smartrot privacy policy

Last updated 29 October 2026. This covers SmartRot and Salesrot on Android, iOS, smartrot.app and salesrot.com. They use a shared SmartRot account.

What the app is

Smartrot shows a vertical feed of short idea videos. You can watch, open a card, answer a short quiz, and stash ideas. The app is free and does not show ads.

Data stored on your phone

The app keeps a random device id and guest saves and follows on your device. The iOS app also caches the last loaded idea information. When you sign in, guest saves are added to your account. Signed-in saves are stored in your account separately for SmartRot and Salesrot so you can reopen them across devices. Save and unsave actions also help personalize your feed.

Data sent to Smartrot

While you use the feed, the app sends:

This is sent over HTTPS to smartrot.app. It is used to run the feed and rank ideas. Our servers also receive network information such as your IP address and browser or app information when handling requests. This data is not sold and is not used for advertising.

We also receive the topics and books you choose to follow. Hosting and email-delivery services process requests needed to run SmartRot. If you choose Google or Apple sign-in, that provider processes the sign-in request under its own privacy policy. Fonts used by the main learning app are bundled with SmartRot. We use Google Analytics on the website and in the apps to count visits and understand which videos are watched, shared and saved. It sets first-party cookies and receives your device and browser type, approximate region and the pages and videos you open, but not your name or email address. Google processes this data under its own privacy policy.

Your account

You can scroll and watch without signing in. Sign-in is optional and enables account features. You can choose Google, Apple or an email code when available. We store the account identifier and the name, email address or profile-photo reference the provider supplies. Apple may supply a private relay email address instead of your normal email. Email sign-in uses a one-time code. Provider identities are not automatically merged just because their email addresses match.

When signed in, your device id and watch history are associated with your account to personalize the feed across devices. Session cookies or the operating system's protected storage keep you signed in. For Sign in with Apple, an encrypted authorization token is stored for account management and revocation when you delete your account.

What we do not collect

We do not request precise location, read your phone's address book, access photos without your selection, or collect payment data. Friend connections you choose to create inside SmartRot are stored as described below. The app does not include in-app purchases.

Friends and invitations

When you use invitations, you choose a display name. Someone with your invitation link can see that name. Opening a link does not connect accounts: one person sends a request and the other explicitly accepts. We store display names, requests, accepted connections and blocks. Friends cannot see your email address, watch history, quiz answers or stash. You can decline, cancel, remove, block or unblock a connection.

You can send curated SmartRot ideas to a friend's private inbox. We store the sender, recipient, idea identifier, delivery time and whether the recipient opened it. There are no free-text messages or user media uploads in this flow. Removing or blocking a connection clears its shared inbox items.

Invite attribution is limited to seven days from a device's first recorded visit. A new account is counted once, after the requested friendship is accepted. Older visit records are removed during later invitation activity. Counts do not carry monetary rewards. We do not read your address book or send invitations on your behalf.

Optional profiles, discovery and creator drafts

You can choose a profile picture, interest tags and whether signed-in people can discover your profile. Existing accounts are not automatically listed. New or changed public profile details and pictures are reviewed before discovery. Search matches chosen display names and usernames; suggestions use shared selected interests and opted-in mutual friends. We do not infer interests from private saves or viewing for social suggestions and do not collect location for discovery.

Pictures are uploaded only when you select a file. They are resized and re-encoded to remove embedded metadata, then stored with your account. You can remove your picture. Approved pictures can be seen by your friends and, if you opt in, signed-in people who discover you. A private profile's picture is not shown to strangers.

Creator drafts contain your title, text and optional image or video. Videos are re-encoded with source metadata removed and are stored with your draft. Drafts are private to your account and authorized moderators can access submitted items for review. Public creator delivery is currently disabled. Submission records, review states and the community rules version you accept are stored to run moderation. Reporting records include the reporter, person or item reported, reason and time; reporter identity is not shown to the reported person. Blocks apply in both directions to discovery and public creator content.

Deleting a draft removes its content and image from active storage. Account deletion removes profile pictures, drafts and related report records. Private backups can retain earlier copies after deletion from active storage. Backups are restricted to service recovery. See the community rules and moderation contact.

How long it stays

Watch events and account records stay until you ask for them to be deleted, or until they are no longer needed to run the service. Email sign-in codes expire after ten minutes; verification records can remain until replaced, successfully used or removed with account deletion. Pending requests can be cancelled or declined, inbox ideas can be dismissed, and connections can be removed.

Deletion and contact

Open your account in SmartRot and choose Delete my account. You will be asked to confirm, and may need to sign in again. This permanently deletes your account, watch history, sessions, friend requests, connections, blocks, inbox deliveries and invitation records. Your account saves are deleted, and local saves are cleared on the device where you delete the account. Guest data on other devices must be cleared on those devices.

For Apple accounts, SmartRot attempts to revoke its Apple authorization before deleting the account. If the necessary token is unavailable, your SmartRot account is still deleted and you are shown Apple's instructions for removing SmartRot from Sign in with Apple yourself.

You can also open account deletion on the web or use the email deletion request route. To request deletion of device history when you used SmartRot without an account, or get help, email maros.pristas@gmail.com. Do not send passwords or login codes.

Developer: Mo Labs (Maros Pristas).