Privacy Policy
Effective September 15, 2026
This policy explains how Rooted ("we," "us," or "our") handles information when you use the Rooted app and our websites at withrooted.app and app.withrooted.app. For privacy questions or requests, contact ronkommoji@gmail.com.
In brief: Rooted uses your information to provide your account, Bible reading, check-ins, and group features. Content you share with a group is visible to that group. We do not sell your personal information or use it for targeted advertising. You can request deletion or delete your account in the app.
1. Information we collect
- Account and profile information. When you sign in with Google or Apple, we receive your provider identifier, email address (which may be an Apple relay address), and any name or profile picture the provider supplies and you authorize. We also store the name and profile photo you choose in Rooted. We do not receive your Google or Apple password.
- Content you provide. This includes check-in photos and selfies, reflections, prayer requests and updates, Bible highlights, notes, comments, replies, and reactions. We also store group names, memberships, invitation records, and the groups associated with shared content.
- Progress and preferences. We store check-in dates, reading and devotional progress, weekly goals, tree progress, reminders, notification preferences, and settings such as timezone and appearance. Drafts and some cached content are stored on your device.
- Device and technical information. Our infrastructure providers process information such as IP addresses, request timestamps, browser or device information, authentication events, and error or security logs. If you enable notifications, we store a push-notification token, an app installation identifier, platform information, and registration activity.
- Support communications. If you contact us, we receive your email address and the information you include in your message.
Reflections and prayer requests can reveal religious beliefs, health information, or other sensitive details. Share only what you want the relevant group members to see, and avoid posting someone else's private information without their permission.
2. How we use information
We use information to sign you in, maintain your profile, deliver Bible readings and devotionals, save your content and progress, operate invitations and groups, calculate weekly tree growth, send requested reminders and activity notifications, answer support requests, and diagnose errors. We also use necessary information to prevent abuse, protect accounts, and meet legal obligations.
Google account information is used to establish and maintain your Rooted account. Rooted's Google sign-in does not request access to your Gmail messages, Google Drive files, or contacts.
3. Sharing and service providers
- Your groups. Group members can see profile information, participation, and content shared with their group. Other members may save or screenshot material they can view; account deletion cannot remove copies they keep independently.
- Infrastructure. We use Supabase for account authentication, databases, file storage, and backend services; Vercel for website hosting; and Expo and device-platform notification services for push delivery. These providers process information needed to provide their services.
- Sign-in and content providers. Google or Apple processes your sign-in under its own privacy policy. Bible and devotional services, including YouVersion, receive requests needed to retrieve content, such as a passage reference or date. Requests for externally hosted images or websites may also disclose technical information such as your IP address to their hosts.
- Legal and safety needs. We may disclose information when reasonably necessary to comply with law or valid legal process, address fraud or abuse, or protect people's rights and safety.
We do not sell personal information or share it with advertisers for targeted advertising. Links to other websites are governed by those websites' privacy policies.
4. Device permissions and local storage
Rooted requests camera or photo-library access when you choose features that need it, such as taking a check-in photo or selecting a profile image. You can decline or revoke permissions in your device settings; the corresponding feature may then be unavailable.
We use device storage and browser storage to keep you signed in, preserve settings and drafts, and cache content. Clearing that storage may sign you out or remove unsaved drafts. You can turn off notifications in Rooted or your device settings. Notification previews may be visible on your lock screen depending on your settings.
5. Retention and deletion
We retain account information and saved content while needed to provide Rooted, and retain limited information as needed for security, resolving disputes, or legal obligations. Retention varies by the type of information and purpose; we do not promise that every backup or service log is erased immediately.
You can use Delete account in Rooted's account settings. The deletion process removes your profile, posts, prayers, annotations, replies, and uploaded photos from our active account systems. Other members' own activity remains. Limited copies may remain in backups or security logs until those records expire or are deleted under the relevant provider's retention practices.
You can also request account or information deletion by emailing ronkommoji@gmail.com. We may need to verify that the account belongs to you before acting on a request.
6. Your choices and privacy rights
You can edit available profile settings, choose what to share, leave groups, adjust notifications, and revoke Rooted's connection in your Google or Apple account settings. Revoking sign-in access does not by itself delete content already stored in Rooted.
Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information, or to object to or restrict certain processing. Contact us to make a request or raise a concern. Where applicable, you may also complain to your local data-protection authority.
7. Security and international processing
We use access controls and encrypted network connections to help protect information. No online service or storage system can guarantee complete security. Rooted and its providers may process or store information in the United States and other countries where they operate, whose privacy laws may differ from those where you live.
8. Children and teenagers
Rooted is intended for people aged 13 and older and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, contact us so we can investigate and arrange deletion. Teenagers should use care when sharing photos, reflections, or other personal details with groups.
9. Policy changes
We may update this policy as Rooted changes. We will post the updated policy here and revise the effective date. For material changes, we will provide additional notice where required by applicable law.
10. Contact
Rooted
ronkommoji@gmail.com