Privacy Policy

Last updated: June 23, 2026

Your Privacy Matters

Rumi is built on a simple promise: what you say stays between you and Rumi. Your coaching sessions are confidential. We do not sell, share, or monetize your personal data or session content.

What We Collect

  • Account information (email, name, phone number) for authentication
  • Session transcripts and coaching data to provide personalized follow-ups
  • Usage data (session frequency, feature usage) to improve the product
  • Phone number (if provided) for SMS-based sign-in, session reminders, and account alerts

What We Don't Do

  • We do not sell your data to third parties
  • We do not use your session content for advertising
  • We do not share identifiable data with other users
  • We do not sell, rent, or share your phone number for marketing purposes

SMS & Phone Data

If you sign up with a phone number or opt in to SMS notifications, we collect and use your phone number for the following purposes:

  • Sending one-time verification codes (2FA) for account security
  • Delivering session reminders and coaching check-ins
  • Responding to customer care messages you send to our number

Your phone number is stored securely and is never shared with third parties for their marketing purposes. You can opt out of SMS at any time by replying STOP to any message. Message and data rates may apply. See our SMS Messaging Terms for full details.

Third-Party Integrations (Google Calendar & Zoom)

If your coach connects their Google Calendar or Zoom account, Rumi accesses only the data needed to schedule sessions and bring your session recordings into your coaching workspace. These connections are optional and can be disconnected at any time.

Google Calendar

  • We use the Google Calendar API (the calendar.app.created scope) solely to create, update, and cancel calendar events for coaching sessions your coach schedules, and to read attendee RSVP status for those events. Events live on a dedicated app-created calendar; this scope cannot read or modify your primary calendar.
  • We store only the calendar event identifier and OAuth tokens (encrypted at rest). We do not read, store, or index any other events on your calendar.

Zoom

  • We use Zoom to create scheduled meetings for your sessions and, when your coach enables it, to ingest a session's cloud recording — audio and transcript — via Zoom's recording notifications.
  • Recording audio is held in private, access-controlled storage and transcripts as text, visible only to you and your coach. We never sell recordings or transcripts or share them with other users.
  • When your coach enables AI draft notes for a recording, that session's transcript is sent to our AI provider (AWS Bedrock, running Anthropic Claude models) solely to generate draft notes for your coach. It is processed transiently for that purpose and is not used to train any AI or machine-learning models.
  • Recordings and transcripts are retained until you or your coach delete them, your coach disconnects Zoom, the app is removed from Zoom, or your account is closed. Disconnecting Zoom in Settings, or removing Rumi from the Zoom Marketplace, deletes the stored tokens and the ingested recordings and transcripts.

Rumi's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google or Zoom data for advertising, and we do not use it to train generalized AI or machine-learning models.

Data Security

Your data is encrypted in transit and at rest. We use enterprise-grade infrastructure on Google Cloud Platform with industry-standard security practices.

Your Data Rights

You have the right to access, correct, export, and delete your personal data, and to withdraw consent for optional integrations at any time. To exercise any of these rights, email support@rumi.team.

For connected integrations (Google Calendar and Zoom), disconnecting them in Settings → Integrations immediately revokes Rumi's access and deletes the associated tokens and recordings.

Data Deletion

You can request deletion of your account and all associated data at any time by contacting us at support@rumi.team.

Contact

Questions about this policy? Email us at support@rumi.team.