Last Updated: July 2026
Roots ("the App") is a social networking platform for communities worldwide. We are committed to protecting your privacy and being transparent about how we collect, use, and protect your information. This policy explains what data we collect, how we use it, your rights, and how to contact us.
1. Information We Collect
1.1 Account Information
- Name, email address, phone number (if you use phone sign-in), username
- Profile information (bio, location, interests, profile photo)
- Demographic and professional information (optional)
- Community involvement, education, and volunteer work
1.2 Content You Create
- Posts, comments, messages, and media you share
- Event RSVPs, job applications, housing inquiries, saved items
1.3 Location Information (With Your Consent)
- Precise location (GPS) is collected only with your explicit permission for features like Qibla direction and local community discovery
- If you decline, you can still use the app with limited features
- City/state information may be used for profile and content
1.4 Device and Usage Information
- Device type, OS, app version
- IP address and network info
- Error logs and performance data
1.5 Camera and Photos (With Your Consent)
- Camera access for profile photos and content
- Photo library access for uploading images
- Only media you choose to share is uploaded
1.6 Phone number & SMS (authentication)
If you verify or sign in with a phone number, we use it to send one-time SMS verification codes for sign-in or sign-up through carriers and providers such as Twilio. We do not use phone sign-in to send marketing SMS. See: SMS & text messaging.
2. How We Use Your Information
- To provide and improve app features (social networking, messaging, community discovery, Qibla, jobs, housing, events)
- To personalize your experience and show relevant content
- To facilitate community connections and participation
- To maintain safety, security, and enforce community guidelines
- To respond to your requests and provide support
3. Information Sharing
- We do NOT sell your personal information
- We do NOT share your data with advertisers or use it for cross-app advertising
- Your profile and posts may be visible to other Roots users based on your privacy settings
- We use service providers to operate and improve the app: Supabase (backend), Cloudflare R2 (file storage), and PostHog (product analytics). PostHog receives usage and interaction data associated with your account — such as which features are used — to help us understand how the app is used and improve it. It does not receive your messages, contacts, or location.
- We may share information if required by law or to protect rights and safety
- We may share information with your explicit consent
4. Your Privacy Controls
- Control who can see your profile and posts
- Manage community and location visibility settings
- Control who can message you
- Manage notification and communication preferences
- Enable or disable location services at any time
5. Data Security
- Data is encrypted in transit and at rest
- Secure authentication and access controls
- Regular security updates and audits
- Data is stored in the United States; by using Roots, you consent to this storage and processing
6. Data Retention
- We retain your data while your account is active
- If you delete your account, your data is deleted within 30 days (unless required by law)
- Data in backups is deleted according to our retention schedule
7. Your Rights
You have the right to:
- Access your personal information
- Correct inaccurate information
- Delete your account and data
- Request export of your data
- Withdraw consent for optional features (e.g., location)
To exercise these rights, email privacy@joinroots.app
8. Children's Privacy
Roots is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately.
9. International Users
Roots is available worldwide. Your information may be transferred to and processed in the United States. By using Roots, you consent to this transfer and processing.
10. Finding People You Know (Contact Discovery)
Roots lets you find which of the people already in your phone's contacts also use Roots, so you can message or call them. This feature is optional and only runs when you turn it on and grant contacts permission.
10.1 What we do with your contacts
- When you choose to find your contacts on Roots, the app sends the phone numbers in your address book over an encrypted (HTTPS) connection to a Roots server, which converts each number into a one-way code using a secret key that only Roots holds. We use these codes only to match your contacts against registered Roots users, and we do not store your contacts' phone numbers.
- When a code matches a registered Roots user, we learn that a specific person in your contacts is on Roots, and we record a one-way connection that lets you reach them.
- Codes that do not match a registered user are discarded immediately and never stored. We do not build a profile of, or keep any record of, people who are not Roots users, and we do not use your contacts to send invitations or messages to people who aren't on Roots.
10.2 One-directional by design
Finding someone in your contacts lets you reach them; it does not automatically let them reach you, and it does not reveal to them that you have their number, unless they also discover you or you already share a connection. Every user controls their own discoverability below.
10.3 Your controls
- Discoverable by contacts — turning this off stops other people from finding or reaching you through contact discovery, including people who already have your number.
- Who can contact me — choose Contacts (people who have your number, plus your Roots connections), Connections (only people you follow each other with or share a community), or Nobody.
- Forget my contacts — deletes the connections created from your contacts and removes your number's code from our discovery index. You can run discovery again later if you choose.
- Block — blocking a user prevents contact in either direction, regardless of any other setting.
10.4 Retention & deletion
We keep the discovery code of your own phone number (so others who have your number can find you) and the one-way connections you created, until you use "Forget my contacts," turn off discoverability, or delete your account. Deleting your account removes your discovery code and your connections. Numbers of non-users are never retained at any point.
11. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or for legal reasons. We will notify you of material changes through the app or by email. Your continued use of Roots constitutes acceptance of the updated policy.
12. Contact Us
For privacy-related questions or requests:
Email: privacy@joinroots.app
Subject: "Privacy Policy Inquiry"
For formal grievances under India's Information Technology Rules, 2021, see our Grievance Redressal page.
We are committed to addressing your privacy concerns promptly and transparently.
This policy is effective as of the last updated date above and applies to all users of the Roots platform.