Privacy Policy

Rohi for iPhone, and Rohi for Chrome and Edge · Cornerstone Global LLC · Effective October 19, 2026 · Updated October 26, 2026

Prefer plain words? Your privacy explains who sees what in one page.

Rohi has no accounts. What you do in the browser is kept on your iPhone. This page lists everything the app keeps, and everything it sends and to whom.

Kept on your iPhone

• History of the pages you visit, for 90 days, unless you clear it sooner.
• Bookmarks, open tabs, downloads and settings, until you delete them.
• Your first name, if you add one for the greeting.
• Your home church and church tradition, if you choose them.
• Family mode's parent PIN, stored only as a one-way hash.

Deleting the app deletes all of it. Settings → Privacy & data clears history, cookies and site data.

What the app sends, and to whom

Websites you visit, search engines and the organizations you give to have their own privacy policies.

What Rohi does not do

• No accounts, and no profile of you on Rohi's servers.
• No advertising trackers or third-party analytics in the app.
• Your church tradition is never sent anywhere.

Protection

Blocking happens on your iPhone. Blocked pages are shown only to you and are not sent to Rohi. If you report a mistake, only the site name is included.

Rohi for Chrome and Edge (browser extension)

The extension gives Chrome and Edge a Rohi new tab and the same protection. It has no accounts and no analytics, and it doesn't read the pages you visit: the browser applies its blocking rules.

• Kept on your computer, in the browser's storage for the extension: your language, first name if you add one, home church, church tradition, card order and settings, and any "Blocked by mistake?" site names. Removing the extension, or Settings → Privacy & data → Clear Rohi data, deletes them.
• Sent to What's Up Church: the church name you type when you search for your church, and your home church's id to get its public events. No name, account, cookies or device id.
• Your church's announcements: with a home church from What's Up Church's directory, Rohi asks rohibrowser.com for that church's public announcement, Sunday details and verses for the week, by the church's id only (no name, account, cookies or device id), at most every 30 minutes.
• Searches and pages go to the search engine you chose or the website, as in any browser. Explicit searches are stopped before they are sent.
• Sync with your Google account (off unless you turn it on): if you choose "Sync my Rohi settings with my Google account", your language, first name, home church, church tradition, card order and settings are stored with your Chrome sync data so they follow you to your other computers. Google holds them under its own privacy policy. Your background photo is never synced. Turning sync off removes Rohi's settings from your Google account.
• Accountability partner (off unless you turn it on, adults only): if you choose a partner, once a day your Rohi sends Cornerstone Global LLC how many pages it blocked each day for the last 8 weeks (by type only if you choose), whether it runs in private windows, and, if Rohi is removed, a notice of that. Your partner sees these counts in their Rohi. Never sent: which sites or searches, page addresses, history, times of day, or your names (they stay on each computer). The server keeps a pair's counts for 8 weeks; either of you can stop at any time, which deletes everything for the pair. Requests are rate-limited using a hash of the address that changes daily and is kept for a minute; addresses aren't stored.
• Prayers with friends (off unless you add a friend): you add a friend only by sending them a link, and they accept in their own Rohi. Each friendship has its own key, made on your computer and carried only in that link after the "#", which browsers don't send to servers. The requests you share and the name you give are locked (AES-GCM encryption) with that key on your computer before they're sent, so Cornerstone Global LLC stores them but can't read them. The server also keeps when each request was shared, when it ends (30 days), and how many times your friend prayed for it, under a random friendship number with no account, email or contact list. "Just me" requests never leave your computer. Either friend can remove the other at any time, which deletes the friendship and its requests; unaccepted invites are deleted after 14 days. Requests are rate-limited using a hash of the address that changes daily and is kept for two minutes; addresses aren't stored.
• Small group sharing (off unless a group's leader turns it on, and you join by its link): the leader's Rohi makes the group's key and puts it in the group link after the "#", which browsers don't send to servers. Names, the leader's weekly note and questions, the meeting details and the group's prayer requests are locked (AES-GCM encryption) with that key before they're sent, so Cornerstone Global LLC stores them but can't read them. The server also keeps a member number for each person who joined, when each request was shared and ends (30 days), and which member numbers prayed for it on which day, with no account or email. People with the link can join until the leader makes a new one. You can leave at any time and your requests are deleted; the leader can remove a request or a member, or end sharing, which deletes everything for the group. If the leader chooses the church the group belongs to, the group's name, meeting day, time and place, the leader's name as they give it, and the number of members are kept unlocked so that church's staff can confirm or deny the group; the church also sees how many members reported the group to it. Members can report a request (stored as member numbers; two reports hide it from the group until the leader reviews it) and block a member, which hides their requests on that member's own computer only. Rate limits work as for prayers with friends.
• "Let my church know" works as described above, and is off unless you turn it on.
• Your church tradition is never sent anywhere by Rohi, except into your own Google account if you turn on sync.

An extension can be turned off or removed, and protects only the browser it's installed in. For children, the full Rohi browser or your device's parental controls protect more.

Churches and church staff

• Prayer requests to your church (only if you send one): the request, the choice of "My church" or "Pastor only", and your first name if you choose to show it (a request for the pastor always carries your first name, so the pastor can reach out). The church's prayer team reads requests to the church first and decides what goes on the church prayer list; requests for the pastor are never listed. Each request stays up 30 days and is then deleted; you can remove it sooner. The church sees how many people prayed, never who.
• Church sign-up: when a pastor or staff member asks to bring a church to Rohi, we keep the church's name, city, state and website, and the person's name, role and church email, only to check the request. It is deleted 30 days after we approve or decline it (60 days if it's never decided).
• Change log: every change church staff make to their church's Rohi (for example a notice, the church's look or a prayer decision) is recorded with the day, time and how they signed in, so the church can see what changed. No one at the church can edit or delete it; it's kept 400 days. It never includes anything about members.
• Numbers churches see are counted by Rohi from what people do (for example how many prayed or how many volunteers said they'll be there). Church staff can't type in or change them, and they never show who.

Children and families

Rohi is designed to be safe for families, and Family mode lets a parent lock settings with a PIN. Rohi does not knowingly collect personal information from children.

Changes

If this policy changes, the new version will be posted here with its date, and significant changes will be shown in the app.

Contact

Cornerstone Global LLC
522 W Riverside Ave, Suite #10702
Spokane, WA 99201
admin@cornerstoneglobalteam.com