Privacy Policy

1. Overview

Rootrees (the "Service", "we", "us") takes your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect the personal information you provide when using our Service.

By using the Service you agree to the terms of this Policy. If you do not agree, please stop using the Service.

2. Data We Collect

We may collect the following types of data:

• Account data: Email address (used for OTP login verification)
• Social login data: When signing in via Google or Facebook, we receive your public profile information (name, email)
• Family tree data: Names, birthdays, gender, lunar calendar data, birth hours, photos, relationships, and other genealogy information entered by you or family members
• Usage data: App usage behavior, device information (model, OS version), and error logs (used to improve the Service)
• Payment data: Processed via App Store or Google Play — we do not directly collect credit card numbers

3. How We Use Your Data

We use your data to:

• Provide, maintain, and improve the Service
• Verify your identity and protect account security
• Process subscription payments and orders
• Send service-related notifications (e.g., family invitations, system announcements)
• Analyze usage to optimize the user experience
• Comply with legal obligations

4. Data Sharing & Third Parties

We do not sell your personal data. We may share data with third parties in the following circumstances:

• Cloud storage: Photos are stored in Cloudflare R2 (located in the US), subject to Cloudflare's privacy policy
• Real-time messaging: Pusher is used for real-time sync; data is transmitted over encrypted channels
• Social login: Google and Facebook OAuth services are used for authentication
• Legal requirements: We may disclose data as required by law or government authorities

We do not use personally identifiable information for ad targeting.

5. Data Retention

• Account data: retained until you delete your account
• Family tree data: belongs to the family space and is retained until the family admin deletes it
• Activity logs: retained for the most recent 90 days
• AI-restored photos: retained permanently, regardless of subscription status
• After account deletion: personally identifiable data (email) will be deleted within 30 days; uploaded photos and family member records remain in the family space under the family admin's control

6. Privacy of Living Members

To protect the privacy of living members:

• Advanced fields (medical history, property records) of living members are excluded from public read-only share pages
• Data of members under 18 is fully hidden on read-only share pages
• System-protected fields (phone number, email) are never displayed externally

7. Your Rights

Under applicable law, you have the right to:

• Access and review your personal data
• Obtain a copy of your personal data
• Correct or update your personal data
• Request that we stop collecting, processing, or using your personal data
• Request deletion of your personal data

To exercise these rights, please contact us at support@rootrees.app

8. Security Measures

We take the following measures to protect your data:

• All data transmission is encrypted via HTTPS
• Passwords are not stored in plain text (OTP-based login — no password required)
• API access requires Bearer Token authentication
• When a subscription is paused, the API rejects writes to advanced fields

9. Policy Updates

This Policy may be updated from time to time. For significant changes, we will notify you in-app or by email. Continued use of the Service constitutes acceptance of the revised Policy.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us: