Privacy Policy
1. Who We Are
Roots ("Roots", "we", "our", or "us") is a home ownership management platform available at livewithroots.com and app.livewithroots.com. If you have questions about this policy, contact us at privacy@livewithroots.com.
2. Information We Collect
Information you provide directly:
- Account & contact information — your email address when you request early access, create an account, or sign in.
- Home & property data — address, property details (age, systems, square footage), financial details such as the purchase price and estimated home value, and any content you add such as projects, tasks, photos, receipts, maintenance records, and notes.
- Shared access — email addresses of household members or collaborators you invite to your home.
- Photos & camera (mobile apps) — with your permission, you can attach photos to your home, projects, appliances, and receipts. Roots only accesses your camera or photo library when you choose to add a photo.
Information collected automatically:
- Usage data — pages visited, features used, clicks, and session recordings: a replay of how you move through the app (taps, navigation, and screens viewed) that helps us find and fix problems and improve your experience. Information you type into fields, such as passwords, is masked and not captured. Collected through PostHog analytics.
- Device & browser information — browser type, operating system, IP address, referring URL, and unique account or device identifiers.
- Crash & diagnostic data (mobile apps) — if the Roots app crashes or runs into an error, we collect a crash report along with basic device and performance information so we can fix it. In our mobile apps this is handled by Google Firebase Crashlytics.
- Cookies & local storage — used to keep you signed in and remember your preferences. See Section 7 for details.
Information from third parties:
- Address lookup — when you search for your home address we query the Google Places API. We receive the address and associated property details you select.
3. How We Use Your Information
- Provide, operate, and improve the Roots service
- Authenticate your account and keep it secure
- Send maintenance reminders, project notifications, and service updates
- Respond to your support requests
- Analyze aggregate usage patterns to improve product features
- Diagnose crashes and fix bugs to keep Roots stable and reliable
- Notify you when your early-access invite is ready (if you joined the waitlist)
- Process subscription payments and manage billing (for paid plans)
We do not use your home data to train AI models, and we do not sell or rent your personal information to third parties.
4. How We Share Your Information
We share data only as needed to operate the service:
- Supabase — our database and authentication provider. Your account data and home data are stored on Supabase's infrastructure. See supabase.com/privacy.
- PostHog — product analytics. Usage events and session recordings are sent to PostHog to help us understand how the product is used and improve it. See posthog.com/privacy.
- Cloudinary — media hosting. Videos and images on the marketing site are served through Cloudinary. See cloudinary.com/privacy.
- Google — address autocomplete is powered by the Google Places API. See policies.google.com/privacy.
- Stripe — our payment processor. If you subscribe to a paid plan, your payment details are handled directly by Stripe and are never stored on Roots servers. See stripe.com/privacy.
- Google Firebase (Crashlytics) — in our mobile apps, crash and diagnostic data is processed by Google Firebase to help us diagnose and fix crashes. See firebase.google.com/support/privacy.
- Legal requirements — we may disclose information if required by law, court order, or to protect the rights and safety of Roots or others.
We do not share your data with advertisers or data brokers.
5. Data Retention
We retain your account and home data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or accounting purposes.
6. Your Rights & Choices
Depending on where you live, you may have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — ask us to correct inaccurate data
- Deletion — ask us to delete your account and associated data
- Portability — receive your data in a machine-readable format
- Opt out of analytics — contact us to opt out of PostHog analytics tracking
To exercise any of these rights, email privacy@livewithroots.com. We will respond within 30 days.
7. Cookies
Roots uses cookies and browser local storage to:
- Keep you signed in across sessions (authentication tokens via Supabase)
- Remember UI preferences such as billing toggle state
- Understand how Roots is used — including session recordings — through PostHog, so we can improve it
You can disable cookies in your browser settings, but doing so will prevent you from staying signed in.
8. Security
We use industry-standard measures to protect your data, including encrypted connections (HTTPS), access controls, and a hosted database provider (Supabase) with its own security certifications. No system is 100% secure; please use a strong, unique password and notify us immediately at privacy@livewithroots.com if you suspect unauthorized access to your account.
9. Children
Roots is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top and, for material changes, notify you by email or a notice in the app. Your continued use of Roots after a change takes effect constitutes acceptance of the updated policy.
11. Contact
Questions or concerns about this policy? Reach us at privacy@livewithroots.com.