ROOTED

Privacy Policy

Last updated: April 8, 2026

Thank you for using Rooted, our mobile application designed to support your spiritual growth journey. This Privacy Policy applies when you use the Rooted app, visit our website at rootedapp.plexodev.com, or communicate with us via email, in-app support, or our social media channels.

Rooted is operated by Plexodev LLC, a company incorporated in the United States. We are committed to protecting your personal information and being transparent about how we use it.

BY USING THE SERVICES, YOU CONSENT TO THE COLLECTION, USE, AND PROCESSING OF YOUR PERSONAL INFORMATION AS DESCRIBED IN THIS PRIVACY POLICY. We may update this Policy periodically. Your continued use of the Services following notification constitutes acceptance of the updated Policy.
1

Contact Us

If you have questions, concerns, or requests related to your personal information, please contact our Privacy Team:

Company
Plexodev LLC
Address
20 N Gould St Ste N, Sheridan, WY 82801, USA
Privacy Contact
Data Privacy Officer
Email
privacy@plexodev.com
Response Time
Within 30 calendar days of a verified request

We may take steps to verify your identity before fulfilling any data request. You may also designate an authorized agent to act on your behalf; however, we reserve the right to verify both identity and authorization before processing such requests.

2

Information We Collect

A) Information You Provide Directly

CategoryDescription
Account DataName, email address, profile picture, and account preferences via email/password, Apple Sign-In, or Google Sign-In. No payment information is collected directly by Rooted.
Profile & Faith PreferencesOptional information such as denomination, preferred Bible translation, devotional topics, and spiritual growth goals.
User ContentText, audio, images, or content you create, including SoulNotes, SpiritScript, prayer requests, AI chat inputs, and game interactions.
Feedback & SupportName, email, and content of your communications when you contact us.
Survey / Research DataResponses you choose to provide if you voluntarily participate in surveys.

B) Information Collected Automatically

When you use our Services, we automatically collect:

CategoryDescription
Usage DataInteractions with app features, session timestamps, feature settings, and content engagement patterns.
Device & Technical DataDevice type, OS version, app version, unique device identifiers, network type, language settings, and crash logs.
Location (Non-Precise)Country, region, state, or timezone, inferred from network data or device settings. We do not collect GPS or precise location data.

C) Information from Third Parties

SourceData CollectedPurpose
Apple App Store / Google PlayHigh-level transaction recordsActivate premium features
Apple / Google Sign-InAuthentication token, name, email, profile pictureAccount creation and login
Cloud Infrastructure ProviderAggregated/pseudonymized usage dataApp hosting, database, and performance
Security PartnersIP address mapping, fraud signalsAccount protection and security
Law Enforcement (if applicable)Information per valid legal processLegal compliance
3

How We Use Your Information

We do not sell your personal information. We use your personal information only where we have a valid legal basis to do so.

PurposeData UsedLegal Basis
Provide and maintain the ServicesAccount data, User Content, Device dataContract performance
Personalize your spiritual growth experienceFaith preferences, usage patternsContract / Legitimate interests
Enable AI-powered featuresUser Content, AI inputs/outputsContract / Consent
Process subscription paymentsTransaction data from app storesContract performance
Improve app features and develop new onesPseudonymized usage data, crash logsLegitimate interests
Train and improve AI models (anonymized only)Anonymized/synthetic content, never linked to your identityLegitimate interests
Detect and prevent abuse and security threatsDevice data, session patternsLegitimate interests / Legal obligation
Respond to customer support requestsSupport communications, account dataConsent / Contract
Comply with legal obligationsAny relevant data as required by lawLegal obligation
Conduct user research and surveys (optional)Survey responsesConsent
4

Who We Share Your Information With

We do not sell or rent your personal information to third parties. We share your information only in the limited circumstances described below:

A) Service Providers (Authorized Partners)

We engage carefully selected third-party vendors who process your data strictly on our behalf, under our written instructions, and subject to appropriate data processing agreements.

VendorPurposeData SharedLocation
Cloud Infrastructure ProviderApp hosting, backend infrastructure, database, and authenticationAccount data, user content, and usage data as necessary to operate the platformUSA
OpenAIAI-powered devotionals, Bible study, and in-app featuresUser prompts and content queries (no unnecessary personal identifiers)USA
API.BibleBible translation access and content deliveryNo personal data; Bible content delivery onlyUSA
Apple / Google Sign-InSecure single sign-on authenticationAuthentication token, name, email, profile picture (as chosen by you)USA
Apple App Store / Google PlaySubscription billing and payment processingTransaction records only; no raw payment data stored by RootedUSA

B) Affiliated Entities (Corporate Group)

We may share information with entities that are part of the Plexodev LLC corporate group for purposes of technical operations, legal and compliance functions, finance, HR, or product development. All affiliated entities are contractually bound to handle your information in accordance with this Privacy Policy.

C) Legal Authorities

We may disclose your personal information when required by law, court order, subpoena, or in response to valid and lawful requests from government or law enforcement authorities. Where legally permitted, we will notify you before disclosing.

D) Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you before your data becomes subject to a different privacy policy and give you a reasonable opportunity to request deletion.

5

Data Storage and Retention

Your data is stored on servers located in the United States. As we expand to the EU/EEA and Africa, we will establish appropriate regional data storage and implement legally compliant data transfer mechanisms (such as Standard Contractual Clauses).

