Privacy Policy

This Privacy Policy explains what information Rootah ("we", "us") collects through the Rootah mobile app and website (together, the "Service"), why we collect it, and the choices you have. It should be read alongside our Terms & Conditions.

1. Information we collect

We collect the following categories of information:

• Account information — the email address and password you sign up with, and the username, bio, and profile photo you choose to add.
• Location data — if you grant permission, your device's current location, used to center the map and speed up route building. Location access is optional — you can browse and build routes without granting it.
• Route data — the waypoints, paths, names, descriptions, and notes of routes you create, along with distance, elevation, and activity type derived from them.
• Social activity — likes, saves, comments, group runs you create or RSVP to, and who you follow or are followed by, where applicable.
• Device & usage information — basic technical data such as app version, device type, and crash/error logs, used to keep the Service running reliably.
• Subscription status — if you purchase Rootah Pro, we receive your subscription status (active, expired, cancelled) from Apple or Google via our subscription platform, RevenueCat, so we can unlock Pro features on your account. We never receive or store your card number or other payment details — those are handled entirely by Apple or Google.

2. How we use your information

• To provide core functionality — building, routing, saving, and displaying routes and maps;
• To operate account features — authentication, your profile, and your saved/created routes;
• To power social features — Discover, likes, saves, comments, and group runs;
• To generate shareable public preview pages for routes you mark public;
• To unlock Rootah Pro features for subscribers and keep your subscription status current;
• To maintain, secure, and improve the Service, including diagnosing bugs and abuse.

We do not sell your personal information.

3. What's public vs. private

Your username, bio, and profile photo are visible to other users. Routes are private by default until you choose to make them public; public routes (including their name, path, stats, and your username) are visible to anyone on the Discover map and on their shareable web preview page. Comments and RSVPs on a group run are visible to other participants of that run.

4. Third-party services

We rely on the following third-party services to operate Rootah:

• Supabase — hosts our database, authentication, and file storage (profile photos).
• Mapbox — provides maps, street-level routing/directions, and geocoding. Waypoint coordinates are sent to Mapbox to compute routes.
• Open-Meteo — provides elevation data for the coordinates along your routes.
• Railway — hosts the Rootah website, including public route preview pages.
• RevenueCat, Apple, and Google — process and manage Rootah Pro subscription purchases. Apple and Google handle all payment collection directly; RevenueCat relays your subscription status to us so we can grant Pro access. None of them receive any Rootah data beyond what's needed to identify your account and subscription.

These providers process data only as needed to deliver their service to us and are bound by their own privacy and security terms.

5. Data retention & deletion

We keep your account and route data for as long as your account is active. You can delete individual routes at any time from within the app. You can also delete your account entirely, at any time, from Profile → Delete account in the app, or by following the instructions on our account deletion page. Deleting your account removes your profile, routes, and associated data immediately, except where we're required to retain records for legal or security reasons.

6. Your choices

• Location permission can be granted or revoked at any time in your device settings;
• Photo library access (for a profile picture) can likewise be granted or revoked at any time;
• You can edit or delete your profile information and routes directly in the app;
• You can mark any route private at any time to remove it from public/Discover visibility;
• You can delete your account at any time — see how to delete your account.

7. Children's privacy

Rootah is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, contact us and we'll delete it.

8. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you in the app.

9. Contact

Questions about this Privacy Policy, or want to access, correct, or delete your data? Reach out to us at privacy@rootah.com.