Privacy Policy

Last updated: 3 November 2026

This policy explains how Rosey collects, uses, stores and shares personal information when you visit our website, shop with us, contact us, join our emails or use the Rosey Skin Journal.

Rosey is operated by Coreena Duncan, ABN 79 161 557 644, trading as Rosey Skin. In this policy, “Rosey”, “we”, “us” and “our” refer to that business.

Email: hello@roseyskin.co
Address: Office 3018, 470 St Kilda Road, Melbourne VIC 3004, Australia

1. INFORMATION WE COLLECT

The information we collect depends on how you interact with Rosey.

Shopping and enquiries

When you shop with us, we may collect your name, email address, phone number, billing and delivery details, order history and any information you send us.

Shopify and its payment providers handle payments. Rosey does not receive your full payment card details.

If you contact us, send feedback, enter a promotion or otherwise communicate with us, we receive the information you choose to share. Please send only what is needed for your enquiry.

Website and technical information

When you browse our website or use the Journal, we and our service providers may process technical information needed to deliver and secure the service. This may include your IP address, browser and device type, pages requested, visit times, referral information and information about cookies or similar technologies.

Our online store and its service providers may also process information about website activity, such as products viewed and cart or checkout activity, where the relevant features are enabled.

Rosey emails

If you choose to join Rosey marketing emails, we collect the details you provide, such as your first name and email address, together with a record of your request or consent.

Our email provider may also record interactions with our emails, such as opens and link clicks.

Joining Rosey emails is optional and separate from creating a Journal account.

Journal accounts and content

When you create a Journal account, we collect your email address and information needed to authenticate you and maintain your account. We do not receive your account password in readable form.

You may choose to save skin observations, journal responses, gratitude notes, Things you love and favourites to your account. This content is encrypted on your device before it is saved, as explained in section 3.

Skin observations and personal writing may contain information about your health or wellbeing, depending on what you choose to record. Please do not include information about someone else unless you have their permission.

The current account-based Journal does not collect new skin photographs. Earlier photographs are not copied when earlier device writing is transferred to an account.

2. HOW WE USE INFORMATION

We use information to:

• Process payments and deliver orders.
• Manage returns, refunds and customer enquiries.
• Provide, maintain and secure our website and Journal.
• Create, verify and manage Journal accounts.
• Save and retrieve the writing and favourites you choose to keep in your account.
• Respond to requests for help or information.
• Send marketing emails when you have separately chosen to receive them.
• Understand general use of our website and services.
• Prevent fraud and misuse.
• Meet legal, tax, accounting and record-keeping obligations.

We do not use the contents of private Journal writing or skin observations to personalise advertising or create marketing audiences. We do not send the contents of private Journal entries to Klaviyo or Plausible through the Journal.

Creating a Journal account does not automatically subscribe you to Rosey marketing emails.

3. YOUR ROSEY SKIN JOURNAL

The Journal is a place to notice and reflect. It is intended for adults aged 18 and over.

The account-based Journal is available on the web and, when released, through the iPhone app. People using an Android device can use the web Journal.

The updated web Journal is being introduced in November 2026. Features, navigation and public previews can vary between versions.

In the updated Journal, selected moments, journal prompts, affirmations and ingredient stories can be explored without an account. Breathing, grounding, the Rosey Reset, Spotify links and Inside the formulas are public. A verified account is needed to save writing and favourites, explore the deeper collections and access Rosey in Residence within the Journal.

How your writing is protected

Your skin observations, journal responses, gratitude notes, Things you love and favourites are encrypted on your device before they are saved to your account.

The encryption is designed so Rosey does not hold the key needed to read your private account content. We do not routinely review your private writing.

If you choose to send us writing, an export or a screenshot, we can read what you send. Please do not send your journal passphrase or recovery key. Rosey will never ask you to send either of them to us.

We use Google Firebase Authentication and Cloud Firestore to provide accounts and storage. Firestore is configured in Google’s Melbourne region. Firebase Authentication processes account information in the United States, and other processing may occur where Google or its providers operate.

Your email address, account identifier, record identifiers, record counts, update times and technical information needed to operate and secure the service are not part of the encrypted writing and may be visible to Rosey and its providers.

