Privacy policy

Last updated: 6 November 2026

roko is a web browser for iPhone, made by Karlo Koenig. It has no accounts, no ads, no analytics and no tracking of its own. What you do in roko stays on your iPhone unless it is listed below.

What leaves your iPhone

Websites you visit. Like any browser, roko connects to the sites you open, and those sites see what they would see in any browser. Their own privacy policies apply.

Search and suggestions. What you type in the bar goes to your chosen search engine (such as Google, DuckDuckGo, Brave or Kagi). Search suggestions come from Google.

iCloud sync. If you're signed in to iCloud, your pins, history, to-dos and settings sync through your own private iCloud account. We can't read them.

Apple Intelligence. Summaries and Browse for Me may use Apple's on-device model. Apple's Private Cloud Compute is used only in builds that have Apple's permission for it.

Claude. If you add your own Anthropic API key, the page or question being answered is sent to Anthropic under your key, and Anthropic's terms apply. Without a key, nothing goes to Anthropic. The key stays on your iPhone.

Browse for Me. To answer a question, roko searches through DuckDuckGo and reads the pages it finds, and shows YouTube videos on the subject.

Translation. A page you choose to translate is sent to Google Translate.

Weather and rates. Today's weather uses Open-Meteo, with a rough location. Currency answers use public exchange rate services, which receive only the request for rates.

Site icons. Icons for sites may be fetched from DuckDuckGo, which sees the site's name.

Answers shared from earlier betas. roko no longer shares answers. A page you shared from an earlier beta stays on roko's server as a public page anyone with the link can open, with a hash of its edit token and a salted hash of your IP address used only to limit abuse, until you unshare it in Settings > Shared pages.

Sync with your Mac. This is off unless you turn it on. Your to-dos, shopping lists and Read Later then go through roko's server to reach your other devices. You can remove them by turning it off and deleting the space.

News. Sites you follow are read from your iPhone, so they see a visit as they would from any browser. Topics you follow are also sent to Bing's news search, without a cookie or an account.

Newsletters. This is off unless you make an address. Mail sent to it passes through roko's server and waits there until your iPhone fetches it, then it's deleted, and after 30 days at the latest. Ending the address deletes what's waiting. Summaries of it go where other summaries go.

Parking. Parking is paid by a text message that you send yourself from the Messages window, to the parking operator. roko uses one precise location fix to find your zone, and only when you ask for parking. Your plates and parking history stay on your iPhone.

Permissions

roko asks only when a feature needs it: location, microphone and speech recognition, camera for pages that ask, Calendar, Reminders, alarms for Cook Mode timers, adding images to Photos, and Face ID for private tabs. You can change any of these in iOS Settings.

Private tabs

Private tabs keep no history and are not synced.

Keeping and deleting data

Deleting roko removes what it keeps on your iPhone. Data in your iCloud can be removed in iOS Settings under your iCloud storage. Testers using TestFlight may also share crash reports and feedback with us through Apple, as TestFlight describes.

Children

roko is not directed at children under 13.

Changes

If this policy changes, the date above changes with it.

Contact

Karlo Koenig, karlo@rokobrowser.com