Legal

Privacy Policy.

Last updated: July 30, 2026

Rooted is built on a simple premise: the more honestly you show up, the more useful the output. We hold your data to the same standard. This policy explains what we collect, why, and what you can do about it.

The short version

We collect your name, email, assessment answers, and, if you opt in, your WhatsApp number, journal entries, personal goals, and chat history with our AI companion. We use these to run the product. We don't sell your data. We don't run ads.

Some features send your text to one AI provider, Anthropic, PBC, in the United States. Anthropic is contractually prohibited from training its models on it. Anthropic deletes it within 30 days, with one exception we spell out below. Read the detail.

What we collect

When you use Rooted, we collect:

Identity

Your name and email address, provided when you sign in via Clerk.

Assessment answers

Your assessment responses. Used to generate your identity profile. Not sold, and not shared with anyone except the AI provider named below.

WhatsApp number

Optionally provided during onboarding. Used solely to send your daily task and EoD check-in via WhatsApp. Never used for marketing. You can skip this entirely.

AI chat history

Your conversations with the Rooted AI companion are stored in our database so the chat persists across sessions. You can clear your chat history at any time from the chat page.

Journal entries

Anything you write in the journal, up to 5,000 characters per entry, along with the date and any dimension tag. Journals are optional. You are never required to write one to complete a task.

Personal goals

The wish, outcome, obstacle, and if-then plan you write when you set a goal, plus your confidence rating and the plan generated from them.

Task activity and check-ins

Which tasks you completed and when, plus your optional end-of-day answer and how the task felt. The optional answer is free text, so it holds whatever you choose to put in it.

Subscription and payment data

If you subscribe, Dodo Payments processes your payment. We store your subscription status and period dates , not your card details. Card data never touches our servers.

Usage data

Which screens you open and which features you use, tracked via Posthog. Your account ID is attached to these events, so they are tied to you and not anonymous. We also collect crash and performance diagnostics via Sentry in the mobile app.

Device and log data

Standard server logs: IP, browser, pages, timestamps. Retained up to 24 months.

How we use it

We use your data to:

  • Generate your identity profile using the Anthropic API
  • Authenticate your account via Clerk
  • Send you daily tasks and check-ins via WhatsApp (if you provided your number and have an active trial or subscription)
  • Improve the product by looking at survey responses and usage patterns. These are tied to your account, not anonymised
  • Send lifecycle emails (trial reminders, re-engagement) via Resend: you can unsubscribe from these in your account settings at any time
  • Maintain security and prevent abuse

We do not use anything you send us, including your assessment answers, journal entries, chat messages, goal text, and check-in answers, to train AI models of our own. We do not run advertisements. We do not sell your data. The section below explains what our AI provider is and is not permitted to do with the same content.

How AI works in Rooted

Rooted uses one AI provider: Anthropic, PBC, based in the United States, which operates the Claude models. We do not use any other AI provider. If we ever add one, we will update this section and ask for your agreement again before sending your content to it.

There are six places where Rooted sends your text to Anthropic. This is the full list.

Your profile
When you finish the assessment, your answers are sent so we can generate your profile name, your six dimension scores, and the letter you receive.
Journal entries
When you save a journal entry, the full text of that entry is sent so we can generate a short reflective response. This happens every time you save an entry.
Chat
When you message the Rooted companion, we send your message and your recent conversation history, plus context so the reply is relevant: your profile name, your primary focus, your top two growth areas, your six scores, your current task, and the text of up to five of your most recent end-of-day answers, quoted as you wrote them.
Personal goals
When you set a goal, the wish, outcome, obstacle, and if-then plan you wrote are sent so we can build a 7-day plan from Rooted's task library.
Weekly letter
Once a week, automatically and without you starting it, we send your first name, profile name, top growth area, how many tasks you finished, your XP, your dimension levels, and the five most frequent words from that week's journal entries. We do not send the entries themselves for this one, only those five words.
Daily tasks
Nothing is sent for this step. Your daily task is chosen by our own code from a fixed library, and marking it done or saying how it felt involves no AI. But the choice depends on the scores in your profile, and your profile can only be created by the AI step above, so this step cannot run on its own.