Favourites and pins are also encrypted on your device before they are saved to your account. Older versions may not preserve pinned preferences until updated.

Your account password, journal passphrase and recovery key

Your account password lets you sign in to your account. Your journal passphrase is separate and protects access to your encrypted writing.

When setting up your Journal, you can also save a recovery key. Keep it somewhere private and separate from a device you might lose, such as in a password manager or a secure written record.

Your recovery key can help you choose a new journal passphrase if you forget it. If you forget your journal passphrase and have not saved a usable recovery key, Rosey cannot restore your encrypted writing.

Resetting your account password does not reset your journal passphrase or decrypt your writing.

Remembering your Journal on a device

You can remain signed in and remember your Journal on a device. On iPhone, this uses protected device storage. On the web, a key is stored in your browser.

Signing out removes the remembered journal key from that device. You may need your journal passphrase or recovery key to open your writing after signing in again. Signing out does not delete confirmed account entries.

Someone with access to an unlocked device or an open Journal may be able to read your writing. Protect your devices and sign out on shared devices.

Saving, syncing and encrypted offline drafts

An internet connection is needed to confirm that new writing has been saved to your account.

When you try to save writing in the encrypted Journal, an encrypted draft is kept on your device until the account save is confirmed. This helps protect submitted writing if your connection is interrupted or you close the app before a save finishes.

An encrypted draft is separate from a confirmed account entry. It is not available on another device until it has been saved to your account.

After reopening the Journal, sign in and unlock your journal to review writing waiting to be saved. Reconnect and choose Save to account to retry a pending draft.

A save already in progress may finish when your connection returns. Check your confirmed entries before trying again.

Text you have not submitted by choosing Save is not automatically retained. Clearing browser or app storage, uninstalling the app or losing the device may remove drafts that have not reached your account.

Syncing between devices is not the same as a separate backup. We do not currently provide a separate automatic backup of the account database.

Finding, editing and deleting your writing

In the updated Journal, Your writing brings together your journal entries, gratitude notes and Things you love. Links within relevant sections also let you return to writing from those sections.

Skin observations remain under Your skin.

Open the relevant entry or item to use the available editing or deletion controls. Changes to confirmed account content are reflected on other devices when they reconnect and load the updated account information.

Favourites contains Rosey content you have saved. It is separate from your personal writing.

Deleting an entry removes it from the active account content. It does not remove reports, screenshots, exports or backup files you have saved elsewhere. Provider logs, recovery systems and historical backups may retain information for a period after deletion.

Starting an empty journal

The updated Journal lets you start an empty journal using the same email and login account if you lose both your journal passphrase and recovery key.

You must verify your identity with your account password and explicitly confirm the irreversible reset.

This removes the old encrypted journal and its favourites, including pins. It does not recover the previous writing. Your login account and separate marketing preferences remain.

Exports, backups and earlier copies on other devices are separate. If another device still opens the old journal, save a backup before resetting.

Moving earlier writing to an account

If you used an earlier device-only version of the Journal, Rosey asks before copying your writing to your account. You may continue without copying it. The earlier writing remains on the original device.

If you used an earlier account version, Rosey makes and checks encrypted copies before separately asking you to confirm removal of the earlier readable account copies.

Earlier copies on devices, exports, archives and historical provider backups can remain separately and may not have the new protection. Earlier skin photographs and protected archives are not copied to the account.

Some earlier protected writing and archives may still need their original passphrase or recovery key to open. Rosey cannot reset or recover those earlier passphrases or keys.

Exports and backup files

You can review a skin-observation report and export it as a PDF or web page. You can choose whether to include written skin observations and episode details.

Journal responses, gratitude notes and Things you love are not included in the skin report.

Reports and exports are created on your device. Rosey does not receive them unless you choose to send them to us.

You can also save a separate full backup file using the options available in the Journal. Full backups in the updated Journal include favourites and pins. Account-backup import is not currently available.

You may choose to protect a backup file with a backup passphrase. Keep backup files and their passphrases somewhere private. Rosey cannot recover a lost file or its passphrase.

Files you save, print or share outside your account are separate copies and may not have the same protection as your encrypted account writing. Deleting an entry or account does not delete copies you have saved elsewhere.

