Privacy

Last updated: 5 September 2026. This page is the public policy for playrosette.com and the Android app (com.playrosette.app).

What we collect

Phase 1 has no accounts, email addresses, or passwords. The game creates a random device identifier in this browser (or on your phone) and sends it to our API so we can keep your progress.

We store:

• Device ID
• Onboarding answers (experience level, reminder hour, timezone)
• Quiz answers (species, whether correct, time taken, mode, difficulty)
• Life list and streak
• Push notification token, if you allow notifications
• Whether you have purchased Premium, via RevenueCat and Google Play
• Usage analytics via PostHog (EU hosting)

We do not collect your name, email, precise location, or photos from your camera.

Why

To run the game, remember what you have learned, send at most one daily reminder, process purchases, and measure whether people come back — the only question this version exists to answer.

Who else sees data

• Railway hosts the API and database in europe-west4
• Cloudflare R2 stores plant photographs (not your personal photos)
• RevenueCat and Google Play process payments
• PostHog (EU) records product analytics
• Expo delivers push notifications

We do not sell personal data. There are no ads.

Photographs

Plant photographs come from the iNaturalist Open Dataset. We rehost images that are licensed CC0, CC-BY, or CC-BY-SA and credit the photographer on every answer screen and on the attributions page.

Your rights

You can ask for a copy of the data we hold against your device ID, or ask us to delete it. A contact address will be published here before public launch, once ICO registration is complete.

Children

Rosette is aimed at adults. It is not directed at children under 13.

Changes

If this policy changes, we will update the date above and the copy in the Android app.