Legal

Privacy Policy.

Effective: October 19, 2026

Rooted is a self-understanding tool, not a mental health service. If you need clinical support, please contact a qualified mental health professional.

Rooted only works when you can be honest. This policy explains what we collect, why we need it, where it goes, and how you can control or delete it.

The short version

We collect your account details, the answers and content you choose to give Rooted, your activity, subscription information, and technical data needed to run and improve the service. We do not sell your data or use it for advertising.

Rooted uses AI in 6 user-facing places. Anthropic, PBC processes that content in the United States. AI needs your agreement, and you can turn it off in Settings.

What we collect

We collect the following data when you create an account or use Rooted:

Account details

Your name and email address from Clerk when you sign in, plus the account ID we use to connect your Rooted data.

Assessment answers

Your selected track, short-choice answers, free-text answers, optional depth answers, and optional life, work, and living situation details.

Your report

Profile name, Treeko letter, focus, root scores, root gaps, and the dates of your assessment, retake, and monthly report.

Tasks and check-ins

Daily task assignments, accepted and completed tasks, progress, XP, streaks, mood, and any end-of-day answer you choose to write.

Journal

Journal text, entry type, date, mood, any root tag, and any reflection returned for a Weekly Check-in.

Goals and habits

Goal text, confidence, generated plans, task progress, habits, schedules, and completion history.

Treeko chat

Your messages, Treeko's replies, timestamps, and the usage count needed to apply the current chat limit.

Messages and reminders

Your optional WhatsApp number, push token, email preferences, reminder channel, delivery times, and delivery logs.

Subscriptions

Plan, status, trial dates, renewal or period dates, payment provider, and the limited customer or subscription IDs needed to manage access.

Product and technical data

Pages and features used, account ID, email for identified web analytics, app and device details, errors, server requests, IP address, and timestamps.

Your assessment draft can also be kept in your browser so you can return to an unfinished assessment. The draft is tied to your account and is not submitted to Rooted until you finish the assessment.

How we use it

We use your data to:

  • Create your Rooted account and keep you signed in.
  • Create your report, daily tasks, progress, habits, goals, journal, and Treeko chat.
  • Deliver the reminders and messages you request through the app, WhatsApp, push notifications, or email.
  • Manage trials, purchases, renewals, cancellations, and Premium access.
  • Understand which features work, diagnose errors, protect the service, and prevent abuse.
  • Meet legal obligations and enforce our Terms.

We do not sell your personal data. We do not use it for advertising or behavioural advertising. We do not use your content to train AI models of our own.

AI features in Rooted

Rooted sends personal data to one AI provider, Anthropic, PBC, in the United States. Anthropic runs the Claude models used by these features.

Rooted uses AI in 6 user-facing places. This is the full list.

Treeko chat
When you send a chat message, we send that message, up to five recent message pairs, your profile name, primary focus, top two root gaps, root levels, a shortened preview of your current task, and up to five recent end-of-day answers.
Weekly insights
Once a week, if AI is on, we send your first name, profile name, top gap, root levels, tasks completed, XP, active days, strongest improvement, up to five recurring words from journal entries, roots touched, mood counts, and a habit completion summary.
Journal reflections
When you save a Weekly Check-in, we send its text to write a short reflection and suggest a root tag. Ordinary freeform entries are not sent for a reflection.
Goal plans
When you create a goal plan, we send your wish, outcome, obstacle, if-then plan, confidence rating, and the active Rooted task library used to build the plan.
Your Treeko letter
When you finish the full assessment, we send your track, three free-text answers, six response choices, optional depth answers, and optional life, work, and living situation details. We do not send your name or email.
Your monthly report
When you run a Monthly Deep Audit, we send the same assessment fields described for your Treeko letter: track, free-text answers, choices, optional depth answers, and optional life, work, and living situation details.

Daily tasks are chosen by our code from a fixed library.

We also use AI internally to draft replacement task-library text from Rooted's own task content. That tool does not receive your assessment, journal, chat, goal, check-in, account, or progress data.

We ask for your agreement before you take the full assessment. AI writes your Treeko letter from it.

You can turn AI off in Settings. Turning AI off stops new AI processing for chat, reflections, goal plans, and profile updates. Home, your existing profile, tasks, habits and journal keep working. Rooted keeps working without them, and nothing is deleted unless you delete your account.

From then on we send nothing further about you to Anthropic, including for your weekly insight. Withdrawing AI agreement does not delete your account. What was already sent remains subject to Anthropic's retention terms above.

Where your data goes

Rooted is operated from India. Anthropic processes AI content in the United States. Our other service providers process data in the countries where they operate.

When data leaves your country, we rely on the providers' data processing terms and the safeguards available under their contracts. Email hello@rootedmind.in if you want more detail about a transfer.