Training. Anthropic's Commercial Terms of Service, which govern our account, state that Anthropic may not train models on customer content submitted through its services. Your content is not used to train Anthropic's models, and it is treated as our confidential information under those terms. Anthropic is not permitted to use it for its own advertising or marketing.

Retention, stated plainly. We do not currently have a zero-retention agreement with Anthropic, so we will not claim one. Under Anthropic's standard API terms, what we send is automatically deleted from Anthropic's systems within 30 days. There is one exception you should know about: if Anthropic's automated safety systems flag a submission as possibly breaching their usage policy, Anthropic may keep it for up to 2 years, and keep the related classification scores for up to 7 years. Because journalling can involve difficult subject matter, this is a real possibility rather than a theoretical one, and we would rather tell you than let you assume otherwise.

Your choice, and its limits. We ask you to agree to this before you create an account, and we will not send anything to Anthropic until you have. We want to be straight with you about what agreeing means: AI is not an optional extra in Rooted, it is how the product works. Your profile is generated from your assessment by Anthropic, and your daily tasks are chosen using the scores in that profile. Without it there is no profile, so there are no daily tasks, and there is no usable product. Some apps offer an AI toggle you can switch off and carry on. We cannot honestly offer that, so we are not going to pretend we can.

You can withdraw your agreement at any time from Settings. Because of the above, withdrawing closes your account rather than leaving you with a reduced version of Rooted. We will tell you that clearly at the moment you withdraw, delete your data from our systems, and stop sending anything further. What was already sent to Anthropic is subject to the retention above, which we cannot shorten.

Accuracy. Claude can be wrong. Reflections, insights, plans, and suggestions that Rooted generates are not statements of fact, and they are not medical, psychological, financial, or legal advice. Do not rely on them without your own judgement.

Where your data goes

Rooted is operated from India. Your content is stored on our servers and is sent to Anthropic, PBC in the United States for the AI processing described above. This means your content leaves your country. Once it is in the United States it is subject to United States law, and may in principle be reachable by United States courts, law enforcement, and national security authorities. No contract we sign can override that, so we would rather say it than imply otherwise.

We rely on Anthropic's data processing terms and the contractual protections described above as the safeguard for this transfer. A copy is available on request.

  • If you are in the UK or the EEA, we rely on standard contractual clauses for this transfer.
  • If you are in Australia, your content is disclosed to an overseas recipient in the United States. We remain accountable for that disclosure under the Australian Privacy Principles.
  • If you are in the United States, this AI transfer stays within the United States, so the cross-border transfer framing above does not apply to you.
  • If you are in the United Arab Emirates, you are giving express consent to transfer your personal data outside the State.
  • If you are in Canada, note the paragraph above on access by foreign authorities. We have set it out at the point of collection rather than burying it.

Third parties we use

Clerk
Authentication: manages your sign-in and account.
Supabase
Database: stores your profile, scores, survey responses, journal entries, goals, and task history.
Anthropic, PBC
AI processing (United States): powers your profile, journal responses, chat, goal plans, and the weekly letter. Depending on the feature this can include your assessment answers, the full text of a journal entry, your chat messages, your profile name and scores, your current task, up to five recent end-of-day answers, and your goal text. Anthropic is contractually prohibited from training its models on this content. Anthropic deletes it within 30 days, or keeps it up to 2 years if its automated safety systems flag it. See 'How AI works in Rooted' above for the full detail.
Posthog
Analytics: records which screens you open and which features you use, so we can see what is working. Your account ID is attached, so this is not anonymous. We do not send your journal entries, chat messages, assessment answers, or report text to Posthog.
Sentry
Crash and performance monitoring: if the app crashes or runs slowly, a diagnostic report is sent so we can fix it. Reports include your device model, operating system version, app version, and the code path that failed. We do not attach your name, email, or account ID, and we do not send journal entries, chat messages, or assessment answers to Sentry. Sentry is used in the mobile app only.
RevenueCat
Subscription management: handles your in-app purchase and tells the app whether your subscription is active. Receives your account ID and purchase history. Card details never reach RevenueCat or us; Apple handles payment for in-app purchases.
Dodo Payments
Payments: processes subscription payments. Card details are handled entirely by Dodo Payments and never reach our servers. See Dodo Payments' privacy policy for their data practices.
Resend
Email delivery: sends lifecycle emails (trial reminders, re-engagement). Your email address is passed to Resend for delivery. You can unsubscribe at any time.
Meta (WhatsApp)
WhatsApp delivery: if you provide your number, daily task messages are sent via Meta's WhatsApp Business API. Meta's data policies apply to message delivery.
Vercel
Hosting: serves the app and processes server-side requests.
Cloudflare Turnstile
Bot protection: an invisible security check on the assessment form to prevent automated submissions. No personal data is collected. See Cloudflare's Turnstile Privacy Addendum at cloudflare.com/en-gb/turnstile-privacy-policy for their data practices.

