Legal
Privacy Policy — Rosea: Period & Cycle Tracker
- Effective date
- 22 July 2026
- App
- Rosea
- Developer
- Nainnie Labs
- Contact
- hello@nainnielabs.com
Rosea is built on a simple principle: your health data belongs on your phone, and nowhere else. This policy explains exactly what that means in practice.
The short version
- Rosea works 100% offline. There is no account, no sign-up, and no Rosea server.
- Every piece of health data you enter — periods, symptoms, moods, temperatures, fertility logs, pregnancy details, photos, journal entries — is stored only on your device.We never receive it, transmit it, sell it, or share it. We couldn't even if we wanted to: no copy of it ever reaches us.
- The app contains no analytics, no tracking SDKs, and no crash reporters.
- The only third-party services in the app are Apple/Google's payment systems (for the optional Rosea Pro subscription) and Google AdMob (which shows ads in the free version, configured for non-personalized ads only).
Data you enter into Rosea
This includes cycle dates, flow, symptoms, moods, lifestyle logs, basal body temperature, cervical mucus and test results, pregnancy information, bump photos, journal entries, baby-name shortlists, appointments, and settings.
All of it stays on your device. It is stored in the app's private storage area, protected by your device's built-in encryption. Bump photos are additionally encrypted by Rosea and are never written to your shared photo library.
We have no access to this data. It is not backed up to any cloud service by Rosea. If you delete the app, this data is deleted with it (unless you first create a backup file — see below).
Backups
You can export an encrypted backup file, protected by a passphrase you choose. This file is created on your device and saved wherever you choose to put it. What you do with that file (e.g., moving it to a new phone) is entirely under your control. We never receive it, and we cannot recover it or its passphrase for you.
Apple Health (optional)
If you enable it, Rosea can write your cycle, temperature, and related entries to Apple Health on your device. This is off by default, write-only (Rosea never reads anything from Apple Health), and can be turned off at any time. Data written to Apple Health is managed by Apple on your device under Apple's privacy protections.
Notifications
Reminders are scheduled locally on your device. By default, notification text is neutral and does not reveal health details on your lock screen; descriptive text is opt-in.
What leaves your device (and why)
Rosea itself sends us nothing. However, two standard platform services operate in the app:
- Subscriptions (Apple App Store / Google Play).If you purchase Rosea Pro, the transaction is handled entirely by Apple or Google. We receive no personal payment details. Your purchase is tied to your store account, not to any Rosea account (there are none). Apple's and Google's own privacy policies govern payment processing.
- Advertising (Google AdMob — free version only).The free version shows a small banner ad. We configure AdMob to serve non-personalized ads and to a general-audiences content rating. To serve and secure ads, Google's SDK may process limited device information (such as IP address, device model, and advertising identifiers) under Google's privacy policy: policies.google.com/privacy. This is the only data flow that exists in Rosea, it is never connected to any of your health data, and it disappears entirely if you subscribe to Rosea Pro (which removes ads and the ad SDK's activity).
We do not use, and the app does not contain, any other third-party SDKs.
What we never do
- We never collect, receive, store, sell, rent, or share your health data. Ever.
- We never link advertising to your health data — the ad component has no access to it.
- We never require an account, email address, phone number, or name.
- We never use analytics or tracking of your behavior in the app.
Because your health data never reaches us, it can never appear in a data breach of our systems, be handed to a third party, or be produced by us in response to a legal request — we simply do not have it.
Your rights and control
Everything is under your direct control on your device:
- Access & portability: view everything in the app; export it any time via the encrypted backup or the PDF report.
- Correction: edit or delete any entry at any time.
- Deletion:use "Delete all data" in Settings for immediate, complete erasure (including photos and Apple Health-independent local data), or simply delete the app.
If you are in the EU/UK (GDPR), California (CCPA/CPRA), or a similar jurisdiction: because we do not collect or process your personal data on any server, most obligations that apply to data controllers holding user data do not arise — there is no stored personal data for us to disclose, delete, or port on your behalf. For the limited ad-related processing described above, Google acts under its own policies, and you can eliminate it entirely via Rosea Pro or limit ad tracking in your device settings.
Children
Rosea is rated 13+/12+ on the app stores and is not directed at children under 13. We do not knowingly collect personal information from anyone — including children — because the app collects no personal information at all.
Medical disclaimer
Rosea provides estimates and educational content based on the information you enter. It is not a medical device, not a form of contraception, and not a substitute for professional medical advice. Always consult a qualified healthcare professional about your health.
Changes to this policy
If we ever change how Rosea handles data, we will update this policy and the "effective date" above, and material changes will be highlighted in the app's update notes. Our commitment — health data stays on your device — is the foundation of the product and will not change.
Contact
Questions? Email us at hello@nainnielabs.com or visit https://nainnielabs.com.