Rosemary is a family app for the groceries and household items you buy regularly — and for keeping track of what you already have. This policy explains what we collect, why, and the choices you have. We keep data to the minimum needed to run the app, we don't sell your data, and we don't show ads.
The first time you sign in, Rosemary shows you a screen that names the third parties your data reaches, with the full details of exactly what goes to each one a tap away. Nothing is sent to our AI provider, and you cannot create or join a household, until you tap Agree and continue on that screen. If you'd rather not, Not now signs you out there. The sections below are the long-form version of that screen.
Account information. When you sign in with Google or Apple, we receive your name and email address to create your account. If you join as a kid ("Use a code"), you sign in anonymously — we collect no name, email, or other personal information from the child; the device gets an anonymous identifier and the household code is the credential.
Your list content. The items, stores, recipes, how-to-buy choices, purchase history, and household details you create in the app. A parent may optionally add family members' first names (e.g. to label whose item it is); please only add names you're comfortable storing.
Photos (for identification only). If you snap a photo to add an item or scan a recipe card, the image is sent for one-time AI identification and is not stored by us after the item is identified.
Voice. If you add an item by speaking, Rosemary uses Apple's speech recognition to turn your voice into text. Depending on your device and language, Apple may transcribe the audio on Apple's servers. Only the resulting text reaches Rosemary or our AI provider — the audio itself never does, and we don't store recordings.
How you heard about Rosemary (optional). When you set up your family, you can tell us how you heard about Rosemary (for example Instagram, Facebook, or a friend) and, if it was Instagram, who you saw it from. It's optional, stored with your household, and used only to understand which ways of finding Rosemary are working.
Setup progress. We record which setup steps you reach (for example, agreeing on the permission screen, setting up your household, or adding your first item), whether you opened Rosemary again on a later day, and when, so we can see where setup is confusing. It contains no names and none of your list content, it's never recorded for kid accounts, and it's deleted if you delete your account.
Apple Ads. When you start a new family, Rosemary asks Apple whether you found the app through one of our ads in the App Store, and if so which ad and keyword, and the country it ran in. Apple tells us only about the ad: not who you are, and nothing about what you do in other apps. We store it with your household, use it only to see which ads bring families who find Rosemary useful, and delete it when your household is deleted.
Device and notification data. A push notification token, a per-install device identifier, and your device's time zone — so reminders reach the right device at the right hour.
Subscription data. If you subscribe, we store your subscription status and an App Store transaction ID so Rosemary knows your household is covered. We never receive or store your payment card, billing address, or Apple ID password — Apple handles the transaction.
Basic technical data. Standard information needed to operate and secure the service (e.g. authentication tokens, error/diagnostic data via our infrastructure providers).
Crash and diagnostic data. When the app crashes, we receive an automatic report through Google Firebase Crashlytics: the technical error trace, your device model and operating system version, and the app version. It does not include your name, email, or any of your list or kitchen content, and it is not tied to your account. We use it only to find and fix bugs.
We do not sell your personal information and we do not use it for third-party advertising.
To read your grocery items, understand recipes, suggest dinners, and identify food from photos, Rosemary sends that content through our secure backend to our AI provider, Anthropic (the company behind Claude). Specifically:
What Anthropic does with it: processes the request and returns Rosemary's answer. Under their commercial API terms, Anthropic does not use your data to train their AI models.
When you paste or share a recipe or product link, Rosemary's server visits that website to read the page. That website sees the request — including the fact that someone fetched that URL — and handles it under its own privacy policy, not ours. We don't send it your name, your email, or your list.
Rosemary is designed for families. The kid ("Use a code") path uses anonymous sign-in and collects no personal information from children — no name, email, or account. Any names associated with a child are entered by a parent and can be removed by the parent at any time. We follow a data-minimization approach consistent with children's-privacy expectations. If you believe a child has provided us personal information, contact us and we will delete it.
Google, Apple, and Anthropic process data on our behalf under their own terms and security commitments — Google as our sub-processor under Firebase's Data Processing Terms, and Anthropic under their commercial API terms.
Your list is shared with the members of your own household (that's the point). We otherwise share data only with the service providers above, or if required by law. We never sell it.
We'd rather be straight with you than hide behind vague promises. Your household's data lives in our database (Google Firebase), and — like almost every app you use — our team can technically access it. That's what lets us fix problems and help you when something goes wrong. Our commitment: we don't browse it, we look only when you ask for help or the service needs debugging, we never sell it, and we never use it for advertising.
We keep your data while your account is active. You can delete your account at any time from inside the app, in two taps from the home screen: the gear icon (Settings) → Delete account. This permanently removes your account, your sign-in, and your membership and personal data, and it can't be undone. If other members remain in your household, the shared list, including items you added, stays with them. You can also remove individual items and stores at any time. To request deletion or ask a question, contact us at info@getrosemary.app.
We use industry-standard measures (encrypted transport, authenticated access, server-enforced access rules) to protect your data. No method is 100% secure, but we work to keep your information safe.
Rosemary is for the everyday things your household buys on repeat — groceries, toiletries, vitamins, and over-the-counter basics. It is not a medical app and is not for prescription medications. When you photograph a shelf, Rosemary is built to skip prescription and pharmacy-dispensed medications — it won't log them — and we ask that you don't use Rosemary to track prescriptions. Rosemary gives no dosage, medical, or health advice.
We may update this policy; we'll revise the "Effective date" above and, for material changes, provide notice in the app or by other reasonable means.
Rosemary is developed by Bosco Labs LLC — info@getrosemary.app