Privacy Policy

Last updated: July 7, 2026

This Privacy Policy explains how Romy (“Romy,” “we,” “us,” or “our”), operated by Florence Labs, Inc., collects, uses, stores, shares, and protects information when you use the Romy app, our website, and related services (together, the “App” or “Services”).

1. Overview

Romy is owned and operated by Florence Labs, Inc., based in Vancouver, British Columbia, Canada. This Privacy Policy applies to information we process about you when you use the App or our Services. By creating an account, using the App, completing our onboarding, or using our Services, you agree to this Privacy Policy, which is incorporated into our Terms of Service.

Who is responsible. Florence Labs, Inc. is the party (and, under Canadian law, the organization) responsible for the personal information processed under this Privacy Policy.

2. About Romy

Romy is a personal tracking, reminder, and organization app. It helps you add entries, set reminders, follow your routines, and see your own history and progress. Romy is a general informational and organizational tool only. It does not provide professional advice of any kind, and any information, estimate, reminder, or output it generates is for your general information and personal record-keeping. You are responsible for how you use the App and for the decisions you make.

3. Key Terms

Personal information means information that identifies, relates to, describes, or could reasonably be linked to a person or household.

De-identified data means data processed to remove or obscure personal identifiers so it is not reasonably linked to a specific person. Aggregated data means data combined from multiple users into summary statistics or trends.

4. Where This Policy Applies

5. Information We Collect

Account information

We may collect:

• Email address
• Name, if provided
• Sign-in method, such as email or a third-party provider like Apple or Google
• Account ID and basic account settings

We use this information to create and manage your account, sign you in, sync your data, provide support, and secure the App. Accounts and sign-in are provided through Supabase.

Onboarding answers

When you complete our onboarding, we collect the answers you provide, such as your goals and preferences, and — at the end — your email address if you ask us to save your spot. We use these answers to personalize your experience and, where you agree, to contact you about the App.

Your entries and content

Romy is built around the entries and content you choose to add, such as logs, reminders, notes, schedules, items, and other content you track. This content powers the App's tracking, reminder, history, and personalization features. You decide what to add, and you can edit or delete it at any time.

Photos and uploaded images

If a feature lets you save a photo, it is stored with your account. Only add images you are comfortable storing, and avoid including unnecessary personal or identifying information.

Activity data (Apple Health)

With your permission, Romy can read activity information such as steps and workouts from Apple Health. This activity information is read on your device and is not stored on our servers. We do not sell it or use it for advertising, and we handle it only in line with Apple's applicable rules. You can turn this off at any time in your device settings.

Subscription information

Subscriptions are processed by Stripe (web) and by the Apple App Store, with access managed through RevenueCat. We may receive subscription status, product identifier, renewal status, and purchase metadata. We do not receive your full payment card information — card details are handled by Stripe or Apple.

Analytics and advertising data

We use analytics and advertising tools to understand how the App and website perform and how people discover Romy:

• PostHog — product analytics (which screens are viewed, where people drop off). We keep the entries and content you add out of PostHog event properties.
• Meta (Facebook) Pixel and Conversions API — on our website and onboarding, to measure and improve our advertising. This sends event data (such as page views and onboarding milestones) and limited hashed identifiers (such as a hashed email, hashed name, IP address, coarse location, and device/browser identifiers) to Meta. We do not send the entries or content you add inside the App to Meta or other advertising providers.

Device and technical information

We may collect device type, operating system, app version, crash reports, performance logs, basic error information, and network/request metadata (such as IP address) where processed by our service providers for routing, security, and abuse prevention.

Support communications

If you contact us for support, we collect the information you choose to include and use it only to respond to your request, troubleshoot, maintain support records, prevent misuse, and comply with legal obligations.

6. How We Use Information

We use information to:

• Provide, operate, and maintain the App
• Create and sign in to accounts and sync data across devices
• Provide tracking, reminder, and history features
• Send the reminders and notifications you enable
• Personalize your experience
• Manage subscriptions and access
• Respond to support requests
• Improve functionality, debug issues, and fix crashes
• Understand general usage patterns and measure our advertising
• Prevent fraud, abuse, and unauthorized access
• Enforce our Terms of Service and comply with legal obligations

7. How We Share Information

We share information only as described in this Privacy Policy.

Service providers

We share information with vendors that help us operate Romy. They may process information only to provide services to us, subject to contractual obligations and applicable law.

Advertising and measurement

As described in Section 15, our website and onboarding use the Meta Pixel and Conversions API to measure and improve advertising. Under some U.S. state privacy laws, this activity may be considered “sharing” (or a “sale”) of non-sensitive personal information for cross-context behavioral advertising. You can opt out — see Cookies and Tracking Technologies and California Residents. The entries and content you add inside the App are excluded from this advertising activity.

Legal and safety disclosures

We may disclose information if required by law, subpoena, court order, legal process, or a regulator or government request, or if we believe it is necessary to protect the rights, safety, property, or security of Romy, our users, our company, or others.

With your consent

We may share information with third parties when you give us explicit consent or direct us to do so.

Business transfers

If Florence Labs, Inc., Romy, or substantially all of our assets are involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, assignment, change of control, or similar transaction, your information may be transferred to the acquiring or successor entity as part of that transaction, subject to applicable law, this Privacy Policy, required notices, and any rights available to you.

