Privacy Policy

Başak Hicret (“Roselle,” “we,” “us,” or “our”) operates the Roselle iOS application and the website at https://roselle.app (together, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service, and describes the choices and rights available to you.

By downloading, accessing, or using Roselle, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use the Service.

Health and cycle data. Menstrual cycle dates, flow intensity, symptoms, mood entries, basal body temperature, sexual activity, medication and contraception logs, notes, and any other wellness information you choose to enter into the app.

Account information. If you create an account, we collect your email address, an encrypted password (or Sign in with Apple identifier), and your display name if provided.

Apple Health data. If you choose to connect Apple HealthKit, Roselle may read and write cycle, sleep, and activity data solely to enrich your predictions and insights. This connection is optional, controlled entirely through your iOS Health app permissions, and can be revoked at any time.

AI Assistant conversations. Messages you send to Roselle’s AI Assistant, along with the cycle and symptom context needed to generate a relevant response.

Community content. Posts, comments, and reactions you share in Roselle’s community spaces. Community posts are associated with an anonymous handle, never your real name or account email.

Device and usage data. Device model, iOS version, app version, language settings, crash logs, and aggregated feature-usage analytics that help us improve the Service.

Purchase information. If you subscribe to Roselle Premium, Apple processes your payment. We receive only a confirmation of subscription status and transaction identifiers — we never see or store your card details.

• To provide, operate, and maintain cycle tracking and predictions.
• To generate personalized AI insights based on your own logged data.
• To sync your data securely across your devices, if you enable an account.
• To moderate community spaces and enforce our content guidelines.
• To respond to support requests and communicate service updates.
• To detect, investigate, and prevent fraud, abuse, and security incidents.
• To improve app performance through aggregated, de-identified analytics.

We do not use your health data to serve targeted third-party advertising, and we do not sell your personal or health information to data brokers or advertisers.

Where applicable law requires a legal basis for processing (such as under the EU/UK GDPR), we rely on: your explicit consent for health-related data; the necessity of processing to perform our contract with you (providing the Service); our legitimate interests in securing and improving the Service; and compliance with legal obligations where relevant.

We do not share your personal or health data except in the following limited cases:

• Service providers who host our infrastructure, send transactional email, or provide crash analytics, bound by contractual confidentiality and data protection obligations.
• With your explicit consent, such as exporting a health report to share with your doctor.
• Legal compliance, if required to comply with a valid legal process, protect our rights, or ensure user safety.
• Business transfers, in the event of a merger, acquisition, or asset sale, subject to continued protection under this Privacy Policy.

Health data is encrypted at rest and in transit using industry-standard protocols (TLS 1.2+ and AES-256). Sensitive local data is protected using iOS Data Protection and, where available, Face ID/Touch ID app-lock. Access to production systems is restricted to authorized personnel and logged. While we work hard to protect your information, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

We retain your data for as long as your account is active or as needed to provide the Service. If you delete your account, we permanently delete your health data and personal identifiers within 30 days, except where retention is required to comply with legal obligations, resolve disputes, or enforce our agreements.

• Access and export: download a copy of your logged data at any time from Settings → Export Data.
• Correction: edit or delete any entry directly within the app.
• Deletion: permanently delete your account and all associated data from Settings → Delete Account, or by emailing privacy@roselle.app.
• Withdraw consent: disconnect Apple Health or opt out of analytics at any time from Settings → Privacy.
• Regional rights: residents of the EEA, UK, and certain U.S. states (including California under the CCPA/CPRA) may have additional rights to access, correct, delete, or restrict processing of personal data, and to lodge a complaint with a supervisory authority.

Roselle is not directed to children under 13 (or the minimum age required by your country of residence), and we do not knowingly collect personal information from children under that age. If we learn that we have inadvertently collected data from a child, we will delete it promptly. Parents who believe their child has provided us with personal information may contact us at privacy@roselle.app.

Roselle is available globally. Your information may be transferred to, stored, and processed in a country other than your own, including the United States, where our servers and service providers operate. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses to protect data transferred internationally.

The Service may contain links to third-party websites or integrate with services like Apple Health and Sign in with Apple. We are not responsible for the privacy practices of these third parties, and we encourage you to review their respective privacy policies.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by email prior to the change becoming effective. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at:

Başak Hicret
Email: privacy@roselle.app