Privacy Policy

Last updated 6/3/2025

Roots (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your information when you use our mobile app, website, and services (collectively, the “Platform”). By using Roots, you agree to the terms of this policy.

1. Who We Are

Roots is a private, family-centered platform that helps users preserve, organize, and share meaningful memories. We do not sell user data. We do not serve ads. Our core values are privacy, security, and family connection.

For questions or concerns, contact us at: stevenlohanroots@gmail.com

2. Who Can Use Roots

Roots is intended for users 13 years of age and older. We do not knowingly collect personal data from children under 13. If we become aware that we have collected data from a child under 13, we will promptly delete it.

If you believe a child under 13 has created an account, please contact us at stevenlohanroots@gmail.com.

3. Information We Collect

We collect two categories of data:

A. Information You Provide Voluntarily

  • Account Info: Name, email, date of birth (optional), profile details
  • Media & Posts: Photos, videos, documents, captions, and other content you upload
  • Family Tree Data: Optional data about relatives, relationships, milestones, and shared memories
  • Preferences: Answers to quizzes, profile customization, and interaction history
  • Support Requests: Messages or emails sent to our team

B. Information We Collect Automatically

  • Device Info: Device type, operating system, browser type, language settings
  • Usage Data: Log data (IP address, access times, features used), crash reports, in-app activity
  • Analytics: We may use privacy-focused tools (e.g., Plausible or Firebase with anonymization) to monitor general usage trends

Note: We do not use third-party ad networks or tracking cookies.

4. How We Use Your Information

We use your information only for legitimate purposes, including:

  • Creating and managing your account
  • Delivering core features (memory sharing, storage, family trees)
  • Personalizing prompts and recommendations
  • Responding to support requests
  • Improving the platform through anonymous analytics
  • Enforcing community guidelines and investigating abuse

5. Who We Share Data With

We do not sell your data. We only share data with trusted providers who help us operate the Platform, and only as necessary. These include:

Hosting Providers Purpose: To store your content securely Examples: Firebase, Google Cloud

Analytics Tools Purpose: To understand aggregate usage trends Examples: Firebase Analytics (with IP anonymization)

Support Tools Purpose: To handle bug reports and feedback Examples: Email, internal tools

All vendors must comply with strict data protection and security standards.

6. Data Storage and Security

We use industry-standard encryption and access controls to protect your data:

  • In transit: Encrypted via HTTPS
  • At rest: Stored on secure cloud infrastructure with encryption
  • Access: Limited to authorized team members on a need-to-know basis

We regularly monitor our systems for vulnerabilities and update our security practices as needed.

7. Your Rights and Choices

You have the right to:

  • Access: Request a copy of your data
  • Correct: Update or correct personal information
  • Delete: Request that your account and data be permanently deleted
  • Withdraw Consent: Stop using the platform and delete your account at any time

To exercise any of these rights, email us at stevenlohanroots@gmail.com with the subject line “Privacy Request.”

8. Data Retention

We retain your data:

  • As long as your account is active
  • For a limited time after deletion (for recovery or legal compliance)
  • As required to comply with laws or resolve disputes

We delete inactive accounts and old content after a reasonable period unless otherwise required by law.

Our platform may include links to third-party websites or content (e.g., YouTube, external references). We are not responsible for the privacy practices of those third parties.

10. International Users

We are based in the United States. If you access Roots from outside the U.S., you agree to the transfer and processing of your information in the U.S. and under U.S. laws, which may differ from your local laws.

11. California Residents (CCPA)

Roots does not sell personal data and does not use personal data for targeted advertising. If you are a California resident, you have the right to:

  • Know what personal data we collect
  • Request deletion of your personal data
  • Opt out of data sales (not applicable)

To exercise your CCPA rights, contact stevenlohanroots@gmail.com.

12. Updates to This Policy

We may revise this Privacy Policy from time to time. If we make material changes, we will notify you via email or in-app before the changes take effect. Continued use after updates means you accept the revised policy.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, contact us:

stevenlohanroots@gmail.com Subject line: “Privacy Inquiry”