Privacy Policy
Last updated: 28 October 2026
Rosie helps you choose wine from a restaurant wine list. To do that we need a little information about your taste and the list in front of you. We collect as little as we can, keep it only as long as it's useful, and never sell it or use it for advertising.
1. Who we are
Rosie is made by Emerald Lion Technologies Ltd, a company registered in Wyoming, USA, with its registered office at 30 N Gould St, Suite 31683, Sheridan, WY 82801, USA ("we", "us"). We are the controller of the personal data described here. You can reach us about anything in this policy at hello@askrosie.app.
This policy covers the Rosie app for iPhone and Android and the website askrosie.app.
2. What we collect and why
| Data | Why we use it | Legal basis (EU/UK) |
|---|---|---|
| Sign-in details: your name and email address from Sign in with Apple or Google, and an account ID. If you use Apple's "Hide My Email", we only see the relay address. | To create your account and let you sign in on your devices. | Contract |
| Your taste profile: your answers to Rosie's questions (for example, wines you enjoy or avoid, how you take your coffee) and the wine type we work out from them. | To recommend wines that suit you. | Contract |
| Your recommendations: the answers you give for a night out (how many people, what you're eating, budget), the wines Rosie suggested, and when. | To show your recommendation and keep the chat about it going for a couple of hours. | Contract |
| Questions you type to Rosie about the wines on a list. | To answer them. We don't store the text of your questions; we only count them, to apply the limits. | Contract |
| Usage records: when you scanned a list, your plan (Free, Rosie Plus or Rosie Grand Cru), and whether we've shown you certain messages (for example, an invitation to try Rosie Plus or to leave a review). | To apply free-scan allowances and fair-use limits, and to avoid showing you the same message twice. | Contract; legitimate interests (preventing abuse) |
| Settings: language, notification and email preferences, and your analytics choice. | To remember your choices across devices. | Contract; consent (emails, analytics) |
| Device information: app version, device type, and a notification token if you allow notifications. On iPhone, an Apple-provided check that requests come from the genuine Rosie app (App Attest via Firebase App Check). | To keep the app working, send notifications you've asked for, and protect our service from abuse. | Contract; legitimate interests (security) |
| Subscription status: whether you have Rosie Plus, its renewal dates, and purchase records from Apple or Google Play. We never see your payment card. | To give you the features you paid for. | Contract |
| Your country, only if you allow location access. We only use it at country level, on your phone. | To read prices in the right currency. | Consent (you can say no) |
| Messages you send us, for example by email. | To reply and help you. | Legitimate interests |
We do not ask for or store your date of birth. Before you start, Rosie asks you to confirm that you're old enough to drink alcohol where you live.
Before you sign up, Rosie's questions are answered and worked out on your phone. Nothing about you reaches our servers until you create an account. If you don't sign up, the app deletes your answers.
3. Wine-list photos
- When you scan a list, Rosie first reads the text on your phone. The text and a compressed copy of each photo are then sent to our server and to our AI provider to work out which wines are on the list, their prices and their style.
- We use the photos for that one reading request only. We do not store your photos on our servers or in our logs, and Rosie doesn't save them to your photo library. Photos you choose from your library are read, not copied.
- We keep the text of the wine list we read (wine names, prices, sections and the restaurant name if printed). It's about the restaurant's list, not about you, and it helps Rosie read lists faster and better. Your recommendation history refers to the list you scanned until you delete your account.
- Please photograph the wine list only, and avoid capturing people or other personal information.
4. How Rosie uses AI
Rosie uses AI models from OpenAI to read wine lists, choose and explain recommendations, and answer your questions about the wines. We send them only what's needed: the list (text and photos), your taste profile, your answers for the night and your question. We never send your name, email address or account ID.
OpenAI processes this data on our behalf. It does not use it to train its models. We ask OpenAI not to keep it (the API's "store" setting is off); OpenAI may still keep requests for up to 30 days to detect abuse, unless and until our request for zero data retention is approved.
Rosie's suggestions are worked out automatically from your profile and the list. They are suggestions only and have no legal or similarly significant effect on you.
5. Analytics
- Analytics are off unless you say yes. If you agree, Rosie sends anonymous usage events (for example "a recommendation was shown") to PostHog, hosted in the EU. They're linked to a random install ID, never to your account, name or email. Your IP address is discarded, and there's no session recording. You can change your mind at any time in Profile › Privacy.
- Crash reports. If the app crashes, Rosie sends a crash report to Firebase Crashlytics (Google): what went wrong in the code, the app version, the phone model and operating-system version, and a random installation ID. Never your account, name, email, photos or answers. We use these reports to fix bugs (legitimate interest), Google keeps them for 90 days, and you can turn them off in Profile › Privacy.
- We don't use advertising identifiers, we don't track you across other companies' apps or websites, and there are no ads in Rosie.
- The askrosie.app website uses no cookies and no analytics.
