ROSALUNE
Privacy Policy
Effective date: 26 September 2026. Rosalune is a personal menstrual and wellness tracking app. This policy explains how Rosalune handles information when you use the app, its optional cloud features, or contact support.
Information Rosalune processes
Rosalune processes account and service information such as verified email address, sign-in provider identity, account identifiers, device label, a one-way device installation hash, session/security records, and consent records. If you choose cloud backup, Rosalune also processes the profile details, settings, period, symptom, wellness, custom symptom, reminder, and consent records selected by the app for cross-device backup.
Optional technical diagnostics may include limited allow-listed fields such as app version, Android version, app operation, and safe error codes. Diagnostics are designed to exclude health notes, health values, dates, names, report contents, precise location, and photos.
Why information is used
Rosalune uses information to provide account sign-in, requested backup and recovery, device management, security, optional diagnostics, support, and legal compliance. Rosalune does not sell health tracking data or use it for advertising.
Security and service providers
Supported cloud records are encrypted in transit and encrypted at rest using AES-256-GCM. This is not end-to-end encryption: the Rosalune service holds and uses the server-side encryption key to provide backup and cross-device sync. Profile photos, app PINs, biometric credentials, notification permissions, generated reports, and the local diagnostics buffer are not included in cloud health backup.
Rosalune uses Hostinger for its hosted application and database environment, Google Sign-In to verify an identity when you choose that sign-in method, Google Play for subscription purchases, and configured SMTP email delivery for one-time sign-in codes. These providers process only the information needed for their service. Rosalune does not use advertising or cross-app tracking providers.
Your choices
You can choose whether to enable optional diagnostics and cloud backup. You can request account deletion after identity verification in the app or through our account-deletion page. You can also withdraw cloud-health-storage consent; this stops cloud sync until you provide fresh consent, but does not erase data already stored on this device or request deletion of the cloud account.
Rosalune processes Google Play purchase tokens only to verify a requested Plus entitlement, restore a purchase, prevent the same purchase token being linked to more than one account, and respond to Google Play subscription events. Rosalune does not receive or store payment-card details. Promotional codes are stored only as keyed hashes, not plaintext values.
ROSALUNE
Terms of Use
Rosalune is a personal menstrual and wellness tracking companion. It is not a medical device and does not diagnose, treat, cure, or prevent any medical condition. It does not provide medical advice, diagnosis, treatment, emergency care, contraception guidance, or fertility treatment guidance.
Use your own judgement and consult a qualified healthcare professional for medical concerns. Seek urgent or emergency help from local emergency services or a qualified clinician where appropriate. Predictions and Learn content are educational estimates and cannot replace professional care.
You are responsible for providing accurate account information, protecting access to your device and account, and using Rosalune lawfully. For privacy questions, account requests, or support, contact support@rosalune.in.
Rosalune Plus, trials, and promotional access
Rosalune may offer an optional Plus membership through Google Play. Google Play presents the price, currency, billing period, renewal terms, trial terms, discounts, and cancellation controls before purchase; those Play terms control the transaction. An introductory trial may be available only once per eligible account and is not available again after a verified subscription or promotional Plus access.
Promotional codes provide time-limited Plus access only. They are not discounts on a Google Play transaction, may have an expiry or redemption limit, and may be restricted to one use of a particular code per account. When promotional access ends, Plus features return to the Free plan unless there is an active paid subscription.
Where required by law, you retain applicable consumer rights. Google Play controls the transaction, renewal, cancellation, refund, and tax information for purchases made through Google Play.
ROSALUNE
Cloud Health Consent
Cloud backup is optional. It is enabled only after you have read the in-app notice and actively choose it.
When enabled, Rosalune may sync selected profile details, app settings, period entries, symptom entries, wellness entries, custom symptom definitions, reminder definitions, and consent records between your own authorised devices. Entries can include dates, notes, and wellness information you choose to record.
The purpose is backup, recovery, and cross-device sync. Data is encrypted in transit and at rest. Rosalune's server holds the encryption key needed for that service, so this is not end-to-end encryption. The feature excludes profile photos, app PINs, biometric credentials, generated reports, notification permissions, and local diagnostic buffers.
You may withdraw this consent in the app. Withdrawal signs out cloud sessions and prevents future cloud sync until you grant fresh consent. It does not delete local device data or replace an account-deletion request. Account deletion is a separate, verified action.
ROSALUNE
Diagnostics
Diagnostics are optional. They help Rosalune investigate technical stability and backup failures; they are not used to diagnose a health condition.
Rosalune's diagnostic uploader is designed to send only allow-listed technical context, such as app version, Android version, API level, feature area, operation, and safe error codes. It excludes free-form notes, symptoms, health values, dates, names, report content, photos, passwords, verification codes, access tokens, and location.
Remote diagnostic metadata is retained for up to 30 days. Turning diagnostics off clears the app's local diagnostic buffer. Access is limited to people maintaining Rosalune's service.
ROSALUNE
Retention and deletion
Rosalune retains remote diagnostic metadata for up to 30 days, security-audit metadata for up to 90 days, and historic sync versions used for conflict handling for up to 30 days.
A verified account-deletion request immediately revokes cloud sessions and schedules the cloud account and related cloud data for removal after 30 days. Local data on a phone remains until you reset or delete it separately. Limited records may remain in rotating backups or where retention is required for security, fraud prevention, or law; they are isolated from normal service use and removed according to the applicable retention schedule.
To request deletion without the app, use our account-deletion page. Do not send health notes, reports, passwords, one-time codes, or payment information with a deletion request.
ROSALUNE
Prediction estimates
Rosalune's cycle predictions are estimates based on information you choose to save. They may be inaccurate, particularly with limited history or cycles that vary.
Predictions are not contraception, fertility treatment, medical advice, diagnosis, or a substitute for professional care. Rosalune should never be used to make an urgent health decision.
ROSALUNE
Support and account recovery
For app support, privacy requests, or account-recovery help, contact support@rosalune.in with your app version and a brief technical description.
Do not send medical notes, full reports, verification codes, passwords, tokens, or screenshots containing sensitive information by ordinary email. Rosalune will use a verified route before asking for information needed to act on an account request.
