Privacy Policy
Effective 8/23/2026 · Last updated 8/23/2026
RosenOS is a workplace application used by food manufacturing businesses to record production and regulatory compliance activity. This policy explains what information the application handles, why, who it is shared with, how long it is kept, and how it can be deleted.
Who controls the information in RosenOS. RosenOS is provided to businesses, not to the general public. If you use RosenOS at work, your employer decides what is recorded, who may see it, and how long it is kept. Your employer is the controller of that information and RosenOS LLC acts as its service provider, processing information only to operate the service on your employer's behalf and under its instructions. Questions about your own records are usually answered fastest by your employer.
Who we are
This application is published by RosenOS LLC (“RosenOS”, “we”, “us”), located at 3005 E. Cervantes St., Pensacola, FL 32503. You can reach us about privacy at privacy@getrosenos.com.
How accounts are created
RosenOS accounts are created and issued by the employer, not by individuals signing themselves up. There is no public registration and no consumer account. An administrator at your workplace creates your account, assigns your role, and can deactivate it. Some workers do not have a login at all and instead identify themselves at a shared workplace station using a numeric code issued by their employer.
Information the application handles
The list below is complete for the mobile application. Where a category does not appear, the application does not collect it.
| Category | What it includes and why |
|---|---|
| Identity and account | Name, work email address, username, assigned role, and an employer-issued badge or worker number. Used to sign you in, to apply your permissions, and to attribute the records you create, which regulation requires. |
| Employment details | Where your employer chooses to record them: pay rate, scheduled shift, payroll reference, and station access code. Used to calculate labor cost and to schedule and identify workers. Pay rate is visible only to administrators. |
| Work activity | Clock-in and clock-out times, the jobs and batches you were assigned to, and hours attributed to them. Used for time records, production costing, and efficiency reporting. |
| Records you create | Temperatures, weights, counts, checklist entries, notes, corrective actions, and your electronic signature or confirmation on a record, each with the date and time it was entered. These are your employer's regulatory records. |
| Activity and audit history | A tamper-evident log of actions taken in the system: which account performed which action, on what, and when. Required so that regulatory records can be shown to be authentic. This log does not record your location, your IP address, or your device identifiers. |
| Notification permission | If you allow notifications, the application can alert you when a reading or check is due. On Android these alerts are generated on your own device. |
| Locally stored data | The application stores your recent work data on your device so it keeps working without a connection, then syncs it when connectivity returns. Removing the application removes this local copy. |
What the application does not do. It does not access your location, camera, microphone, photos, contacts, calendar, call logs, or files. It contains no advertising software, no analytics or tracking software, and no third-party crash reporting. It does not use an advertising identifier, does not build a profile of you, and does not track you across other apps or websites. We do not sell personal information and we do not share it for advertising purposes.
Why we handle this information
- To provide the service your employer has engaged us to provide.
- To keep records that regulation requires, including attribution and timing of food safety records.
- To secure the service, including detecting misuse and maintaining the integrity of records.
- To support your employer when they ask us for help with a problem.
- To meet our legal obligations and to establish or defend legal claims.
We do not use your personal information to train machine learning models, and we do not use it for advertising or marketing to you.
Who information is shared with
We share information only in these circumstances:
- With your employer. Everything recorded in your workplace's account is available to the people your employer authorizes, according to the role each has been given.
- With regulators and auditors your employer grants access to. Employers may issue read-only access to an inspector or auditor, who can view the compliance record but cannot change it.
- With service providers who operate the platform for us. These are listed in the next section. They may process information only to deliver their service to us and may not use it for their own purposes.
- When the law requires it, or to protect rights, safety, or the integrity of the service.
- In a business transfer, such as a merger or acquisition, in which case the receiving party remains bound by this policy.
Service providers
| Provider | Role |
|---|---|
| Microsoft Azure | Hosts the application and its database in the United States. |
| Anthropic | Only if your employer enables the optional AI summary feature, and only when an administrator requests a summary. What is sent is aggregated totals and trends, such as planned volumes, costs, and percentages. Individual names, individual time punches, and personal identifiers are not included. Your employer can leave this feature switched off. |
| Web push services | For the browser version only, alerts are delivered through the push service built into your browser. The message content is encrypted and the mobile application does not use these services. |
| Optional equipment integrations | Where your employer connects monitoring equipment or their own business system, those connections carry operational data such as temperatures and purchasing records, not personal information about workers. |
Where information is stored
Information is stored and processed in the United States. If you access the service from outside the United States, you understand that your information will be transferred to and processed there.
How information is protected
- Traffic between the application and our servers is encrypted in transit.
- Each customer's data is separated from every other customer's data at the database level, not merely hidden in the interface.
- Passwords are stored using one-way hashing and are never readable by us.
- Credentials for connected systems are encrypted before storage.
- Access is limited by role, and administrative actions are recorded in the audit log.
No system can be guaranteed perfectly secure, but these are the measures we maintain, and we will notify affected customers of a breach as required by law.
How long information is kept
Food safety records must be retained for periods set by regulation, and those records identify the people who created and verified them. That is a legal obligation of your employer, so records of regulated activity are retained for at least the period the applicable regulations require, even after a worker leaves. Your employer sets retention beyond that minimum.
Account information that is not part of a regulated record is kept while the account is active and for a reasonable period afterward, then deleted or anonymized. When a customer ends their subscription, their data is deleted or returned according to their agreement with us.
Deleting your account and data
You can request deletion of your account and the personal information associated with it. Because RosenOS accounts are issued by employers, the fastest route is usually to ask your workplace administrator, who can deactivate and remove an account directly.
You may also request it from us at any time: getrosenos.com/delete-account, or by writing to privacy@getrosenos.com.
We will confirm your request, verify it with the customer whose workplace holds the records, and complete it within 30 days. We will delete your login credentials, contact details, and profile information. Where a regulation requires a record to be retained, such as a signed food safety record, that record and the attribution it legally requires are kept for the remainder of the required retention period and then deleted. We will tell you if this applies to your request.
Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to object to or restrict certain processing. Because your employer controls the information, we will usually direct your request to them and assist them in fulfilling it. Contact privacy@getrosenos.com and we will respond within the time the applicable law allows. We will not discriminate against you for exercising these rights.
You can turn notifications off at any time in your device settings without losing any other functionality.
Children
RosenOS is a workplace tool intended for adults employed by our customers. It is not directed to children, and we do not knowingly collect information from anyone under 16. If you believe a child's information has been provided to us, contact us and we will delete it.
Changes to this policy
If we change this policy we will update the date at the top of this page, and for material changes we will notify customer administrators. Continuing to use the application after a change means you accept the updated policy.
Contact
RosenOS LLC
3005 E. Cervantes St., Pensacola, FL 32503
privacy@getrosenos.com