Service providers

These providers process data for Rooted:

Clerk
Sign-in and account management. Clerk handles authentication and gives Rooted your account ID, name, and email.
Supabase
Database and backend infrastructure. Supabase stores your account, assessment, report, task, journal, goal, habit, chat, subscription, and reminder data.
Anthropic, PBC
AI processing in the United States. For user data, Anthropic receives only the content described in the six AI uses below.
PostHog
Product analytics. PostHog receives account ID, email on identified web sessions, page and feature events, and technical context. Session recording is disabled.
Sentry
Crash and error monitoring in the mobile app. Reports can include device and operating system details, app and update versions, error details, and app breadcrumbs. We do not set your name, email, or account ID as Sentry user context.
RevenueCat
App Store and Google Play subscription management. RevenueCat receives your account ID and purchase entitlement data.
Apple and Google
App distribution, in-app purchases, subscriptions, push delivery, and iOS App Attest. Payment details are handled by the store that processed your purchase.
Dodo Payments
Website checkout and subscription payments. Rooted sends your email, optional name, account ID, and checkout reference. Dodo handles payment details.
Resend
Email delivery. Resend receives your email address, the subject, and the email content.
Meta (WhatsApp)
WhatsApp message delivery. If you add a number, Meta receives that number and the message content needed to deliver your tasks and check-ins.
Expo
Mobile app updates and push notification delivery. Expo receives your push token and the notification title, text, and routing data.
Vercel
Web hosting and server requests. Vercel processes request, device, and log data needed to run and protect the service.
Cloudflare
Turnstile bot protection on the web assessment. It receives the signals needed to complete the security check.

How long we keep it

We keep your account and connected Rooted data while your account is active. When you delete your account, Rooted deletes the account row and connected records, including your assessment, profile, tasks, journal, goals, habits, chat, mood, reminders, feedback, and subscription state. Related database records are set to delete with the account unless a record has been deliberately detached and kept for history.

Deleting your account does not automatically delete analytics records already sent to PostHog or diagnostics already sent to Sentry. Those providers keep data under their own retention settings. Email us if you want us to remove provider records connected to you.

For Anthropic, inputs and outputs are deleted from its backend within 30 days. If Anthropic's automated trust and safety systems flag content as violating its Usage Policy, it may keep the inputs and outputs for up to 2 years and related trust and safety classification scores for up to 7 years. It may also keep data when required by law.

Deleting your Rooted account does not shorten retention that has already started at Anthropic. Payment providers, stores, email providers, messaging providers, hosting providers, and security providers keep data under their own policies and legal obligations.

Subscriptions and payments

Rooted can offer a free 7-day trial and a Premium subscription. The price, currency, billing period, and any trial terms are shown before you confirm a purchase.

On iOS and Android, Apple or Google processes the payment and manages billing. RevenueCat helps Rooted confirm whether Premium is active. On the website, Dodo Payments processes checkout and subscription payments. Rooted stores subscription status, dates, provider details, and limited customer or subscription IDs. Rooted does not receive your full card details.

Subscriptions renew automatically until cancelled. Cancel through the store or payment provider that billed you. Cancellation usually takes effect at the end of the current paid period. Refunds follow the rules of the store or payment provider that billed you, and any rights you have under applicable law.

Cookies and analytics

We use cookies and local storage for sign-in, security, preferences, and analytics. Clerk uses cookies to keep you signed in. PostHog uses cookies or local storage to connect events to your account.

We do not use advertising or remarketing cookies. PostHog session recording is disabled. You can block cookies in your browser, but sign-in and other parts of Rooted may stop working.

Your choices and rights

You can:

  • Ask for a copy of the personal data we hold about you.
  • Ask us to correct inaccurate data.
  • Delete your account and connected Rooted data from Settings or by email.
  • Turn AI off in Settings. Rooted keeps working without new AI features, and nothing is deleted unless you delete your account.
  • Turn off WhatsApp, push, or email messages where the product offers that control.
  • Ask us to remove analytics or diagnostic records connected to you where the provider allows it.
  • Object to or restrict processing where the law gives you that right.
  • Complain to your data protection authority.

Email hello@rootedmind.in to make a request. We may need to verify that you own the account. We aim to respond within 30 days.

If you live in California, you can ask to know, delete, or correct personal information and to opt out of sale or sharing. Rooted does not sell your personal data.

Children

Rooted is for adults. You must be 18 or older to create an account. We do not knowingly collect data from anyone under 18. If you believe someone under 18 has submitted data, email us and we will delete it.

Changes to this policy

We may update this policy when Rooted changes. We will post the new version here and update the effective date. For material changes, we will give notice in the app or by email before they take effect.

Contact

Questions or requests about privacy? Email hello@rootedmind.in.

You can also read how to delete your account and data.

© 2026 Rooted · Operated by Joyful Ape

Read our Terms
Privacy Policy | Rooted