Privacy Policy

Rosa: Period & Cycle Tracker Last Updated: March 5, 2026

Peter Pots ("we," "us," or "our") built the Rosa: Period & Cycle Tracker app ("Rosa," "the App") as a commercial application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

By using the App, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

1.1 Personal Information

When you create an account, we collect:

Name — to personalize your experience and display in your profile.
Email Address — for authentication, account recovery, and communication.
Date of Birth — to provide age-appropriate health insights.

1.2 Health and Medical Data

To provide cycle tracking functionality, we collect:

Menstrual cycle data — period start and end dates, cycle length, and period duration.
Symptoms and mood — daily symptom logs including mood, pain, vaginal discharge, vitality, and other self-reported data.
Medical card information — height, weight, age at first period, cycle type, period duration, diagnoses, PMS severity, contraception method, hormonal medications, pregnancy history (pregnancies, births, miscarriages), and breastfeeding status.

1.3 Apple HealthKit Data

With your explicit permission, we read menstrual flow data from Apple HealthKit to automatically sync your period tracking. We only read this data — we do not write to HealthKit. HealthKit data is used solely within the App and is never shared with third parties, used for advertising, or transferred to external services beyond what is described in this policy.

1.4 Subscription and Purchase Data

When you subscribe to Rosa Premium, we store:

Subscription status (active, expired, or canceled).
Plan type and duration.
Transaction identifiers (provided by Apple).
Gift code information (if applicable).

We do not collect or have access to your payment card details, bank account numbers, or other financial information. All payments are processed securely by Apple through the App Store.

1.5 Partner Data

If you use the Partner feature, we collect:

Partner connection identifiers.
Permission settings that you configure (which data categories your partner can view).
Optional messages between partners.

2. How We Use Your Information

We use the collected information exclusively for the following purposes:

App Functionality — to provide menstrual cycle tracking, predictions, symptom logging, and health insights.
Account Management — to authenticate you, manage your profile, and enable account recovery.
Partner Features — to allow you to share selected health data with a connected partner based on your explicit permission settings.
Subscription Management — to verify your subscription status and deliver premium features.
Notifications — to send you cycle predictions, period reminders, and other in-app notifications that you have opted into.

We do not use your data for:

Advertising or marketing to third parties.
Selling or renting your personal or health data.
User profiling for purposes unrelated to the App's core functionality.
Cross-app tracking.

3. Data Storage and Security

3.1 Where Your Data Is Stored

Your data is stored securely using Google Firebase (Firestore), which provides encryption at rest and in transit. Firebase servers are located in the United States. By using the App, you consent to the transfer and storage of your data in the United States.

3.2 Security Measures

We implement the following security measures:

All data transmission uses TLS/SSL encryption.
Firebase Authentication secures account access.
Firestore Security Rules enforce that users can only access their own data.
Partner access is restricted to data categories you explicitly permit.
Subscription and gift code operations use database transactions to prevent unauthorized access.

3.3 Data Retention

We retain your data for as long as your account is active. If you delete your account, all associated data — including health records, cycle history, symptoms, medical card, and partner connections — will be permanently deleted from our servers.

We do not sell, trade, or rent your personal or health information to third parties.

Your data may be shared only in the following limited circumstances:

With your Partner — if you use the Partner feature, only the data categories you explicitly enable in your permission settings will be visible to your connected partner.
Service Providers — we use Google Firebase for data storage and authentication. Google processes data in accordance with their Privacy Policy.
Legal Requirements — we may disclose your information if required by law, regulation, legal process, or governmental request.

5. Your Rights and Choices

You have the following rights regarding your data:

Access — you can view all your data within the App at any time.
Correction — you can update your personal and medical information through the App's profile and medical card settings.
Deletion — you can delete your account and all associated data through the App's settings. This action is permanent and irreversible.
HealthKit Permissions — you can revoke HealthKit access at any time through your device's Settings > Health > Data Access.
Notifications — you can manage notification preferences within the App or through your device settings.
Partner Access — you can modify or revoke your partner's access to your data at any time, or disconnect the partner entirely.

6. Children's Privacy

The App is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take immediate steps to delete that information.

7. Third-Party Services

The App uses the following third-party services:

Google Firebase (Authentication, Firestore Database) — Privacy Policy
Apple HealthKit — governed by Apple's Privacy Policy
Apple App Store (In-App Purchases) — governed by Apple's Privacy Policy

These services may collect information as described in their respective privacy policies. We encourage you to review them.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this policy. Continued use of the App after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: peterpots16@icloud.com