Privacy Policy — Cockroach Network

Last updated: 19 July 2026

Contact: abuse@roach.network

> DRAFT — lawyer review required before publishing. If you have users in the EU/UK

> this needs a GDPR pass (lawful basis, transfers, DPO question); if you have users in

> India, a DPDP Act pass. See README-LEGAL.md.

1. What we collect

You give us:

one login identifier — phone number, email address, or Google account id
display name, and optionally an "about" line and a profile photo
content you create: daily posts, chat messages, images you send
anything you write to us (support, reports)

Collected automatically:

IP address and a device fingerprint (used to prevent multi-accounting and abuse)
usage events needed to run the reward system (mining sessions, claims, referrals)
your ROACH balance and ledger history

We do not collect: payment card details, government ID, precise location, or contacts.

2. Why we use it

| Purpose | Data used |

|---|---|

| Create and secure your account | login identifier, device fingerprint, IP |

| Run the reward economy | usage events, ledger, referrals |

| Deliver chat, calls and the feed | messages, images, profile |

| Keep the platform safe | images (automatic screening), reports, moderation records |

| Meet legal obligations | account records, moderation and report logs |

We do not sell your personal data, and we do not run advertising profiles on it.

3. Who we share it with

We use these processors to run the Service:

Cloudflare — website hosting (Pages), image storage (R2), CDN and security
Amazon Web Services — the server running our API and database
Google Firebase — phone-number verification (SMS) and Google Sign-In
Resend — transactional email (login codes, welcome mail)
LiveKit — voice/video calls and live streaming

We also disclose information where we believe in good faith that the law requires it, or

where it is necessary to prevent serious harm — including reporting child sexual abuse

material to law enforcement.

Your data may be processed in countries other than yours, including India, the United

States and Panama.

4. Automatic image screening

Every image you upload is analysed by software on our servers before it is accepted, to

detect sexual content. Custom profile photos are then also reviewed by a person before

other users can see them. This is a safety measure and it applies to everyone.

5. How long we keep it

Account data: while your account exists.
Messages and posts: until you delete them or your account is deleted.
Ledger and reward records: retained after account closure where needed for accounting

and abuse prevention.

Moderation records, reports and safety logs: retained after closure — these are the

evidence that we acted on complaints.

Material connected to a report to law enforcement: preserved as long as required.

6. Your choices and rights

See your data — most of it is visible in the app; write to us for the rest.
Correct it — edit your profile in the app.
Delete content — delete a message for everyone, or ask us to remove a post.
Delete your account — email abuse@roach.network from your registered address. We

delete or anonymise your data except what §5 says we keep.

Object / complain — write to us; you may also complain to your local data

protection authority.

Depending on where you live you may have additional rights (for example under the GDPR

or India's DPDP Act). We will honour those rights where they apply.

7. Children

The Service is for people 18 and over. We do not knowingly collect data from anyone

under 18. If you believe a child is using the Service, tell us at abuse@roach.network and

we will close the account and delete the data.

8. Security

Passwords are never used — we authenticate by one-time code or Google. Data is encrypted

in transit. Access to production systems is limited, and the admin panel requires an

authenticator app (2FA) in addition to email login.

No system is perfectly secure. Please do not send anything through chat that you would

be seriously harmed by if it leaked; messages are not end-to-end encrypted.

9. Changes

We will post updates here and, for material changes, notify you in the app or by email.

10. Contact

abuse@roach.network — privacy questions, data requests, and grievances.

We acknowledge within 24 hours and aim to resolve within 15 days.