Updated October 8, 2026
Privacy policy
Robin is paid for by subscriptions. We do not sell your emails or personal data, and we do not use your mail for advertising.
Who we are
Robin (“we”) is the controller of your data under UK GDPR. Contact us at privacy@withrobin.dev.
What we collect
Account: your email address, your Robin address, name, time zone, plan and settings.
Mail: messages and attachments sent or forwarded to your Robin address, mail you send from Robin, and what Robin records from them, such as events, reminders, tracked items and sender decisions.
People who email you: their address, name and message. People who use your booking page: the details they enter.
Billing: plan and subscription status. Card details go to Stripe and never reach Robin.
Technical: sign-in sessions, bot checks, and IP addresses, which we store hashed for rate limits, or in full when someone books through your page. Logs never contain message content.
Visits: daily counts of which kind of page or link brought people here. No raw IP addresses or referrer URLs.
How we use it
To run the service you asked for: receive and organise mail, send what you approve, keep your calendar and bookings, and sign you in. This is the contract between us.
To keep Robin safe and working: screen spam and phishing, prevent abuse, fix faults and enforce plan limits. This is our legitimate interest.
To meet legal duties, such as tax records. We do not use your mail for advertising or sell it, and Robin does not train AI models on it.
AI processing
Robin reads mail with AI models to sort it, draft replies and find dates. These models run on Cloudflare Workers AI, and Cloudflare does not use your content to train them.
If you connect your own agent, it reads the mail you allow through its own provider, under its own terms. It may keep copies after you disconnect.
Who processes it
Cloudflare: hosting, storage, email delivery, AI models and bot checks.
Stripe: checkout, payments, tax and invoices. Its Onelink service sells paid plans as merchant of record and holds your payment details under its own privacy policy.
When you ask Robin to look something up or map a place, the search terms or place name go to a web search provider, Wikipedia or OpenStreetMap services. Your mail does not.
Your data is stored and processed by these providers, which may be outside the UK. They are bound by data processing terms and recognised transfer safeguards.
How long we keep it
We keep your mail and records while your account is open. You can delete any email in the app, and delete your whole account at any time.
Account deletion removes your inboxes, mail, calendar, pages, sessions and access. Backups are pruned after 30 days, and our provider’s recovery history after up to 30 days. We keep a minimal record that the deletion happened, and billing records for as long as tax law requires.
Mail you have already sent, copies kept by a connected agent and records held by Stripe are outside what Robin can delete.
What is public
Only what you choose to publish: your Robin pages, public journal entries and events, your booking page and, if you turn it on, your free/busy times. Everything else needs you to sign in or holds a private link.
Security
Stored email is encrypted. The web app and agent connections use HTTPS. Robin is not end-to-end encrypted: Robin must read mail to help with it. Encryption between mail providers depends on the providers involved.
Your rights
You can access, correct, export or delete your data, and object to or restrict how we use it. Most of this is in the app. For anything else, email privacy@withrobin.dev and we will reply within one month.
You can also complain to the Information Commissioner’s Office at ico.org.uk.
Children
Robin is for people aged 18 and over.
Changes
If we change this policy in a way that matters, we will email you before it takes effect.