Terms And Policy

SECTION I: PRIVACY POLICY

1. Introduction

Welcome to Rosy, a health tracking application designed to help you monitor and understand your wellness journey. This Privacy Policy and Terms of Use explain how we collect, use, protect, and share your information when you use our mobile application.

IMPORTANT MEDICAL DISCLAIMER: Rosy aims solely to promote healthy living and wellbeing through wellness tracking and informational purposes only. It is not intended to diagnose, treat, cure, or prevent any medical condition. Rosy does not take responsibility for any injuries, damage, or adverse health outcomes. Always consult with qualified healthcare professionals for medical advice.

ACCEPTANCE: By using Rosy, you agree to the collection and use of information in accordance with this policy and our Terms of Use.

2. Data We Collect

2.1 Health and Wellness Data

• Symptoms, medications, and daily health observations you manually enter
• Vital signs and biometric data (blood pressure, heart rate, weight, etc.)
• Laboratory test results and health metrics you choose to input
• Sleep patterns, mood tracking, and exercise data
• Photos of health-related documents (if you choose to upload them)

2.2 Location Data (Optional)

• Precise location when using our healthcare facility finder feature
• Approximate location for regional health insights and emergency services
• User Control: You can disable location services at any time through your device settings

2.3 Device and Usage Information

• Device type, operating system, and app version
• App usage patterns and feature interactions (anonymized)
• Crash reports and performance data
• Push notification preferences

2.4 Account Information

• Email address (for account creation and communication)
• Profile information you choose to provide
• Communication preferences

2.5 Third-Party Integrations (With Your Consent)

• Apple Health/HealthKit data (iOS only)
• Google Fit data (Android only)
• Wearable device data from connected fitness trackers

3. How We Use Your Data

3.1 Primary Purposes

• Health Tracking: Enable you to log, track, and analyze your health data
• Insights and Trends: Provide personalized health insights and pattern recognition
• Healthcare Facility Finder: Help you locate nearby medical facilities using GPS
• Report Generation: Create shareable health reports for healthcare providers
• App Improvement: Enhance app functionality and user experience

3.2 Secondary Purposes (With Consent)

• Research: Anonymized, aggregated data for health research (opt-in only)
• Personalized Recommendations: Health tips and suggestions based on your data
• Communication: Send you app updates, health reminders, and support messages

3.3 Legal Basis for Processing (GDPR)

• Consent: For optional features and data sharing
• Contract Performance: To provide the core app functionality
• Legitimate Interest: For app improvement and security
• Legal Obligation: When required by applicable law

4. Data Sharing and Disclosure

4.1 NO SALE OF PERSONAL HEALTH DATA

Your health information is never sold to third parties for commercial purposes.

4.2 Limited Sharing Circumstances

We may share your data only in these specific situations:

4.2.1 With Your Explicit Consent

• Healthcare providers you choose to share reports with
• Research studies you explicitly opt into
• Third-party health apps you connect to Rosy

4.2.2 Service Providers (Data Processors)

• Cloud storage providers (AWS, Google Cloud) - encrypted data only
• Analytics providers - anonymized usage data only
• Customer support services - limited to resolving your issues

4.2.3 Legal Requirements

• When required by law, court order, or government request
• To protect our legal rights or prevent harm
• In case of merger, acquisition, or business transfer (with notice)

4.2.4 Emergency Situations

• If you use emergency features, we may share location with emergency services
• Only with your explicit activation of emergency functions

5. Your Rights and Controls

5.1 GDPR Rights (EU Users)

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Export your data in a machine-readable format
• Restriction: Limit how we process your data
• Objection: Object to processing based on legitimate interest
• Withdraw Consent: Revoke consent for optional data processing

5.2 CCPA Rights (California Users)

• Know: What personal information we collect and how it's used
• Delete: Request deletion of your personal information
• Opt-Out: Opt out of sale of personal information (note: we don't sell data)
• Non-Discrimination: Equal service regardless of privacy choices

5.3 Universal Controls

• Data Export: Download all your health data at any time
• Account Deletion: Permanently delete your account and associated data
• Privacy Settings: Control what data is collected and how it's used
• Communication Preferences: Manage notifications and emails

