RosemaryEatsPrivacy policy
The short version. We follow the New Zealand Privacy Act 2020.
- We collect only what the app needs to plan your dinners.
- We never see your PAK'nSAVE password, and we never handle payments.
- We don't sell your information or show you ads.
- You can delete everything from inside the app, any time.
RosemaryEats (formerly RosemaryEats and Trolly) is a meal-planning app that builds dinners around your supermarket's weekly specials and can add the groceries to your online trolley. It's run by Cameron Todd in Warkworth, New Zealand ("we", "us"). Contact: hello@rosemaryeats.co.nz.
What we collect
When you create an account
- Your email address. Your password is handled by Google's Firebase Authentication; we never see it.
When you set up and use the app
- Your household size (adults and kids) and your chosen store.
- Your preferences: diet, favourite cuisines, foods to leave out (such as allergies), kid-friendly and quick-meal settings, and spend level.
- The staples you've asked us to track.
- Your conversations with Rosemary, the in-app planner, and the meal plans she makes, so you can go back to them.
- The recipes of each order, so you can cook from them. A copy stays on your phone so they work offline.
- A log of what the app puts in your PAK'nSAVE trolley: products, quantities and date. This is how we learn how often you buy things like milk and remind you when you're running low.
- A daily count of how many messages you send, to keep costs in check.
Foods to leave out can be health information, so we use them only to plan your meals.
Technical information
- Short error logs on our server (for example, that a request failed). These don't contain your messages. Google Cloud also records basic request details, such as IP addresses, for security.
What we don't collect
- Your PAK'nSAVE password. You type it into PAK'nSAVE's own page, inside the app.
- Payment details, your location, contacts, photos, or anything else on your phone.
Your PAK'nSAVE connection
When you connect PAK'nSAVE, you sign in on PAK'nSAVE's own website inside the app. The app then keeps a session key on your phone only, in its secure storage, and uses it from your phone to add items to your trolley and open checkout. That key is never sent to our servers.
RosemaryEats is not affiliated with, endorsed by or connected to Foodstuffs or PAK'nSAVE. Their own privacy policy and terms apply to your PAK'nSAVE account and orders. You pay PAK'nSAVE directly.
Sharing recipes
If you tap "Share recipes", we make a web page of that week's recipes at a long random link. Anyone you give the link to can open it without signing in. The page shows only the recipes, servings and the products bought for them: not your name, email, household or prices. You can stop sharing at any time, and the page is also removed when you delete those recipes or your account.
How we use your information
- To plan meals that suit your household, preferences, budget and store.
- To fill your trolley when you ask.
- To suggest staples you're probably running low on.
- To keep your past chats and plans.
- To run, secure and improve the app, and to limit usage so costs stay manageable.
We don't sell your information, use it for advertising, or share it with PAK'nSAVE or anyone else for marketing.
Who processes it, and where
| Provider | What for | Where |
|---|---|---|
| Google Cloud (Cloud Run, Firestore) | Running our server and storing your account data | Sydney, Australia |
| Google Firebase Authentication | Sign-in | Google's global infrastructure |
| Anthropic (Claude API) | Writing your meal plans and chat replies | United States |
| Apple (TestFlight) | Distributing the beta, and any crash reports or feedback you choose to send | Apple's infrastructure |
About Rosemary, the AI planner. To answer you, we send Anthropic your chat messages, your household size and preferences, your store, and the plan you're editing. We don't send your email or your trolley log. Anthropic states that, under its commercial terms, it doesn't use API data to train its models.
Because some providers are overseas, your information may be processed outside New Zealand. We choose providers that protect it to a standard comparable to the Privacy Act. We may also disclose information if the law requires it.
How long we keep it
- Your account, settings, chats, saved recipes and trolley log: for as long as you have an account.
- Deleting your account (Account → "Delete my account and data") removes your profile, preferences, chats, saved recipes, share links, trolley log and sign-in straight away.
- Server error logs: about 30 days.
- Your PAK'nSAVE session key: on your phone until you disconnect, sign out or delete the app.
Keeping it safe
Everything travels over encrypted connections. Sign-in and PAK'nSAVE keys are kept in your phone's secure storage (Keychain on iPhone). On the website (app.rosemaryeats.co.nz) your RosemaryEats sign-in is kept in your browser's storage; the website never connects to PAK'nSAVE. Our server only accepts requests from signed-in users, and each user can only reach their own data.
Your rights
You can ask to see or correct the information we hold about you by emailing hello@rosemaryeats.co.nz. Most of it you can view, change or delete in the app yourself.
If you're not happy with how we've handled a privacy matter, please tell us first. You can also complain to the Office of the Privacy Commissioner at privacy.org.nz.
Children
RosemaryEats is for adults planning household meals. It isn't intended for anyone under 16.
Changes
We'll update this page if anything changes, and tell you in the app about anything significant.