Roots
Privacy Policy
1. Who We Are
Roots ("Roots", "we", "our", or "us") is a home ownership management platform available at livewithroots.com and app.livewithroots.com. If you have questions about this policy, contact us at privacy@livewithroots.com.
2. Information We Collect
Information you provide directly:
- Account & contact information — your email address when you request early access, create an account, or sign in.
- Home & property data — address, property details (age, systems, square footage), and any content you add such as projects, tasks, photos, receipts, maintenance records, and notes.
- Shared access — email addresses of household members or collaborators you invite to your home.
Information collected automatically:
- Usage data — pages visited, features used, clicks, and session information, collected through PostHog analytics.
- Device & browser information — browser type, operating system, IP address, and referring URL.
- Cookies & local storage — used to keep you signed in and remember your preferences. See Section 7 for details.
Information from third parties:
- Address lookup — when you search for your home address we query the Google Places API. We receive the address and associated property details you select.
3. How We Use Your Information
- Provide, operate, and improve the Roots service
- Authenticate your account and keep it secure
- Send maintenance reminders, project notifications, and service updates
- Respond to your support requests
- Analyze aggregate usage patterns to improve product features
- Notify you when your early-access invite is ready (if you joined the waitlist)
- Process subscription payments and manage billing (for paid plans)
We do not use your home data to train AI models, and we do not sell or rent your personal information to third parties.
4. How We Share Your Information
We share data only as needed to operate the service:
- Supabase — our database and authentication provider. Your account data and home data are stored on Supabase's infrastructure. See supabase.com/privacy.
- PostHog — product analytics. Usage events are sent to PostHog to help us understand how the product is used. See posthog.com/privacy.
- Cloudinary — media hosting. Videos and images on the marketing site are served through Cloudinary. See cloudinary.com/privacy.
- Google — address autocomplete is powered by the Google Places API. See policies.google.com/privacy.
- Payment processor — if you subscribe to a paid plan, payment information is handled by our payment processor and is not stored on Roots servers.
- Legal requirements — we may disclose information if required by law, court order, or to protect the rights and safety of Roots or others.
We do not share your data with advertisers or data brokers.
5. Data Retention
We retain your account and home data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or accounting purposes.
6. Your Rights & Choices
Depending on where you live, you may have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — ask us to correct inaccurate data
- Deletion — ask us to delete your account and associated data
- Portability — receive your data in a machine-readable format
- Opt out of analytics — contact us to opt out of PostHog analytics tracking
To exercise any of these rights, email privacy@livewithroots.com. We will respond within 30 days.
7. Cookies
Roots uses cookies and browser local storage to:
- Keep you signed in across sessions (authentication tokens via Supabase)
- Remember UI preferences such as billing toggle state
- Collect anonymous analytics via PostHog
You can disable cookies in your browser settings, but doing so will prevent you from staying signed in.
8. Security
We use industry-standard measures to protect your data, including encrypted connections (HTTPS), access controls, and a hosted database provider (Supabase) with its own security certifications. No system is 100% secure; please use a strong, unique password and notify us immediately at privacy@livewithroots.com if you suspect unauthorized access to your account.
9. Children
Roots is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top and, for material changes, notify you by email or a notice in the app. Your continued use of Roots after a change takes effect constitutes acceptance of the updated policy.
11. Contact
Questions or concerns about this policy? Reach us at privacy@livewithroots.com.