Rosemary does not collect your data. Everything you record stays on your device and in your own iCloud account, where only you can read it.
Who we are
Rosemary is a personal expense tracker published by Damir Kombikov. If anything here is unclear, write to rosemary@f248glm.me and we will answer.
What Rosemary does not do
Rosemary has no server of its own. It does not:
- ask you to create an account or sign in
- collect analytics, usage statistics, telemetry or crash reports
- show advertising or contain advertising, attribution or tracking SDKs
- track you across apps or websites, or ask for permission to do so
- sell, rent or share your information with anyone
Your financial data
Your transactions, accounts, balances, categories and budgets are stored on your device.
If you are signed in to iCloud, that same data also syncs through CloudKit to the private database of your Apple Account, so your devices stay in step and your records survive a lost phone. A private CloudKit database belongs to you alone: we have no access to it, cannot read it, and it is not visible to us in any developer tool. Apple’s handling of it is covered by Apple’s own privacy policy.
You can turn this off at any time by signing out of iCloud or disabling iCloud for Rosemary in the Settings app. The app then keeps working entirely on-device.
Exchange rates
To show balances in a single currency, Rosemary downloads public exchange rate tables from Exchange Rate API (open.er-api.com) for national currencies and CoinGecko (api.coingecko.com) for cryptocurrencies.
These requests carry no personal or financial information. They ask only “what are today’s rates” — never your amounts, account names, transactions or anything identifying you. As with any request to a website, those two providers can see the network address it came from; that exchange is between you and them, and they send us nothing about you in return.
Downloaded rates are cached on your device so the app keeps working offline.
Trial and purchase
The free trial and the one-time purchase that unlocks Rosemary permanently are handled entirely by the App Store. Your payment details go to Apple — we never see, receive or store card numbers, billing addresses or any part of the transaction.
To know whether you are on the trial or own the full version, the app reads the purchase record that Apple signs and keeps on your device. That check happens on the device itself and sends nothing to us.
Apple gives us aggregated, anonymised sales and download reports. They count purchases by country; they do not identify individual customers, and we cannot connect them to anyone’s data.
Exporting your data
Exporting creates a CSV file that you share yourself, using the standard iOS share sheet. Once you send that file somewhere, it is outside Rosemary and where it travels is up to you.
Keeping and deleting your data
Because none of your information ever reaches us, there is nothing on our side to keep, hand over or delete. Your data lives where you put it, for as long as you keep it.
You can delete any transaction or account at any time from within the app. Deleting Rosemary from your device removes the data stored on it; the copy in your iCloud account can be removed from the Settings app under your Apple Account, in iCloud storage management. Both are permanent — no backup of your records exists anywhere else.
Children
Rosemary is not directed at children. It collects no information from anyone, children included.
Your rights
Privacy laws such as the GDPR and the CCPA give you the right to see, correct, export and erase the personal data a company holds about you. We hold none, so there is nothing for us to produce or erase. The data on your device and in your iCloud account is yours to read, export and delete directly, using the app and your Apple Account.
Changes to this policy
If this policy changes, the updated version appears here and in the app, with a new date at the top. Anything material will also be called out in the app’s release notes.