Privacy Policy
Rootli ("Rootli", "we", "us") is a personal memory app for iOS. You save things in your own words and later find them by asking questions. This policy explains what we collect, why, who processes it for us, and the choices you have. Rootli is operated by Rehan Saleem, Pakistan. You can reach us at rehan.rootli@gmail.com.
1. What we collect
| Data | What it is |
|---|---|
| Entries you create | The text of your entries and life events, their dates, amounts and currencies, places, people and any other details you write. This is the core content of the app. |
| Account details | If you sign in with Apple or Google: your sign-in identifier and the email address (or Apple private relay address) they share with us. If you use Rootli as a guest, we create an anonymous account with a random identifier and no email. |
| Profile details | Details you choose to add, such as a date of birth, used for features like age-based questions. |
| Your questions | The searches you type and the answers generated for you. |
| Usage counts | How many entries and searches you have used, so we can apply free and premium limits and prevent abuse. |
| Purchase status | Whether you have an active subscription, which plan, and its renewal and expiry dates. We never see your payment card or Apple ID details. |
| Technical data | IP address, device and app version, and error logs, collected by our hosting providers to keep the service secure and working. |
We do not collect your contacts, photos, precise location, health data from your device, or advertising identifiers.
2. How we use it
- To store your entries and show them back to you.
- To turn your entries into a searchable form and to answer your questions about them.
- To provide sign-in, guest mode, subscriptions and restore purchases.
- To enforce usage limits, keep the service secure and prevent abuse, including bot checks.
- To fix bugs and keep Rootli reliable.
We do not use your entries to train our own or anyone else's AI models.
3. Who processes your data
We use the following service providers. Each receives only what it needs to do its job.
| Provider | Purpose | What it receives |
|---|---|---|
| Supabase | Sign-in and our database | Account details and your stored entries (sensitive fields encrypted) |
| Railway | Hosts our server | Requests to our server, including entry text while it is processed, and technical logs |
| Anthropic | AI that reads entries, understands questions and writes answers | The text of an entry when you save it, and your question plus the relevant entries when you search |
| Voyage AI (MongoDB) | Turns text into numeric embeddings so search works by meaning | Entry text and search text. We have opted out of Voyage using this data to improve its models. |
| RevenueCat | Manages subscriptions | Your anonymous Rootli user ID and purchase status |
| Apple | Payments, Sign in with Apple, TestFlight | Handled under Apple's own terms and privacy policy |
| Sign in with Google, if you choose it | Handled under Google's own terms and privacy policy | |
| hCaptcha | Bot protection when a guest account is created | Technical signals such as IP address and device characteristics |
These providers may process data in countries other than yours, including the United States. We may also disclose information if required by law.
4. How your entries are protected
Traffic between the app and our servers uses HTTPS. Sensitive entry fields are encrypted with AES-256-GCM before they are stored in the database. Our server decrypts them in order to process your requests, which means the entries are protected at rest but are not end-to-end encrypted. No system is perfectly secure, and we cannot guarantee absolute security.
5. Guest accounts
You can use Rootli as a guest without giving an email address. A guest account is tied to your device and a random identifier. If you later link an Apple or Google account, your guest entries are kept. If you link an account that already exists, your guest entries are merged into that account. If you delete the app as a guest without linking an account, we may not be able to restore your entries.
6. How long we keep it
We keep your entries and account for as long as your account exists. When you delete your account, we delete your entries, profile and sign-in record. Copies in database backups are overwritten on our providers' normal backup cycle. We may keep limited records where the law requires it. Inactive guest accounts may be deleted after a period of inactivity.
7. Your choices and rights
- Export: download your entries from within the app at any time.
- Delete: delete your account and data from within the app, or email us and we will do it.
- Access and correction: edit or remove any entry in the app, or ask us for a copy of your data.
- Subscriptions: manage or cancel in your Apple ID settings (see our Terms).
Depending on where you live, you may have additional rights, such as objecting to or restricting processing, or complaining to a data protection authority. Email rehan.rootli@gmail.com and we will respond within a reasonable time, normally within 30 days.
8. Children
Rootli is not directed to children under 13, and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.
9. International transfers
We operate from Pakistan and our providers operate in several countries. By using Rootli you understand that your data may be transferred to and processed in countries whose data protection laws differ from yours. We choose providers that apply appropriate safeguards.
10. Changes to this policy
If we make material changes, we will update the date above and, where appropriate, tell you in the app. Continued use after a change means you accept the updated policy.
11. Contact
Rehan Saleem, Pakistan
rehan.rootli@gmail.com