8. What We Do Not Do

Romy does not:

• Sell your personal information for money
• Send the entries or content you add inside the App to advertising or analytics providers
• Use your saved photos or activity data for advertising
• Use your account data to train Romy-owned models

We do use advertising and measurement tools (such as the Meta Pixel) on our website and onboarding, as described in Sections 7 and 15. If any of the practices above change, we will update this Privacy Policy and provide notice, consent, or opt-out mechanisms where required by law.

9. Where and How We Store Data

Romy is operated from Canada, and our service providers process data in Canada and the United States. We use reasonable administrative, technical, and organizational safeguards, including encryption in transit and at rest where supported by our providers. No system can guarantee absolute security. If a breach requires notification under applicable law, we will notify affected users and regulators as required.

10. Data Retention and Deletion

We retain information only as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law. Your account data and entries are kept while your account is active, unless you delete them. Subscription and support records are kept as needed for billing, support, fraud prevention, and legal compliance. Anonymous, aggregated, or de-identified data may be retained indefinitely.

On an account-deletion request, active system data is deleted or deactivated within a reasonable period, generally within 30 days. Backup copies may persist for a limited period before being overwritten, and some information may be retained for legal, security, fraud-prevention, dispute-resolution, tax, or accounting purposes. To request deletion, email help@romyapp.com.

11. Your Privacy Rights

Depending on where you live, you may have rights to:

• Access your information
• Correct inaccurate information
• Delete your information
• Export or port your information
• Withdraw consent
• Opt out of sale, sharing, targeted advertising, or profiling where applicable
• Appeal a denied privacy request

You can manage many choices in the App, including editing or deleting your entries and managing notifications. To make a privacy request, contact help@romyapp.com. If we deny your request, you may appeal by replying to our response, and you may also contact your local privacy regulator.

12. Canada (PIPEDA and BC PIPA)

Florence Labs, Inc. is based in Vancouver, British Columbia, Canada. If you are in Canada, we handle your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, British Columbia's Personal Information Protection Act (PIPA). We collect, use, and disclose personal information for the purposes in this Privacy Policy and, where required, with your consent. You may withdraw consent (subject to legal or contractual limits), request access to the personal information we hold, and request correction. Your information may be stored or processed outside Canada, including in the United States by our service providers, where it may be accessible to courts, law enforcement, and regulators under local law. To exercise these rights, contact help@romyapp.com. You may also contact the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia.

13. California Residents

If you are a California resident, you may have rights under the California Consumer Privacy Act, as amended (CCPA/CPRA), including the rights to know, access, delete, correct, and opt out of sale or sharing, and the right not to be discriminated against for exercising them.

In the preceding 12 months, we may have collected the following categories of personal information:

We do not sell your personal information for money. Because our website and onboarding use advertising tools (such as the Meta Pixel), some of your activity on those web surfaces may be considered a “sale” or “sharing” for cross-context behavioral advertising under California law. You may opt out by enabling a Global Privacy Control signal in your browser (which we honor on our website where required), adjusting your browser cookie settings and Meta ad preferences, or emailing help@romyapp.com. We may verify your identity before responding, you may use an authorized agent, and we will not discriminate against you for exercising your rights.

14. Other U.S. State and International Privacy Rights

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and other states may have additional rights depending on applicable law, including rights to access, correct, delete, and port personal information and to opt out of sale, targeted advertising, or certain profiling. If you are in the European Economic Area, the United Kingdom, or another region that requires a legal basis for processing, we rely on contract (to provide the App and requested services), consent (for optional features and communications), legitimate interests (to secure and improve the App), and legal obligations. Where required, we use appropriate safeguards for international transfers, such as contractual protections with our service providers. To exercise any of these rights, contact help@romyapp.com.

15. Cookies and Tracking Technologies

The mobile App does not use traditional website cookies. Our website and onboarding use essential cookies, basic analytics, and advertising technologies — including the Meta Pixel — to operate the site, understand traffic, and measure and improve our advertising. You can control cookies through your browser settings and manage ad-personalization choices through Meta's ad settings. Where required by law, we honor recognized opt-out preference signals such as Global Privacy Control for applicable web activity. For more, see our Cookie Policy.

16. Age Requirement

Romy is intended only for users who are 18 years or older. We do not knowingly collect personal information from anyone under 18. If we learn that we collected information from someone under 18, we will delete it as required by law.

17. Third-Party Links

Romy may contain links to third-party websites, products, services, or content. This Privacy Policy does not apply to third-party services, and we are not responsible for their privacy practices, content, or policies.

18. Do Not Track and Global Privacy Signals

Some browsers offer “Do Not Track” signals. There is no uniform standard for responding to them, and we do not currently respond to Do Not Track. Where required by law, we will honor legally recognized opt-out preference signals, such as Global Privacy Control, for applicable web activity.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The current version will be posted at https://www.romyapp.com/privacy-policy. If we make material changes, we will provide notice where required by law. Continued use of Romy after the effective date of an update means you accept it, except where additional consent is required by law.

20. Contact Us

Florence Labs, Inc.
Operator of Romy — Vancouver, British Columbia, Canada

Email: help@romyapp.com
Privacy Policy: https://www.romyapp.com/privacy-policy
Terms of Service: https://www.romyapp.com/terms-of-service