1. Who we are
Rosie’s Diary is provided by TRANSMUTE STUDIO LIMITED, a company based in New Zealand. In this policy, “Rosie”, “we”, “us” and “our” refer to TRANSMUTE STUDIO LIMITED.
Our Privacy Officer can be contacted at hello@rosiesdiary.com with questions, privacy requests or concerns.
2. Information kept on your device
Your diary is designed to work without a Rosie account or remote diary backup. The app stores information locally on your device, including:
- skin check-ins, dates, ratings and observations;
- food and drink entries, photos, labels and notes;
- profile name, goals, triggers, sensitivities and preferences;
- face and food photographs you choose to take or select; and
- locally generated histories, patterns and export files.
We do not receive this diary content simply because you use the app. It leaves your device only when you take an action that shares it, such as saving or sending an export using Apple’s sharing tools.
3. Advertising measurement
We may use third-party advertising measurement services to understand whether advertising campaigns lead to app installs, onboarding completion, trial starts or subscriptions, and to measure and improve campaign performance.
Depending on your device settings, consent choices and the provider’s configuration, an advertising measurement provider may receive limited app interaction or conversion events, app and device information, IP-derived information, and device or installation identifiers. This information may be pseudonymous, but it is not guaranteed to be anonymous. A provider may be able to associate it with other information available within its systems under its own policies.
We do not send your diary entries, skin photos, food photos, health observations, profile name or clinician exports to third-party providers for advertising measurement. We use advertising measurement data for attribution, aggregated reporting, campaign optimization and fraud prevention—not to provide medical conclusions.
Where Apple’s App Tracking Transparency framework applies, you can deny tracking permission or change it later under Settings → Privacy & Security → Tracking. Denying permission does not prevent you from using your Rosie diary. Each provider’s handling, retention and deletion of information it receives is governed by its applicable privacy terms.
4. Purchases and subscriptions
Subscriptions are offered through Apple’s App Store and supported by service providers. Apple processes payment details. We and our subscription service providers may receive purchase status, product, transaction, entitlement, device/app and pseudonymous customer information needed to provide, restore, support and analyse subscription access. We do not receive your full payment card details.
5. Camera, photos and notifications
If you grant permission, Rosie uses the camera or photo library for images you choose to add. Notification permission is used for reminders you request. These permissions can be changed in iOS Settings. Rosie does not access those capabilities without the relevant permission.
6. Support correspondence
If you email us, we receive your email address and whatever information you include. Please avoid sending sensitive diary or medical information unless it is necessary for your support request. We use correspondence to respond, troubleshoot, protect the service and keep an appropriate business record.
7. This website
This website does not currently use advertising pixels, analytics cookies, accounts or contact forms. Standard technical request information may be processed temporarily by our hosting and network providers to deliver the site, maintain security and prevent abuse.
8. Retention and deletion
Local diary content remains on your device until you delete it or delete the app. Removing the app normally removes its locally stored data and, because there is no remote diary backup, that content may not be recoverable. Rosie is not intended to be your sole backup or permanent storage location for information you want to retain. Exported copies remain wherever you chose to save or send them.
Support records are kept only as long as reasonably needed for support, legal and security purposes. Subscription and third-party advertising information follows the retention practices of Apple and our other service providers as applicable.
9. Security, service providers and international processing
We use reasonable administrative and technical safeguards, but no device, transmission or storage method is completely secure. We use services provided by Apple and other third-party subscription, advertising measurement, hosting or network providers. We configure and use these services to limit the information they receive to what is reasonably necessary for the services they provide. We select and use providers that are required to protect personal information appropriately and take reasonable steps to ensure that personal information disclosed outside New Zealand is subject to safeguards that provide comparable protection under applicable privacy law.
If a privacy breach occurs, we will assess it promptly, take reasonable steps to contain and address it, and notify affected people and the New Zealand Privacy Commissioner where required by law.
10. Your choices and rights
You can edit or delete local entries, remove the app, manage camera and notification permissions, control Apple tracking permission, manage subscriptions through Apple, and choose whether to export information. Depending on applicable law, you may also have rights to request access, correction or deletion of personal information we hold. Contact hello@rosiesdiary.com to make a request.
11. Children
Rosie’s Diary is not directed to children under 13. If local law requires a higher age for independent consent, a parent or guardian should review and authorize use. We do not knowingly send information about children under 13 to third-party providers for advertising measurement.
12. Health and sensitive information
Your diary may contain sensitive health-related observations. Rosie is a personal tracking tool, not a medical record system or healthcare provider. Avoid including information you do not want stored on your device or in an export.
13. European Union and United Kingdom users
Where EU or UK data protection law applies, our lawful bases for processing personal information may include performing a contract with you, our legitimate interests in operating, securing and improving Rosie, complying with legal obligations, and your consent where required. Your diary is stored locally by default and we do not receive it simply because you use the app. If we process health information or other special-category data beyond your device, we will rely on your explicit consent or another condition permitted by applicable law.
When personal information is transferred outside the European Economic Area or United Kingdom, we use an applicable safeguard such as an adequacy decision, approved standard contractual clauses or the UK international data transfer addendum, where required. You may have rights to access, correct, erase, restrict or object to processing, receive portable data, withdraw consent and complain to your local supervisory authority. Contact our Privacy Officer to exercise these rights.
14. Changes to this policy
We may update this policy as Rosie changes or legal requirements develop. The “last updated” date above will change when we make revisions. Material changes will be communicated in an appropriate way.
15. Contact us
Privacy Officer
TRANSMUTE STUDIO LIMITED
New Zealand
hello@rosiesdiary.com