Privacy Policy

Rosa Baby · Effective 1 November 2026

This policy explains how Rosa Baby: Pregnancy Tracker (“Rosa Baby”, the app) looks after your personal data. “We” means TroySoft, the publisher of the app and the controller of your data. We have tried to write it in plain language. Questions? Write to support@troysoft.com.tr.

In short

We collect only what the app needs. Your pregnancy details, journal, bump photos, symptoms, weight and appointments are health data. We use them only with your explicit consent.
No ads, no trackers. No advertising identifiers, no analytics or crash-reporting tools, no cookies. We never sell or rent your data.
Encrypted, but not end-to-end. Your data is encrypted in transit and at rest. Our servers hold the keys so they can sync your data between your devices.
You are in control. In Me → Privacy and data you can export everything, withdraw consents or delete your account.
Deleting your account does not cancel a subscription. Cancel Rosa Baby Plus in your App Store or Google Play settings.
Rosa Baby is for people aged 16 and over.

What we collect, and why

You sign in with Apple or Google. There are no passwords in the app. The table says what we hold and why.

Data	Why
Account. An identifier from Apple or Google, a verified email address if you choose to share one (Apple’s “Hide My Email” may mean we have none), an optional display name (stored encrypted), and your language, time zone and units.	To create your account, sign you in and show the right dates and measurements.
Pregnancy details (health data). How you date your pregnancy (last period, due date, ultrasound or IVF transfer) and that date, cycle length, due date, number of babies, whether the pregnancy is active or has ended, sensitive-mode setting, partner sharing settings, and an optional baby nickname (encrypted).	To show your week, the 3D baby and the weekly guide. Required to use the tracker.
Journal, bump photos, symptoms, weight, appointments (health data, all optional). Photos are re-encoded and stripped of location and camera details; photo files, entry text, captions and notes are encrypted.	Only to give you these features and sync them across your devices.
Baby names. Favourites, ranking, private notes (encrypted), sharing choice.	To keep your list.
Partner sharing (optional, part of Rosa Baby Plus). The link between your account and your supporter’s, what you chose to share, and invite codes (kept only as a keyed hash).	To share exactly what you chose, and stop when you say so.
Consents. Which consent, which version of the text, granted or withdrawn, when, and where in the app.	To prove we asked you properly.
Devices and sessions. A random device id made by our server (not a hardware or advertising id), platform, app and OS version, last seen, and a hash of your sign-in tokens with their expiry.	To keep you signed in and sync devices.
Subscription (only if you subscribe). Store, product, the store’s transaction reference, status, period dates, trial and renewal flags. We never receive your card or billing address.	To check your purchase with Apple or Google and unlock Plus.
Security log. Action names such as “journal entry created”, record numbers and times. Never the content.	Security and abuse prevention.
Data exports (only when you ask). A ZIP file encrypted with your personal key.	To give you a copy of your data.
Ask Rosa Baby (optional, only after a separate consent). Your question and recent turns after names, emails and similar details are scrubbed, plus your rounded pregnancy week and the answer language.	To produce an answer. See “Who processes data for us”.

Our legal bases

Depending on where you live (for example under the GDPR or the Turkish KVKK), we rely on: your explicit consent for health data, partner sharing and Ask Rosa Baby; contract for your account, sync, Plus and service emails; legal obligation for the de-identified billing record we keep after deletion; and legitimate interest for security and abuse prevention. You can object to the last one. We never use your data for advertising, marketing profiles or automated decisions with legal effect.

What stays on your device

Your reminder schedules and notification preferences (reminders are local notifications, so we hold no push tokens), the on-screen state of sensitive mode, an offline copy of your own records (cleared when you sign out), and keepsake images, which are made on your device.

What we don’t do

No ads, and no advertising identifiers (IDFA or AAID).
No analytics, crash-reporting, attribution or tracking tools. No cookies, fingerprinting or tracking pixels.
We don’t ask for your date of birth (only a confirmation that you are 16 or older), your location or your contacts.
We don’t sell, rent or trade your data, and we don’t work with data brokers.