6. Who we share data with
We don't sell your personal data or share it for advertising. We use these service providers, who process data only on our instructions and under data-processing agreements:
| Provider | What for | Where |
|---|---|---|
| Google Cloud | Runs our server | Paris, France |
| Neon | Our database | Frankfurt, Germany |
| Google Firebase | Sign-in (Authentication), app integrity checks (App Check) and notifications on Android (Cloud Messaging) | EU and USA |
| OpenAI | Reading lists and writing recommendations (see section 4) | USA |
| RevenueCat | Managing Rosie Plus subscriptions, using our random account ID only | USA |
| PostHog | Anonymous analytics, only if you agree | EU (Frankfurt) |
| Google (Firebase Crashlytics) | Crash reports, unless you turn them off | United States |
| Cloudflare | Our website and email delivery for hello@askrosie.app | Global |
Apple and Google handle sign-in under their own privacy policies, and Apple or Google Play handles payments for Rosie Plus, depending on where you subscribe. We may also disclose data if the law requires it, to protect people's safety or our rights, or as part of a sale or reorganisation of our business, in which case this policy would continue to apply.
7. Where your data is stored
Our server and database are in the European Union. Some providers above are based in the United States. When data leaves the EU or UK, we rely on the European Commission's Standard Contractual Clauses (and the UK addendum), or on the provider's certification under the EU-U.S. Data Privacy Framework where available.
8. How long we keep it
- Your account, profile, settings and recommendations: until you delete your account.
- Scan records: for the life of your account (they decide your free allowance). Records of list reads are deleted after 2 days.
- Wine-list photos: not stored (see section 3).
- Wine-list text: kept without your details; lists not seen for 12 months are deleted.
- Server logs (which include technical details such as IP addresses, but never photos or what you type): about 30 days.
- Backups: our database keeps a short restore history (never more than 30 days), after which deleted data is gone for good.
- Emails with us: as long as needed to help you, then deleted.
9. Your rights and choices
- Delete your account at any time in the app: Profile → Delete account. This deletes your profile, answers, recommendations and usage records from our systems and removes your sign-in. If you have Rosie Plus, cancel it in your Apple or Google subscriptions too; deleting your account doesn't cancel the subscription.
- See or get a copy of your data, correct it, restrict or object to how we use it: email hello@askrosie.app. You can change your name and retake Rosie's questions in the app.
- Withdraw consent (analytics, location, notifications, emails) at any time in the app or your phone's settings. This doesn't affect what we did before.
- Complain to a data protection authority, for example the CNIL in France, the ICO in the UK or the Data Protection Commission in Ireland. We'd appreciate the chance to sort it out with you first.
We reply within one month. We may need to confirm it's you before acting on a request.
10. Security
Data is encrypted in transit and at rest. Requests to our server must come from a signed-in person using the genuine Rosie app. Access to production systems is limited to the people who need it. No system is perfectly secure, and if a breach affects you we'll tell you and the authorities as the law requires.
11. Age
Rosie is about alcohol and is only for adults of legal drinking age where they live (at least 18, and 21 in the United States). We don't knowingly collect data from anyone younger. If you believe a minor has created an account, contact us and we'll delete it.
12. Extra information for your region
United States (including California)
In the last 12 months we have collected the categories of data in section 2: identifiers (name, email, account ID), commercial information (subscription status), internet or other electronic activity (app usage), approximate location (country, if you allow it) and inferences (your wine type). We use them only for the purposes in section 2. We do not sell or share personal information for cross-context behavioural advertising, and we don't use sensitive personal information to infer characteristics about you. You may request access, correction or deletion and won't be treated differently for doing so. You can make a request yourself or through an authorised agent by emailing us.
Canada
We handle personal information in line with PIPEDA and applicable provincial laws. Some of it is processed outside Canada (see section 7) and may be accessible to authorities there.
Quebec: the person in charge of the protection of personal information (Law 25) is Ben van de Vusse, founder. Contact: hello@askrosie.app.
Australia
We handle personal information in line with the Australian Privacy Principles. Some of it is processed overseas (see section 7). You can complain to us, and then to the Office of the Australian Information Commissioner.
New Zealand
We handle personal information in line with the Privacy Act 2020 and its Information Privacy Principles. Some of it is stored and processed outside New Zealand (see section 7), with providers bound to protect it to a comparable standard. You can ask to see or correct your information at any time. If you're unhappy with how we've handled it, tell us first; you can also complain to the Office of the Privacy Commissioner (privacy.org.nz).
European Union
Our representative in the EU (GDPR article 27) is Ben van de Vusse, based in France. Contact: hello@askrosie.app.
United Kingdom
"GDPR" in this policy includes the UK GDPR, and you can complain to the Information Commissioner's Office. Our representative in the UK (UK GDPR article 27) is Thomas Stuart, based in Oxfordshire, England. Contact: hello@askrosie.app.
13. Changes to this policy
We'll update this policy when Rosie changes. If a change is significant, we'll tell you in the app before it takes effect. The date at the top shows the latest version.
14. Contact us
Emerald Lion Technologies Ltd, 30 N Gould St, Suite 31683, Sheridan, WY 82801, USA
hello@askrosie.app