Privacy Policy

1. Introduction

Welcome to RootWise ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website rootwise.app (the "Website"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Website.

2. Information We Collect

2.1 Information You Provide

• Email addresses when you sign up for our newsletter or notifications
• Survey responses when you complete our parenting survey
• Contact information when you reach out to us
• Any other information you choose to provide

2.2 Information Collected Automatically

• IP addresses
• Browser type and version
• Operating system
• Referring website
• Pages visited and time spent on pages
• Information collected through cookies and similar technologies

3. How We Use Your Information

We use the information we collect to:

• Send you newsletters and updates about RootWise
• Notify you about app availability and updates
• Respond to your inquiries and provide customer support
• Analyze Website usage to improve our services
• Comply with legal obligations
• Protect against fraudulent or illegal activity

4. Cookie Policy

Our Website uses cookies and similar tracking technologies to enhance your browsing experience.

4.1 Types of Cookies We Use

• Essential cookies: Required for Website functionality, including the cookie that stores your consent decision (rw_cookie_consent, 6 months)
• Analytics cookies (only with your consent): Google Analytics 4 and Microsoft Clarity help us understand how visitors use our Website
• Advertising measurement cookies (only with your consent): Google Ads conversion tracking tells us whether a visit from one of our Google ads led to a tap on an app store button

4.2 Managing Cookies

You decide in the cookie banner. You can change your decision at any time via "Cookie Settings" in the footer; we then stop loading Google Analytics, Microsoft Clarity and Google Ads and set Google Consent Mode back to "denied".

You can also control cookies through your browser settings. However, disabling cookies may affect your ability to use certain features of our Website.

5. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• SSL/TLS encryption for data transmission
• Secure hosting through Vercel
• Database security through AWS services
• Regular security assessments
• Limited access to personal information

6. Third-Party Services

We use the following third-party services:

• Cloudflare: Website hosting and deployment
• Google Firebase (Cloud Firestore): Email data storage
• AWS: Database and infrastructure services
• Google Analytics 4 and Google Tag Manager: Website analytics, only after consent (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)
• Microsoft Clarity: Heatmaps and session replays with masked form input, only after consent (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland)
• Google Ads conversion tracking: Measures whether a visit from one of our ads led to a tap on an app store button, only after consent (Google Ireland Limited)
• Cloudflare Web Analytics: Cookie-free, aggregated page statistics without personal profiles (legitimate interest, Art. 6 (1)(f) GDPR)

These services may collect information as described in their respective privacy policies.

Consent and Google Consent Mode: Google Analytics, Microsoft Clarity and Google Ads only load after you click "Accept All" in the cookie banner (Art. 6 (1)(a) GDPR, Section 25 (1) TTDSG). Until then Google Consent Mode is set to "denied" and no data is sent to these services. Google may transfer data to servers in the USA; Google LLC is certified under the EU-US Data Privacy Framework, and the EU Standard Contractual Clauses apply in addition. Data stored in Google Analytics is deleted automatically after 14 months. Google Ads conversion cookies (_gcl_aw, _gcl_au) expire after 90 days.

App store buttons: When you tap an app store button, our server records the click (store, page, country, and whether the visit came from an ad) without cookies, IP addresses or other identifiers, so we can measure how many visitors continue to the app store. The link to Google Play contains our campaign name and, after an ad click, Google's click identifier, which the RootWise app reads once to attribute the installation. See the app privacy policy for details.

7. Data Processing Agreements

We have entered into data processing agreements with our service providers to ensure they handle your data in compliance with applicable data protection laws, including:

• Contractual obligations to protect your data
• Restrictions on data use beyond our instructions
• Security requirements and audit rights
• Obligations to assist with data subject requests

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your data to another service
• Objection: Object to certain processing of your information
• Restriction: Request restriction of processing
• Withdraw Consent: Withdraw consent where processing is based on consent

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses approved by relevant authorities.

10. Children's Privacy

Our Website is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

11. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

12. Contact Information

If you have questions or concerns about this Privacy Policy, please contact us at:

13. Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process personal data based on:

• Consent: When you sign up for newsletters or provide information voluntarily
• Legitimate Interests: To improve our Website and services, ensure security, and analyze usage
• Legal Obligations: When required by law