1. Introduction

Welcome to Rootee ("we", "our", or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use the Rootee mobile application ("App") available on iOS and Android, and when you visit our website at rootee.app (the "Website").

By downloading and using the App, you consent to the collection and use of information as described in this policy. This policy applies to the App and Website as a unified service.

2. Information We Collect

When you use the Rootee mobile app, we may collect:

Account information: email address and username when you register
Trip data: destinations, itineraries, and travel dates you create within the App
Device information: device type, operating system version, and unique device identifiers for app functionality and crash reporting
Usage data: features used and app interactions, used solely to improve the App experience
Push notification token: to deliver trip updates and collaboration alerts — only if you explicitly grant notification permission
Location data: only if you explicitly grant location access; used to display nearby attractions on the map. We do not store or share your location history

3. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the Rootee mobile app and its features
Sync your travel plans securely across devices
Send push notifications about your trips and group updates (only with your permission)
Enable real-time group travel coordination and shared budget features
Respond to support requests and communicate important service updates
Detect and prevent fraud, abuse, and security incidents
Comply with legal obligations and enforce our Terms of Service

We do not sell your personal data to third parties. We do not use your data for advertising or remarketing purposes.

4. Location Data

Rootee may request access to your device's location to show nearby attractions on the map. This permission is optional — the App functions without location access. If granted, location is used only in real time within the App and is never stored on our servers or shared with third parties. You can revoke location access at any time through your device settings:

iOS: Settings → Privacy & Security → Location Services → Rootee
Android: Settings → Apps → Rootee → Permissions → Location

5. Data Retention & Deletion

We retain your personal data only as long as necessary to provide the service or as required by law. You may request deletion of your account and all associated data at any time by contacting us at rootee.general@protonmail.com with the subject "Account Deletion Request." We will process deletion requests within 30 days, in compliance with GDPR and applicable privacy laws.

Upon deletion, all your trips, itineraries, expense records, and personal profile information are permanently and irreversibly removed from our servers.

6. Third-Party Services

Our App and Website connect to the following third-party services:

Google Fonts — Used on our Website for typography. Your browser may make requests to Google's servers. Google's privacy policy applies.
flagcdn.com — Used to display country flag images in our language selector. Standard server logging may apply.
Apple App Store / Google Play — Subscription payments are processed by these platforms. Their respective privacy policies and payment terms apply to transactions.
Social media — TikTok, Instagram, and Facebook linked from our Website are governed by their own privacy policies.

We are not responsible for the privacy practices of these external services. We encourage you to review their respective privacy policies.

7. Website Local Storage

Our Website uses browser localStorage (not cookies) solely to remember your language preference and cookie consent. This data is stored only on your device, is never sent to our servers, and can be cleared at any time through your browser settings. We do not use analytics tools, advertising pixels, or tracking technologies on the Website.

8. Children's Privacy

Rootee is not intended for children under 13 years of age (or 16 in the EU/EEA where applicable). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately at rootee.general@protonmail.com and we will delete it promptly.

9. Your Rights (GDPR & Privacy Laws)

Depending on your location, you may have the right to:

Access the personal data we hold about you
Correct inaccurate or incomplete data
Delete your account and all associated data
Port your data to another service
Restrict or object to certain processing
Withdraw consent at any time (e.g., location access, push notifications)

To exercise any of these rights, contact us at rootee.general@protonmail.com. EU/EEA residents may also lodge a complaint with their local data protection authority.

10. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you via in-app notification or email. Any changes will be reflected on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at: rootee.general@protonmail.com