Deleting your Journal account

You can request account deletion through Account, within Journal Settings, after confirming your identity.

The deletion process removes the account and its linked writing and favourites from the active Journal database. The Journal then attempts to remove its earlier local copy on the device used for deletion. If local cleanup fails, a separate retry is offered. Please contact us if deletion does not complete.

Deleting your account does not remove:

• Exports or backup files saved elsewhere.
• Earlier copies on other devices.
• A separate Rosey marketing subscription.
• Information retained for a period in provider logs, recovery systems or historical backups.

You can unsubscribe from Rosey marketing emails using the link in an email without deleting your Journal account.

Optional device screen lock

You can choose a six-digit PIN or, on supported devices, a biometric check to lock the Journal interface when you step away. This is separate from your account password and journal passphrase.

Your device handles biometric checks. Rosey does not receive your PIN, face or fingerprint data.

An optional web screen lock does not encrypt older browser storage.

Keyboard dictation

You may be able to dictate into writing fields using your device keyboard’s microphone.

Dictation is provided by your device or keyboard provider and is subject to its settings and privacy practices. The resulting text is handled like other writing you enter in the Journal.

Rosey emails

Joining Rosey marketing emails is optional and separate from a Journal account.

In the updated Journal, you can select an unticked optional email checkbox when registering, or follow a link to the signup page on the Rosey website later.

If you subscribe within the Journal, your email address and the consent wording, time and source are sent to Klaviyo. You do not need to join the emails to use your Journal account.

Klaviyo may receive your contact details, subscription status, consent information and technical information needed to process your request, such as your IP address.

Klaviyo is configured to synchronise subscriber profiles, including contact details, subscription status and email events, to our Shopify store. This can create a Shopify customer profile even if you have not made a purchase.

Your private Journal writing is not sent to Klaviyo through the Journal.

Usage analytics

The updated web Journal uses Plausible for limited page and feature counts. Rosey sends generic page and action names directly to the Plausible Events API. No third-party analytics script is loaded into the encrypted Journal.

We do not send names, email addresses, account identifiers, entry or saved-content identifiers, personal writing, skin ratings, personal links, query strings or referrers in these events.

Plausible receives technical request information such as IP address and browser type to process usage counts and general device and location reports. Plausible does not use analytics cookies.

You can disable usage counts for your browser in Journal Settings. Global Privacy Control and Do Not Track are respected.

This applies to the updated web Journal. Plausible remains off in earlier encrypted web versions and in the current encrypted iPhone app until separately reviewed updates.

Service providers may still receive technical information needed to deliver and secure the Journal. Our separate website and shop may use analytics and cookies as described in section 4.

External links

Links to the Rosey shop may include a general label showing that a visit came from the Journal. This label does not contain your private writing or skin ratings.

Music links may open Spotify, which has its own privacy practices. Your private entries are not sent to Spotify through the Journal.

4. COOKIES AND WEBSITE ANALYTICS

Our Shopify store uses cookies and similar technologies to run the website and checkout, remember preferences, maintain security, and support measurement or marketing features where enabled.

Some website services, including advertising and analytics partners, may receive information about your visits and interactions, subject to the settings and choices available on the website. This may include device, browser, cookie or customer information used to understand website activity or measure marketing.

You can manage cookies through your browser and any privacy controls offered on the website. Some website features may not work as intended if certain cookies are disabled.

Shopify’s separate checkout privacy policy explains additional store data handling.

The web Journal uses browser storage for settings, application files, encrypted drafts and information needed to remember your Journal on a device. An earlier device copy may remain while account migration is completed.

See section 3 for Journal analytics and account storage.

5. MARKETING COMMUNICATIONS

We use Klaviyo to manage Rosey marketing emails. If you subscribe, we may send product news, Journal updates, stories, invitations and other Rosey communications.

You can unsubscribe using the link in a marketing email or by contacting us.

We may still send messages needed to fulfil an order, respond to a request or operate your Journal account.

Our email service may record email opens and link clicks so we can understand engagement with our communications.