We retain your personal information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. When no longer required, we will securely delete or anonymize it.

If you delete your account, we remove your profile, devotionals, journal entries, prayers, Bible notes, and all other account data from our active systems immediately. Uploaded media files (sermon audio, journal photos, and profile photos) are removed within 30 days of deletion. They are not deleted instantly because they are stored with our infrastructure provider and are queued for manual removal at the time of your request. Subscription entitlements are revoked at the time of deletion. We may retain certain data needed to prevent fraud, comply with legal requirements, and enforce our Terms of Use.

6

Your Rights and Choices

Depending on your location, you may have the following rights with respect to your personal information:

RightDescription
AccessRequest a copy of the personal information we hold about you.
CorrectionRequest that we correct inaccurate or incomplete information.
DeletionRequest that we delete your personal information (subject to legal exceptions).
PortabilityRequest a machine-readable copy of your data to transfer to another provider.
Restriction / ObjectionRequest that we limit or stop processing your information in certain circumstances.
Withdraw ConsentWhere processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
Opt-Out of CommunicationsUnsubscribe from app notifications and communications at any time via your account settings.
Non-DiscriminationWe will not discriminate against you for exercising your privacy rights.
To exercise any of these rights, contact us at privacy@plexodev.com. We will respond within 30 calendar days. EU & UK residents: a full GDPR/UK DPA Addendum will be published at rootedapp.plexodev.com/privacy-eu upon regional launch.
7

Children's Privacy

Rooted is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information without parental consent, please contact us at privacy@plexodev.com and we will promptly delete the information.

For users between 13 and 17, we apply additional care in how we handle personal information and limit the use of certain data-intensive features. Parents or guardians with questions about a minor's use of Rooted should contact us directly.

App Store Content Rating: Rooted is rated for users aged 13+ due to community interaction features (prayer wall, community feed). The app does not contain mature, violent, or adult content. Parents should be aware that community features allow user-generated content, which is subject to our moderation policies.

8

Security

We implement reasonable administrative, technical, and physical safeguards to protect your information from unauthorized access, use, disclosure, alteration, or destruction. These measures include:

  • ✓Encryption of data in transit (TLS) and at rest
  • ✓Access controls limiting data access to authorized personnel only
  • ✓Regular security reviews and vulnerability assessments
  • ✓Incident response procedures for data breaches

Despite our efforts, no security system is impenetrable. In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant authorities as required by applicable law.

9

Third-Party Links and Services

Rooted may contain links to third-party websites, Bible APIs, or external content. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you access through Rooted.

10

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

  • ▸Post a notice within the Rooted app
  • ▸Update the "Effective Date" at the top of this Policy
  • ▸Where required by law, seek your renewed consent

Your continued use of Rooted after any changes constitutes your acceptance of the updated Policy.

11

Notice to U.S. Residents

Residents of certain U.S. states (including California, Virginia, Colorado, Connecticut, and Texas) have additional privacy rights under applicable state laws. A separate U.S. State Privacy Notice is available at rootedapp.plexodev.com/privacy-us.

These rights may include the right to know what personal information we collect, the right to delete or correct your data, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination. To submit a request, contact privacy@plexodev.com.

12

Notice to Canadian Residents

If you are located in Canada, we process your personal information with your consent or where otherwise permitted by applicable Canadian privacy law (including PIPEDA). You may withdraw your consent at any time by contacting us at privacy@plexodev.com.

In limited circumstances, we may process without consent, including where:

  • ▸Collection is clearly in an individual's interests and consent cannot be obtained in a timely way
  • ▸The purpose is fraud detection, investigation, or prevention
  • ▸A business transaction meets applicable legal conditions
  • ▸Disclosure is required by a subpoena, warrant, or court order
  • ▸The information was produced in the course of employment or profession
  • ▸The information is publicly available and specified by applicable regulations
13

Notice to EU and UK Residents: Future Expansion

Rooted is not yet available in the EU or UK. When we launch in those regions, this section will become fully operative and a complete GDPR/UK DPA Addendum will be published at rootedapp.plexodev.com/privacy-eu.
Legal BasisWhen We Rely on It
ConsentWhere you have given clear permission for a specific processing purpose (e.g., personalized devotionals, AI features). You may withdraw consent at any time.
Performance of a ContractWhere processing is necessary to create and maintain your Rooted account, grant access to the Services, and fulfill your subscription.
Legitimate InterestsWhere we have a genuine business interest that does not override your rights, such as improving the app, preventing fraud, and ensuring security.
Compliance with Legal ObligationsWhere processing is required to comply with applicable laws, respond to regulatory or law enforcement requests, or exercise our legal rights.
14

Notice to African Residents: Future Expansion

Rooted is not yet available in Africa. When we expand to African markets, this section will be updated with country-specific notices reflecting applicable data protection frameworks.

Several African countries have enacted modern data protection legislation, including Nigeria (NDPA 2023), South Africa (POPIA), Kenya (Data Protection Act 2019), and Ghana (Data Protection Act 2012). When Rooted launches in these regions, we will comply with the applicable national laws.

General principles that will apply across African markets:

  • ▸Lawful, fair, and transparent processing of personal information
  • ▸Collection limited to what is necessary for stated purposes
  • ▸Reasonable security safeguards proportionate to the risk
  • ▸Your right to access, correct, and request deletion of your personal data
  • ▸Cross-border transfer safeguards where your data leaves your home country

Other Legal Documents