Privacy
RosterOS
Privacy Policy
Effective April 3, 2026. This page describes what RosterOS collects, how it's used, and your choices. It is a plain-language starter policy; the canonical version inside the iOS app links to the same content.
TODO: Legal review This policy is grounded in how the RosterOS iOS app behaves and the services it integrates with, but it has not been reviewed by qualified counsel in your jurisdiction. Have an attorney review it before relying on it for a regulated launch.
Overview
RosterOS ("RosterOS", "we", "our") is a personal-training business app made for individual trainers and small studios. We collect only what's needed to run the app and your account, and we don't sell, rent, or share your personal data with third parties for advertising.
Information we collect
Information you provide
- Account details: your name, email address, and password (or an Apple-provided identifier if you sign in with Apple).
- Business data: the client records, sessions, payments, notes, measurements, progress photos, intake answers, and workout templates you create in RosterOS.
Information collected automatically
- Device identifiers: used to prevent abuse of the free trial and to associate your account with your devices.
- Diagnostic data: anonymised crash reports and performance metrics collected via Sentry so we can fix bugs.
- Subscription data: receipts and entitlement state provided by the Apple App Store and RevenueCat so we can grant or revoke RosterOS Pro access.
Information collected only with your permission
- iPhone Contacts: read only when you tap Import from Contacts, used to create client records you select.
- Calendar: written to when Calendar Sync is enabled, so sessions you create in RosterOS mirror to your phone's calendar.
- Camera and Photo Library: used when you capture or save a progress photo.
How we use information
- To provide the app, sync your data across devices, and recover it on a new device.
- To process subscriptions through the Apple App Store.
- To diagnose crashes and improve reliability.
- To respond to support requests you send us.
- To enforce our Terms of Use and prevent abuse.
We do not use your business data, client records, or session notes to train machine learning models, sell to advertisers, or target ads.
Third-party processors
RosterOS uses a small set of third parties to deliver the service. Each has its own privacy policy:
- Supabase: authentication and cloud database. Privacy policy.
- RevenueCat: subscription receipts and entitlement management. Privacy policy.
- Sentry: anonymised crash and performance reporting. Privacy policy.
- Apple: Sign in with Apple, App Store distribution, and in-app purchases. Privacy policy.
Retention & deletion
Your data persists while your account is active. From Settings → Account → Delete account you can request permanent deletion; we remove your data from our servers within 30 days of the request.
Crash reports and aggregated diagnostic data may be retained in anonymised form beyond that window for the purpose of debugging and reliability analysis.
Children
RosterOS is intended for use by adult personal trainers running their business. The service is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child has provided personal information to RosterOS, email support@rosteros.app and we'll delete it.
International users
TODO: Owner input The hosting region for production data and any applicable cross-border transfer mechanisms (e.g. EU Standard Contractual Clauses) should be confirmed with counsel and documented here.
Security
We use HTTPS/TLS for all network traffic between the app and our backend. The local SQLite cache on your device is stored in the app's sandbox; sensitive credentials are kept in the iOS Keychain. No security practice is perfect; you can reduce risk by using a strong, unique password (or Sign in with Apple) and keeping iOS up to date.
Your rights
- Access: export your data via Settings → Data, or by emailing support.
- Correction: edit any record from inside the app.
- Deletion: delete a single record from its detail screen, or your entire account from Settings → Account → Delete account.
- Object / restrict: write to support@rosteros.app with the request and we'll respond.
Changes to this policy
Material changes will be announced in the app and dated here. The effective date at the top of this page reflects the most recent revision.
Contact
Questions about this policy or your data? Email support@rosteros.app.
TODO: Owner input If you operate RosterOS under a registered legal entity, add the company name, registered business address, and (where applicable) the data-protection contact or representative here.