Privacy-first
Privacy Policy
Last updated: April 13, 2026
We treat every personal detail with care. This policy explains what we collect, how we use it, and the rights you have over your data.
Information We Collect
- Account details: name, email, language, time zone.
- Conversation inputs: wellness goals, mild symptoms, routines, preferences, watchouts you choose to share. Please avoid sharing highly sensitive identifiers.
- Health device data: if you connect Apple HealthKit or Google Health Connect, we may read steps, sleep duration, heart rate, basal body temperature, weight, height, date of birth, and biological sex.
- Menstrual and reproductive health data: period dates, cycle length, flow intensity, cervical mucus observations, basal body temperature, mood, symptoms, and intimacy logs you choose to record.
- Food photos: images submitted for nutritional analysis are processed in real time and are not stored on our servers. Only the resulting nutritional estimates (calories, macros) are saved.
- Usage data: IP address, device type, session timestamps, feature usage, crash logs.
- Cookies/local storage: keeps you signed in and remembers preferences.
Apple HealthKit & Google Health Connect
If you choose to connect Apple HealthKit or Google Health Connect, Rootwise reads the following data solely to personalize your wellness experience: daily step count, sleep duration, heart rate, basal body temperature, active calories burned, weight, height, date of birth, and biological sex.
- Data obtained through HealthKit or Health Connect is used exclusively to provide personalized wellness insights within the app.
- This data is not used for advertising, data mining, or marketing purposes.
- This data is never sold to or shared with third parties, data brokers, or information resellers.
- You can revoke health data access at any time through your device settings (iOS: Settings > Privacy > Health; Android: Settings > Health Connect).
Menstrual & Reproductive Health Data
We recognize that menstrual and reproductive health data is deeply personal and sensitive. Rootwise may collect period dates, cycle length, flow intensity, cervical mucus observations, basal body temperature, mood and symptom logs, and intimacy records that you voluntarily enter.
- This data is used exclusively to provide cycle predictions, fertility window estimates, and personalized wellness guidance.
- We will not voluntarily disclose reproductive health data to law enforcement, government agencies, or any third party without a valid warrant and, where legally permitted, prior notification to you.
- You can delete all cycle and reproductive health data at any time from your account settings, independently of other data.
- Deleted data is permanently removed from our systems and cannot be recovered.
Photo & Image Data
When you use the food photo feature, your image is sent directly to Google Gemini's vision API for real-time nutritional analysis. Food photos are not stored on Rootwise servers. Only the resulting nutritional estimates (calories, protein, carbs, fat, fiber) and your text description are saved to your food log. Google processes these images transiently in accordance with their API terms of service.
AI Processing
Rootwise uses artificial intelligence to generate wellness guidance. Your conversations are processed by Groq (using Llama language models) and food images are analyzed by Google Gemini. These AI providers process your data solely to generate responses and do not retain your personal data for their own model training. All AI-generated content is educational and informational — it is not medical advice.
How We Use Data
- To deliver personalized yet educational wellness content.
- To improve plan quality, safety messaging, and product features.
- To respond to support requests and keep the platform secure.
Your data may be processed by automated systems to generate wellness summaries. Human reviewers may inspect anonymized snippets to monitor safety and accuracy.
Cookies & Session Storage
Essential cookies maintain secure sessions. Functional cookies remember language and theme. Analytics cookies (privacy-conscious tools) help us understand aggregate usage. You can disable non-essential cookies through in-app controls or browser settings, but essential cookies are required for core functionality.
Third-Party Providers
We rely on hosting partners, analytics vendors, email services, and occasional human-in-the-loop reviewers. Each partner follows confidentiality agreements and strong security practices. We never sell personal data.
Data Rights
- Access, update, or correct your profile information.
- Delete your account and all data through in-app settings, or by contacting privacy@rootwise.example.
- For EU/EEA residents: GDPR rights (access, rectification, erasure, restriction, portability, objection) apply.
Security
We use encryption in transit, role-based access, and regular security reviews. No system is 100% secure, so please use unique passwords and log out on shared devices.
Data Retention & Deletion
We store conversation data as long as needed to provide the Service or until you request deletion. Aggregated or anonymized data may be retained for analytics and safety improvements. You can delete your account and all associated data at any time using the "Delete Account" option in your profile settings. Deletion is permanent and includes all personal data, health records, chat history, cycle data, and food logs. You may also contact privacy@rootwise.example to request deletion and we will process your request within 30 days.
International Transfers
Your information may be processed on servers located in the EU, US, Israel, or other regions. We apply appropriate safeguards such as Standard Contractual Clauses for cross-border data flows.
Data Privacy (Israel)
For users located in Israel, personal data is handled in accordance with the Israeli Protection of Privacy Law (5741-1981) and relevant guidance from the Israeli Privacy Protection Authority.
External Links
Rootwise may link to other sites. We are not responsible for their privacy practices. When leaving Rootwise, review the privacy policy of the destination site.
Children's Privacy
Rootwise is not intended for use by anyone under the age of 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@rootwise.example and we will promptly delete that information.
Contact
Email privacy@rootwise.example with any privacy questions.