Our hosting provider runs our servers, database and backups in the European Union. It processes the data above for us; encrypted fields stay encrypted.
Apple (Sign in with Apple, App Store) and Google (Sign in with Google, Google Play) receive what sign-in and billing need. Each acts as an independent controller, and its own privacy policy applies: Apple · Google.
OpenAI (USA) processes your questions only if you use Ask Rosa Baby. It receives the scrubbed question, recent turns, content snippets from our library and your rounded pregnancy week, and never your name, email, account id, dates, photos, journal or symptom records. If you never use Ask Rosa Baby, nothing is sent to it.
An email delivery provider sends service emails such as “your export is ready” (no content, no link) to people who have an email address on their account.
People you choose. If you use partner sharing, your supporter sees what you chose to share.

No other third parties, and no third-party tools in the app that send data elsewhere. We may disclose data if the law requires it, and only what is strictly necessary. When data leaves the EU, EEA or UK we rely on an adequacy decision or standard contractual clauses; ask us for a copy of the safeguards.

How long we keep your data

A clean-up job runs every 6 hours.

Your account and health data: until you delete them or your account.
Journal entries, photos and appointments you delete: 30 days (so you can undo and devices can sync), then permanently removed with their files.
Sign-in tokens: removed at expiry; revoked ones 30 days after revocation.
Expired partner invites: 7 days after expiry. Dismissed partner notices: 90 days.
Data exports: file deleted after 7 days (or after 5 downloads), record after 30 days.
Store notifications about your subscription: 90 days. Devices not seen: 180 days.
Security log: 365 days; your user number is removed from it when you delete your account.
Server logs: 30 days, with no personal data or content.
De-identified billing record after deletion (only if you ever subscribed): 7 years, for tax and accounting law.
Database backups: 35 days, then overwritten. They are encrypted, used only for disaster recovery, and any restore re-applies deletions first.
Consent records: for the life of your account.

Deleting your data

In the app: Me → Privacy and data → Delete my account. You sign in again to confirm, and deletion is immediate and cannot be undone. Export first with Me → Privacy and data → Export my data if you want a copy. Your personal encryption key is destroyed, which makes any remaining copies of your content unreadable.

No longer have the app? Email support@troysoft.com.tr from the address linked to your account with the subject “Delete my account”. See how to delete your account and data. We finish within 30 days and confirm by email.

Your subscription is not cancelled automatically. Apple or Google manage it, so cancel Rosa Baby Plus in your store settings.

Your rights

Depending on where you live (GDPR and UK GDPR, the Turkish KVKK, the California CCPA and similar laws) you can ask to access, correct, delete, restrict or port your data, object to uses based on legitimate interest, withdraw consent at any time, and complain to a supervisory authority (in Türkiye, the Personal Data Protection Board). Most rights work straight from the app:

Access and portability: Me → Privacy and data → Export my data (JSON, CSV, Markdown, calendar files and your original photos; 2 exports per day).
Correction: edit any entry, profile or pregnancy setting.
Withdraw consent: Me → Privacy and data → your consents. Withdrawing notifications stops reminders; withdrawing Ask Rosa Baby blocks the assistant; withdrawing health-data consent makes your account restricted (you can still export and delete). Nothing is deleted silently.
Anything else: email support@troysoft.com.tr. We reply within 30 days and may first check it is you.

We do not sell personal information and do not share it for cross-context behavioural advertising. In Türkiye our data-controller (veri sorumlusu) notice and explicit-consent text are shown in the app; the Turkish version of this page explains your KVKK Article 11 rights.

Children

Rosa Baby is for people aged 16 and over, and is not directed at children. We ask you to confirm you are 16 or older at sign-up, and store nothing if you say you are not. If you think someone under 16 has an account, tell us and we will delete it.

Security

TLS in transit; AES-256-GCM encryption of sensitive fields at rest with a personal key per user, protected by a master key kept outside the database; encrypted photo files; short-lived access tokens; rate limits; least-privilege staff access; no personal data in logs. To be honest about the limits: Rosa Baby is not end-to-end encrypted, because our servers must read your data to sync it. No system is perfectly secure; if there is a breach we will tell you and the authorities where the law requires.

Changes

We may update this policy. For important changes the app shows a notice with a short summary, and asks again where consent is needed. The date at the top shows the current version.

Contact

TroySoft, Türkiye · support@troysoft.com.tr