How long we keep it

On our systems. We keep your account and profile data for as long as your account is active. When you delete your account, your profile, journal entries, goals, task history, and chat history are deleted immediately and completely from our database. We do not keep Supabase backups on the Free plan. Technical logs may exist separately for short provider retention windows, but we do not keep them as an account-retention copy.

On Anthropic's systems. Content we send for AI processing is deleted within 30 days, or kept up to 2 years if flagged by Anthropic's automated safety systems, with classification scores kept up to 7 years. Deleting your Rooted account removes your data from our systems, but it does not shorten Anthropic's retention of anything already sent. We would rather be clear about that limit than let a deletion request imply more than it delivers.

Subscriptions and payments

Rooted offers a monthly subscription after a 7-day free trial. Payments are processed by Dodo Payments. We never see or store your card details.

Your subscription status (active, cancelled, trial) and period end date are stored in our database to gate access to paid features.

You can cancel your subscription at any time from your account page. Cancellation takes effect at the end of your current billing period , you keep access until then. We do not offer refunds for partial months, except where required by law.

To request a refund or dispute a charge, email hello@rootedmind.in.

Cookies

We use session and persistent cookies for authentication (via Clerk) and to remember your preferences. We do not use advertising or remarketing cookies. Analytics cookies (Posthog) are linked to your account once you sign in, so they are not anonymous. You can disable cookies in your browser settings, though this may affect authentication.

Your rights

You can:

  • Access the data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and data
  • Withdraw consent for optional communications at any time
  • Withdraw your agreement to AI features at any time in Settings. Because AI is required for Rooted to work, withdrawing deletes your account rather than leaving you with a reduced version.
  • If you live in California, you can ask to know, delete, or correct personal information, opt out of sale or sharing, and exercise those rights without discrimination. Rooted does not sell your data.
  • Ask for a copy of the safeguards covering the transfer of your data to the United States

To exercise any of these rights, email us at hello@rootedmind.in. We will respond within 30 days.

If you are not satisfied with how we have handled your request, you can complain to your data protection authority. Depending on where you live, that is the Data Protection Board of India, the Information Commissioner's Office in the UK, the Office of the Privacy Commissioner of Canada, the Office of the Australian Information Commissioner, the UAE Data Office, the California Privacy Protection Agency, the California Attorney General, or the Federal Trade Commission.

Children

Rooted is for adults. You must be 18 or older to create an account. We do not knowingly collect data from anyone under 18, and we do not offer a route for a parent or guardian to consent on a child's behalf. If you believe someone under 18 has submitted data, contact us and we will delete it.

We do not run behavioural advertising, and we do not profile or track anyone for advertising purposes at any age.

Changes to this policy

We may update this policy as Rooted evolves. We will notify you via the app and by email before material changes take effect. The “Last updated” date at the top will always reflect the current version.

Contact

Questions about this policy? Email hello@rootedmind.in.

© 2026 Rooted · Operated by Joyful Ape

Read our Terms
Privacy Policy | Rooted