Privacy Policy

This policy explains what Rosy Home (“we”, “us”) collects when you use the Rosy Home mobile app and this website, why we collect it, and what control you have over it. If anything here is unclear, email us — a real person answers.

The short version

We collect the email and name you sign up with, the lists and chores you create, basic analytics about how the app is used, and a push token so we can send reminders you asked for. We do not sell your data, we do not run advertising, and we do not share your household’s content with anyone outside the service providers listed below.

What we collect

Information you give us

• Account information. Your email address and display name when you create an account. If you sign in with Google or Apple, we receive your email address and name from that provider — we never see your password.
• Household content. The grocery items, shopping lists, chores, schedules, and household names you and your household members create in the app. This is the core of what the app stores.
• Household membership. Who is in your household and what invitations have been sent, so the right people see the right lists.
• Anything you send us. If you email support, we keep that correspondence so we can help you.

Information collected automatically

• Usage and diagnostic data. Which screens are opened and which features are used, in aggregate, so we can tell what is working. We use Google Analytics for Firebase for this.
• Crash reports. When the app crashes, we receive a technical report containing the device model, operating system version, app version, and the state of the code at the time of the crash.
• Device identifiers. A randomly generated installation identifier used to group analytics and crash events from the same install. It is not your advertising ID, and we do not use it for advertising.
• Push notification tokens. If you enable notifications, we store the token your device issues so we can deliver chore reminders and list updates. Turning notifications off in your device settings stops this.

What we do not collect

We do not collect your precise location, your contacts, your photos, your calendar, your health data, or your payment information. We do not use advertising identifiers or third-party ad networks.

How we use it

What	Why
Account information	To create your account, sign you in, and let household members identify each other
Household content	To provide the service — syncing lists and chores across your household’s devices
Usage and diagnostic data	To understand which features are used and to prioritize what we build next
Crash reports	To find and fix bugs
Push tokens	To deliver the reminders and updates you turned on
Email address	To send service messages such as password resets, and — only if you opted in — launch and product news

We do not use your household content to train machine learning models, and we do not read it except where strictly necessary to resolve a support issue you have raised with us.

Legal bases for processing

If you are in the UK, EU, or another region with similar law, we process your information on these bases: performance of a contract (providing the app you signed up for), legitimate interests (keeping the service secure, fixing crashes, understanding aggregate usage), and consent (push notifications and marketing email, each of which you can withdraw at any time).

Who we share it with

We do not sell your personal information and we do not share it for cross-context behavioral advertising. We use the following service providers, who process data on our behalf under their own contractual obligations:

• Google (Firebase). Authentication, database storage (Cloud Firestore), analytics, crash reporting (Crashlytics), and push delivery (Firebase Cloud Messaging). Data is stored on Google Cloud infrastructure.
• Cloudflare. Hosting for this website and storage for the launch waitlist list.
• Expo. Application build and update delivery services.

We may also disclose information if we are legally required to, or where necessary to protect our rights or someone’s safety. If that ever happens and we are permitted to tell you, we will.

Where your data is stored

Your data is stored on Google Cloud infrastructure in the United States. If you access the app from outside the United States, you are transferring your information to the United States, where data protection law may differ from your own.

How long we keep it

We keep your account information and household content for as long as your account is active. When you delete your account, we delete your personal information and the household content you own within 30 days, except where we are required to keep records longer by law. Content that belongs to a shared household may remain visible to the other members of that household after you leave it. Crash reports and aggregated analytics are retained for up to 14 months and are not linked to your identity after your account is deleted.

Your choices and rights

You can, at any time:

• Access and correct your account details from inside the app.
• Export your household content by contacting us.
• Delete your account from the app’s settings, or by following the instructions on our account deletion page.
• Turn off notifications in your device settings.
• Unsubscribe from any marketing email with the link in its footer.

Depending on where you live, you may also have the right to object to or restrict certain processing, to data portability, or to lodge a complaint with your local data protection authority. Residents of California, Virginia, and other US states with comprehensive privacy laws have the right to know, delete, correct, and opt out of sale or targeted advertising — we do not sell data or serve targeted advertising, so the latter does not apply. We will not discriminate against you for exercising any of these rights. To make a request, email us and we will respond within the time your law requires.

Children

Rosy Home is designed for households, and we recognize that households include children. The app is not directed to children under 13, and we do not knowingly collect personal information from a child under 13 who has created their own account. A parent or guardian may add a child to a household using a display name rather than a personal email address. If you believe a child under 13 has given us personal information directly, email us and we will delete it.

Security

Data is encrypted in transit using TLS and encrypted at rest by our infrastructure providers. Access to production data is limited to those who need it to operate the service. No system is perfectly secure, but if we ever discover a breach affecting your personal information, we will notify you and the relevant authorities as required by law.

The launch waitlist

If you gave us your email address on this website before launch, we store that address, the date you submitted it, and an irreversible hash of your IP address used only to stop automated signup abuse. We use the address for one purpose: to tell you when Rosy Home is available. You can ask us to remove it at any time and we will delete it immediately.

Changes to this policy

If we make a material change we will update the date at the top of this page and, where the change meaningfully affects your rights, notify you in the app or by email before it takes effect.