from Android backups and do not sync. Up to five recent messages are shared only when you select history sharing and review the preview. Unsent drafts and offline vent text are not saved as AI chats. Submitted coaching chat messages, including explicitly submitted offline messages, are encrypted locally; an offline response is labelled authored and sends nothing. Questionnaire and other local records are not automatically included; a selected Pip attitude has its own sharing choice.

Report reply opens an editable preview and requires explicit consent. Only the submitted reply/category and optional note go to the developer; the original prompt and other conversation are excluded unless you add them. Reports are encrypted separately, retained for up to 30 days, excluded from backups and reviewed through a private operator interface. They are an exception to ordinary message-body non-retention. Reporting remains available through Help after membership expiry.

Collection and sharing summary

For Google Play Data Safety purposes, optional AI text and anonymous installation/security identifiers are treated conservatively as collected for app functionality, fraud prevention and security. AI text is treated as shared with processing providers unless an applicable reviewed service-provider exception is established. Local-only raw usage, calendar and Health Connect data is not collected off device by More Room. Selected derived usage and user-confirmed context used for optional coaching are treated as transmitted app-interaction/user-content data. Derived health sharing remains disabled pending its separate review.

What we do not do

More Room has no advertising, analytics SDK, data broker, account, social feed or sale of personal data. We do not use health information for advertising, credit, insurance or profiling. Research participation, if ever offered, would require a separate scoped notice and consent.

Deletion and retention

Use the in-app controls to delete history, confirmed memories/plans, wellbeing check-ins, imported local aggregates, boundaries, or all local data. Disconnecting AI revokes its session and removes the installation binding while retaining anonymous quota timestamps for up to 30 days. Saved chats have separate deletion controls. Delete-all immediately removes local chats and their encryption key and attempts server report/installation revocation; if offline, expiry/retention limits remain the fallback. Uninstalling removes app-local data subject to Android behavior. Ended activity sessions are limited to the latest 200 until deleted; optional aggregate histories use the period selected in the app. Security metadata expires with the 30-day anonymous token.

Security and age

Network requests use HTTPS. Release builds prohibit cleartext traffic. Secrets are not shipped in the app. No system is perfectly secure. More Room v1 is intended for adults aged 18 and over and is not directed to children.

Your choices

You can use the core offline app without AI, Health Connect, usage access, calendar, Accessibility access or notifications. Depending on where you live, you may have legal rights concerning data processed by service providers. Contact us to ask a question or exercise an applicable right. Identity or additional information may be needed to verify a request.