6. WHEN WE SHARE INFORMATION

We share information as needed to operate our business and services. Providers and recipients may include:

• Shopify and payment providers, for our online store, shopping and checkout.
• Delivery providers, to deliver orders.
• Klaviyo, for optional marketing subscriptions and communications.
• Netlify, for web Journal hosting.
• Plausible, for limited usage analytics in the updated web Journal.
• Google Firebase, for Journal authentication and encrypted account storage.
• Apple, for iPhone app distribution and related services.
• Website analytics and advertising partners, where their services are enabled and applicable choices and settings permit.
• Professional advisers and authorities, where required or permitted by law.

These providers may process technical information needed to deliver their services. Firebase stores the encrypted account content you choose to save. Private Journal writing is not sent to Klaviyo or Plausible through the Journal.

We may also disclose information where required or authorised by law, to protect rights or safety, or in connection with a proposed or completed sale, restructure or transfer of the business, subject to applicable law.

7. OVERSEAS PROCESSING

Some providers and their subprocessors may access or process personal information outside Australia.

The Journal’s Firestore database is configured in Melbourne, while Firebase Authentication processes account information in the United States. Other processing may occur in countries where a provider or its subprocessors operate.

Based on our current provider arrangements, these locations may include the United States, Canada, Ireland, Singapore, the United Kingdom and countries in the European Union.

We take reasonable steps, appropriate to the information and service, to assess how providers handle personal information. Contact us if you would like more information about a particular service.

8. SECURITY AND RETENTION

We take reasonable steps to protect information we hold against misuse, loss and unauthorised access or disclosure. No online service or storage method is completely secure.

For the account-based Journal, we keep account content while your account is active, unless you delete it earlier.

Encrypted pending drafts remain on the device until the account save is confirmed or they are removed through the available controls or device-storage cleanup.

We keep business and customer information for as long as reasonably needed for the purposes described in this policy, including legal, tax, accounting and dispute-resolution requirements.

Provider logs, recovery systems or historical backups may retain information for a period after deletion. A file you export and save elsewhere is separate from the active account database.

An earlier device-only Journal copy may remain on the original device during migration. Clearing browser storage, uninstalling an app or losing that device may remove it. Earlier protected archives and backup files you chose to encrypt keep their original passphrases.

We do not currently provide a separate automatic backup of the account database.

If a privacy or security incident occurs, we will assess and respond to it, including providing notifications where required by applicable law.

9. ACCESS, CORRECTION AND PRIVACY REQUESTS

You can read, edit, export and delete Journal content using the features available in your version. See section 3 for the writing and account-deletion paths.

You may contact us to ask what personal information we hold about you, request access or correction, or request deletion where applicable.

We may need to verify your identity before acting on a request. Some records may need to be retained by law or for other legitimate purposes.

Because your Journal content is encrypted, we may not be able to read or correct it on your behalf. Rosey cannot recover your encrypted writing if you lose both your journal passphrase and recovery key, or forget your passphrase after choosing not to save a recovery key.

We cannot retrieve a backup file you saved elsewhere or unlock an earlier protected archive without its original passphrase or recovery key.

If you separately send us an entry, screenshot or export, please contact us about the copy we hold.

Send privacy requests to hello@roseyskin.co.

10. PRIVACY COMPLAINTS

If you have a concern about how we have handled your information, email hello@roseyskin.co with the details.

We will review your concern, investigate as appropriate and respond within a reasonable time.

If you are not satisfied with our response and the Australian Privacy Act applies, you may be able to complain to the Office of the Australian Information Commissioner at www.oaic.gov.au.

11. CHILDREN AND CHANGES TO THIS POLICY

The Journal is intended for adults aged 18 and over. Our website and store are not directed to children. If you believe a child has given us personal information, please contact us.

We may update this policy when our services or information-handling practices change. The current version and update date will appear on this page.

If a change materially affects how we handle personal information, we will provide additional notice where appropriate. Where consent is required for a new collection, use or disclosure, we will seek it before proceeding.

Updating this policy does not subscribe anyone to marketing emails or provide consent to optional tracking.

12. CONTACT ROSEY

For privacy questions, requests or complaints, please contact:

Coreena Duncan, trading as Rosey Skin
ABN: 79 161 557 644
Email: hello@roseyskin.co
Address: Office 3018, 470 St Kilda Road, Melbourne VIC 3004, Australia