5.4 How to Exercise Your Rights

• In-App: Use Privacy Settings in the app
• Email: Contact admin@rosyroot.com
• Response Time: We respond within 30 days

6. Data Security

• Data Analytics: We collect only necessary data for app functionality

6.2 Device-Level Security

• Automatic Logout: Configurable session timeouts

7. International Data Transfers

Data may be transferred to countries outside your residence. We use appropriate safeguards for international transfers:

• EU Standard Contractual Clauses for GDPR compliance
• Adequacy Decisions where available
• Binding Corporate Rules for internal transfers

8. Data Retention

8.1 Retention Periods

• Active Account Data: Retained while your account is active
• Health Data: Retained for 7 years after account deletion (for medical record purposes)
• Usage Analytics: Anonymized data retained for 2 years
• Communication Records: Customer support records kept for 3 years

8.2 Deletion Process

• Account Deletion: Immediate removal of identifiable information
• Health Data Anonymization: Personal identifiers removed after account deletion
• Backup Purging: Complete removal from all systems within 90 days
• Third-Party Data: Coordinated deletion from service providers

9. Children's Privacy

9.1 Age Restrictions

• Minimum Age: Rosy is not intended for users under 13 years old (under 16 in EU)
• No Knowing Collection: We do not knowingly collect data from children under these age limits
• Immediate Deletion: If we learn we have collected such data, we will delete it immediately

9.2 Parental Rights

• Parents can request access to their child's data
• Parents can request deletion of their child's data
• Contact: admin@rosyroot.com for child data concerns

SECTION II: TERMS OF USE

10. Terms of Use

10.1 Acceptance of Terms

By downloading, installing, or using Rosy, you agree to be bound by these Terms of Use and our Privacy Policy.

10.2 Medical Disclaimer and Limitation of Responsibility

• Wellness Promotion Only: Rosy aims solely to promote healthy living and wellbeing
• Not Medical Advice: Rosy provides general wellness information only and does not provide medical advice
• No Responsibility for Injuries: Rosy does not take responsibility for any injuries, damage, adverse health outcomes, or consequences arising from app use
• Professional Consultation Required: Always consult healthcare professionals for medical decisions
• Emergency Services: Call emergency services for medical emergencies
• FDA Compliance: Not intended for diagnosis, treatment, cure, or prevention of medical conditions

10.3 User Responsibilities

• Accurate Information: Provide accurate health data
• Account Security: Maintain confidentiality of your login credentials
• Appropriate Use: Use the app only for its intended wellness tracking purposes
• Compliance: Follow all applicable laws and regulations

10.4 Prohibited Uses

The following activities are strictly prohibited:

• Sharing false or misleading health information
• Attempting to access other users' data
• Reverse engineering or tampering with the app
• Using the app for commercial purposes without permission
• Uploading malicious code or harmful content

10.5 Intellectual Property

• Our Content: We retain all rights to the app and its content
• Your Data: You retain ownership of your health data
• License: We grant you a limited, non-transferable license to use the app
• Trademarks: Rosy and related marks are our trademarks

10.6 Liability and Disclaimers

• No Warranties: App provided "as is" without warranties
• Limitation of Liability: Our liability is limited to the maximum extent permitted by law
• Indemnification: You agree to indemnify us against claims arising from your use
• Force Majeure: We're not liable for circumstances beyond our control

10.7 Purchases and Refunds

• No Return Policy: All purchases of premium features or subscriptions are final and non-refundable
• App Store Policies: Refund requests must be made directly through the Apple App Store or Google Play Store according to their respective policies
• Subscription Cancellation: You may cancel future subscription renewals at any time through your device's subscription settings
• No Prorated Refunds: Cancellation does not entitle you to a refund for the current billing period

10.8 Account Suspension and Termination

10.8.1 Termination by User

• Voluntary Termination: Delete your account at any time through app settings
• Data Deletion: Account deletion triggers data deletion according to our retention policy

10.8.2 Termination by Rosy

ROSY RESERVES THE RIGHT TO SUSPEND OR TERMINATE any user account, membership, or subscription at any time, with or without notice, for any reason, including but not limited to:

Grounds for Termination:

• Violation of these Terms of Use
• Violation of our Privacy Policy
• Fraudulent, abusive, or harmful behavior
• Breach of payment obligations
• Misuse of the app or its features
• Activity that compromises the security or integrity of our services
• Activity that violates applicable laws or regulations
• At our sole discretion to protect our users, business, or legal interests

10.8.3 Effects of Suspension or Termination

• Immediate Access Restriction: Suspended or terminated accounts lose immediate access to all app features and services
• Data Handling: Upon termination, data deletion will proceed according to our retention policy outlined in Section 8
• No Refunds: Suspension or termination does not entitle users to refunds of any fees paid for premium features or subscriptions
• Outstanding Obligations: All payment obligations and other liabilities incurred prior to termination remain in effect
• Survival of Terms: Sections relating to intellectual property, liability limitations, indemnification, and dispute resolution survive termination

10.8.4 Appeal Process

• Appeal Requests: Users may appeal account suspension or termination by contacting admin@rosyroot.com within 30 days
• Review Process: We will review appeals in good faith but reserve the right to make final decisions regarding account status
• Reinstatement: Reinstatement of suspended or terminated accounts is at our sole discretion

10.9 Survival of Terms

The following provisions survive termination of your account or these Terms:

• Payment obligations
• Intellectual property rights
• Liability limitations
• Indemnification clauses
• Dispute resolution procedures
• No-refund policy

11. Apple App Store Compliance

11.1 Health Data Handling (HealthKit Integration)

• Purpose Limitation: Health data used only for health and fitness purposes
• No Advertising: Health data not used for advertising or marketing
• No Sale: Health data never sold to third parties
• Consent Required: Explicit user consent for all HealthKit data access

11.2 App Store Review Guidelines Compliance

• Content Restrictions: App content appropriate for all users
• Functionality: App performs as described in App Store listing
• Privacy Nutrition Labels: Accurate representation of data collection
• In-App Purchases: Clear disclosure of any premium features with no-refund policy
• Subscription Terms: Clear presentation of subscription terms and auto-renewal policies

11.3 iOS-Specific Features

• iOS Privacy Controls: Full support for iOS privacy features
• App Tracking Transparency: Respect user choices about tracking
• Screen Time Controls: Integration with iOS screen time features
• Accessibility: Full support for iOS accessibility features

SECTION III: ADMINISTRATIVE

12. Changes to This Policy

12.1 Updates and Notifications

• Material Changes: 30-day advance notice for significant changes
• Notification Methods: In-app notification, email, and website posting
• Continued Use: Continued use after changes constitutes acceptance
• Version Control: All policy versions archived and accessible

12.2 Your Options After Changes

• Review Period: 30 days to review and object to changes
• Account Deletion: Option to delete account if you disagree with changes
• Data Export: Export your data before account deletion
• Contact Us: Reach out with questions about policy changes at admin@rosyroot.com

13. Contact Information

Primary Contact:
Email: admin@rosyroot.com
Response Time: 30 days maximum

Purpose: For all privacy requests, data requests, general support, legal matters, and regulatory compliance inquiries, please contact us at the email address above with a clear subject line describing your request.

APPENDIX: JURISDICTION-SPECIFIC INFORMATION

European Union (GDPR)

• Legal Basis: Article 6(1)(a) consent, (b) contract, (f) legitimate interest
• Data Controller: [INSERT COMPANY NAME AND ADDRESS]
• EU Representative: [IF APPLICABLE]
• Supervisory Authority: You may lodge complaints with your local data protection authority

United States (Various State Laws)

• California (CCPA/CPRA): Additional rights described in Section 5.2
• Virginia (VCDPA): Similar rights to GDPR for Virginia residents
• Colorado (CPA): Comparable privacy rights for Colorado residents

Other Jurisdictions

• Canada (PIPEDA): Similar privacy protections for Canadian users
• Australia (Privacy Act): Compliance with Australian Privacy Principles
• Brazil (LGPD): GDPR-equivalent protections for Brazilian users