Privacy Policy

Last updated: 23 June 2026

1. Data controller

Elias Wilkening
Zur Wassermühle 18 · 27777 Ganderkesee · Germany
Email: support@rosterapp.tech · Phone: +49 152 25393437

2. Core principle: local processing

Roster is a fully local app. All content you enter — including people, notes, reflections, health check-ins, agreements, photos and settings — is stored exclusively on your device. There is no Roster server, no cloud storage by us, and no transmission of your content to third parties. No tracking, no analytics, no ad networks. Where you enter special categories of personal data (e.g. health or mood entries, Art. 9 GDPR), these too remain exclusively local on your device.

3. What data is processed?

3.1 Locally on your device (entered by you)

• Profile: name, pronouns, optional profile photo
• Connections: name, relationship type, pronouns, optional photo, notes, agreements, milestones, health data, burn-after-read notes, mood entries
• Reflections / journal entries
• App settings (e.g. tone, reminders)

3.2 Data processed by Apple

• App Store / StoreKit: Apple processes your Apple ID and payment data for subscriptions. We receive only anonymised confirmation of whether a valid subscription exists.
• Local notifications: Reminders are triggered locally by Apple's system — no server transmission.
• PhotosPicker: Access only to the photo you select, not your entire library. Stored locally in the app.
• AVSpeech (optional): On-device speech synthesis — no cloud transmission.

3.3 Data we do not collect

• Location data · Contacts / address book · Microphone recordings · Advertising IDs (IDFA) · Crash or performance telemetry

4. Legal bases

• Art. 6(1)(b) GDPR — contract performance
• Art. 6(1)(f) GDPR — legitimate interests (secure, stable app)
• Art. 6(1)(a) GDPR — consent (e.g. notifications, photo access)

5. Retention

Your data remains on your device for as long as the app is installed. Upon uninstallation, all locally stored data is removed by the operating system. Burn-after-read notes delete automatically after your chosen lifetime (1 hour to 1 month).

6. Third-party sharing

We do not share your app content with third parties and do not transfer it to third countries. Subscription processing via Apple (App Store / StoreKit) is carried out by Apple as an independent controller and is subject to Apple's privacy policy.

7. Your rights

You have rights under Art. 15–22 GDPR: access, rectification, erasure, restriction, data portability and objection. Since all data is on your device, you can exercise these rights directly in the app. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

8. Security

Roster stores data in the app sandbox using iOS device encryption (Data Protection). We recommend securing your device with a passcode, Face ID or Touch ID.

9. Contact & changes

Questions: support@rosterapp.tech. The current version is always available at rosterapp.tech/appinfo/datenschutzrichtlinie.