Data handling notice — Rosa Rosa

Last updated: October 6, 2026

This notice explains, clearly and without beating around the bush, what data Rosa Rosa touches, what leaves the device, who receives it and how it stops. It complements the Privacy Policy and the Terms of Use; if anything seems to contradict among the three, the Privacy Policy prevails.

1. First thing: what does NOT leave your device

Drawings, thumbnails, preferences, language, sound settings and progress are stored on the device. We do not receive those drawings nor associate them with any account.

2. What does leave, and why

Practically nothing. The app does not show ads, has no accounts, does not use third‑party analytics and does not request location, camera, microphone or contacts permissions. The only thing that may leave is an error report, and only if you send it.

Error reports

If you choose to send us an error report from the app, that submission includes what is needed to reproduce the issue: app version, device model and OS version, and the message you write. It is sent only when you request it.

3. The controls you have

3.1 Delete everything

Uninstalling the app deletes all your data, because it is on the device. No need to ask us or wait for us to process it.

4. Cookies

The mobile app does not use cookies: it is not a website.

Our website does use cookies, and that is explained in the site’s cookie notice.

5. How long each thing is retained

• What is on your device: until you delete it or uninstall.
• Error reports: as long as they are useful for fixing the issue, and at most 24 months.

6. Outside the United States, and your rights

White Hat Mgmt LLC is based in the United States. If you are in the European Economic Area or the United Kingdom, those transfers are covered by standard contractual clauses and other mechanisms applied by the providers themselves.

Your rights under the GDPR — access, rectification, erasure, objection, restriction and portability — are exercised by writing to the address in section 8. We respond within one month. Keep in mind that, because there is no account, in most cases we have no personal data of yours to look for.

If you reside in a U.S. state with its own privacy law, we recognize the same access and deletion rights through the same channel. We do not sell personal data nor share it for behavioral advertising between different companies.

7. Minors

This app is intended for children and operates in accordance with the Children’s Online Privacy Protection Act (COPPA) of the United States. The practical consequence is that by not collecting personal data