The short version. The Daily Rose is private by default. It has no accounts
and no logins. Everything personal you put into a gift — photos, messages, names and special
dates — is encrypted on your device before it is sent, using end-to-end encryption. We can't
read it, and neither can Apple. There is no analytics, no advertising, and no tracking of any
kind, and we never sell your data.
Who we are
The Daily Rose is a personal app created by John McVicker. If you have any questions about this
policy or your data, contact john@mcvicker.au.
What the app handles
When you create a gift, the app works with:
- Photos you choose from your photo library.
- Messages you write or select to accompany each day.
- Names you enter, for example the recipient's name.
- Special dates you optionally add, such as a birthday or anniversary.
- A gift code — a short, randomly generated code that acts as the key to a gift.
The app does not collect your email address, phone number, contacts, or location.
How your data is stored and protected
- On your device: the photos you choose and your settings are stored locally
on your iPhone.
- When you send a gift: your photos and their accompanying information are
encrypted on your device using strong end-to-end encryption (AES-256, via Apple's CryptoKit)
and then uploaded to Apple's iCloud (CloudKit) so the recipient can download them.
- Only encrypted data leaves your device. The gift code is the only key that
can decrypt a gift, and it is never sent to or stored on any server — you share it directly with
the recipient. This means no one who operates the servers, including Apple and the developer,
can read the contents of a gift.
- Apart from the encrypted content, a gift holds only minimal non-identifying technical data,
such as when it was created and how many photos it contains.
Apple iCloud (CloudKit)
The app uses Apple's iCloud service (CloudKit) to deliver an encrypted gift from the sender to
the recipient. Apple stores only the encrypted data. Your use of iCloud is also subject to
Apple's Privacy Policy.
What we do not do
- No user accounts or logins.
- No analytics, telemetry, or usage tracking.
- No advertising and no ad networks.
- No third-party SDKs that collect data.
- No selling, renting, or sharing of your personal data.
Permissions the app asks for
- Photos: so you can choose pictures to include in a gift. The app only
accesses the photos you pick.
- Notifications (optional): so the app can show a gentle daily reminder.
These are local notifications created on your iPhone; no notification data is sent to a server.
Keeping and deleting data
- Data on your device is removed if you delete the app, or if you tap "Start a new gift",
which clears the photos and settings on that device.
- A gift you have sent is stored (encrypted) in iCloud so the recipient can still receive it.
Because it contains no account and is encrypted, it cannot be read without its code. If you would
like a gift you created to be deleted from iCloud, contact
john@mcvicker.au and it will be removed.
Subscriptions and payments
- Creating and sending gifts requires an auto-renewable subscription, purchased through
Apple's App Store. Receiving and opening a gift is always free.
- All payment is handled by Apple. The app never sees, collects, or stores your payment
details, billing address, or Apple Account information.
- Apple provides the developer with anonymised transaction records (for example, that a
subscription is active) but no payment details and nothing about the contents of your gifts.
- You can manage or cancel a subscription any time in your Apple Account settings. Purchases
are subject to Apple's Media
Services Terms.
Support
Questions, problems, or feedback about The Daily Rose? Email
john@mcvicker.au and you will get a reply from a real
person, usually within a couple of days.
Children
The Daily Rose is not directed at children and is not intended for use by children under the age
of 13, or the equivalent minimum age in your country.
International users
Gifts are stored using Apple's iCloud infrastructure, which may process and store data in data
centres located outside your country. Data is encrypted in transit and at rest.
Changes to this policy
If this policy changes, the "Last updated" date above will change. Material changes will be
reflected here before they take effect.