← Back to Home

Privacy Policy

Effective:

Plain-English first. We collect the minimum needed to run Rooted, never sell your data, and we don’t run ads or third-party trackers.

Who we are

Rooted (“we”, “us”, “our”) is a small team building tools to learn and practice DBT skills. You can reach us at hello@rooted-dbt.com.

What we collect

  • Account & contact info (e.g., email) — to create an account, send confirmations, and keep you updated about beta access.
  • App activity you choose to save (e.g., lesson progress, diary entries, skills practiced). You control what you enter and can request deletion.
  • Basic device & usage (e.g., browser type, approximate region, pages viewed) — used in aggregate to improve reliability and content.
  • Support messages you send us.

How we use your data

  • Operate and improve Rooted (personalize content, fix bugs, measure reliability).
  • Send essential emails (sign-in, confirmations, service announcements). Marketing emails are optional and include an unsubscribe link.
  • Security & abuse prevention (e.g., rate-limiting, fraud detection).

What we don’t do

  • No selling your personal data.
  • No third-party advertising networks.
  • No unnecessary cookies; we use only what’s needed to operate the service.

Legal bases (EU/UK users)

We process data under contract (to provide the service), legitimate interests (to improve and secure Rooted), and consent (for optional emails or where required by law). You can withdraw consent anytime.

Data retention

We keep personal data only as long as needed for the purposes above. You may request deletion of your account and content at any time (see “Your rights”). Backups are purged on a rolling schedule.

Your rights

  • Access, correct, export, or delete your data.
  • Object to or restrict certain processing.
  • Complain to your local supervisory authority if applicable.

To exercise rights, email hello@rooted-dbt.com. We’ll respond within 30 days.

Security

We use encryption in transit (HTTPS) and at rest for stored data, role-based access, and least-privilege practices. No method is 100% secure, but we work to protect your information.

Minors

Rooted is not directed to children under 13. If you believe a child has provided personal data, contact us and we’ll delete it.

International transfers

Your information may be processed outside your country. Where required, we use appropriate safeguards (e.g., standard contractual clauses).

Changes to this policy

We may update this Policy. We’ll change the “Effective” date above and, for material changes, provide additional notice (e.g., email or in-app).

More detail: categories, recipients, and cookies
  • Categories: identifiers (email), usage data (pages/features used), content you submit (diary entries, check-ins), support communications.
  • Service providers: we rely on vetted vendors (e.g., hosting, email delivery) under contracts that restrict use to our instructions.
  • Cookies/local storage: used sparingly for authentication/session and preferences. You can clear them via your browser.

This summary is for clarity and is not a legal advice document.