App Privacy Policy

Effective June 25, 2026 · For the Rooted iOS application

About this policy

Rooted is a mobile application operated by Paleo Holdings, LLC, a Texas limited liability company ("we," "us," or "our"). This Privacy Policy describes the information the Rooted iOS application (the "App") collects, how we use and share it, and the choices you have. It is separate from the privacy policy that governs our website, growwithrooted.com.

By creating an account or using the App, you agree to the practices described in this policy.

Information you provide

When you create an account and use the App, we collect:

• Account information. Your email address and authentication details when you sign up, including through Sign in with Apple. If you use Sign in with Apple, you may choose to hide your email address, in which case Apple provides us with a private relay address rather than your real one.
• Profile details. A display name, if you provide one.
• Garden data. Information you enter about your plants and garden, including plant names and types, the beds or locations you create, care logs, reminders, notes, and activity such as watering and care streaks.
• Photos. Photos you take or upload of your plants for identification, health diagnosis, and your growth timeline.
• Garden location. A location you set for your garden so the App can provide climate-, weather-, and season-appropriate guidance. This is a stationary location you choose; the App does not track your device's location as you move.

Information collected automatically

When you use the App, we and our service providers collect certain information automatically:

• Usage and diagnostic data. We use error- and crash-reporting tools to keep the App stable, which may collect device type, operating system version, app version, and information about crashes or errors.
• Subscription data. When you purchase a subscription, our payments partner records your subscription status and transaction identifiers. Apple processes the payment itself; we do not receive or store your full payment card details.

How the App uses artificial intelligence

Several features of the App — including plant identification, plant health diagnosis, and the in-app assistant ("Sage") — are powered by third-party artificial intelligence services. When you use these features:

• The photos you submit for identification or health diagnosis, and the questions or messages you send to Sage, are transmitted to our AI provider to generate a response.
• This processing happens through a server we operate, which passes your request to the AI provider and returns the result to you.
• We use this data to provide the feature you requested. Our AI provider processes your request to generate a response and does not use the content you submit to train its models.

The App's plant identifications, health assessments, and assistant responses are provided for general informational purposes only. They may be incomplete or incorrect and are not a substitute for professional horticultural, agricultural, veterinary, or medical advice. Do not rely on the App to determine whether any plant, fruit, or other material is safe to eat, handle, or give to a person or animal.

How we use your information

We use the information we collect to:

• Provide, maintain, and improve the App and its features
• Create and manage your account and sync your garden data across your devices
• Deliver climate-, weather-, and season-appropriate guidance for your garden
• Process and manage your subscription
• Respond to your support requests
• Detect, prevent, and address technical issues, abuse, and security incidents
• Comply with legal obligations

Service providers

We share information with third-party service providers who process it on our behalf, under their own privacy and security commitments, only to provide services to us. These include providers for:

• Authentication and data storage — to host your account and garden data
• Artificial intelligence — to power identification, health diagnosis, and the assistant, as described above
• Subscription management — to manage in-app purchases and subscription status
• Plant reference data — to supply horticultural information about plants
• Weather data — to provide weather and climate information for your garden's location
• Error and crash reporting — to keep the App stable

We do not allow our service providers to use your information for their own purposes.

De-identified and aggregated data

We may create de-identified and aggregated information from the data in the App — for example, regional and seasonal planting and growing patterns that do not identify any individual user. We use this information to improve the App, develop new features, and understand gardening trends.

Where we maintain or use information in de-identified form, we commit to:

• Take reasonable measures to ensure the information cannot be associated with an individual user or household;
• Maintain and use the information only in de-identified form, and not attempt to re-identify it, except solely to test that our de-identification process works; and
• Contractually obligate any recipient of the information to comply with these same commitments.

We treat de-identified information as outside the categories of personal data described in this policy, consistent with applicable law.

How we share information

We do not sell your personal information in the conventional sense, and we do not share it for cross-context behavioral advertising. We may share information:

• With service providers, as described above
• In de-identified or aggregated form, as described above
• To comply with the law, a legal process, or a lawful government request
• To protect the rights, property, or safety of Rooted, our users, or others
• In connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor this policy or will notify you

Your choices and rights

You can:

• Access and edit much of your garden data directly within the App.
• Request a copy of your data. You can contact us to request a copy of your garden data.
• Delete your account. You can permanently delete your account and associated personal data directly within the App, in Settings. You may also contact us to request deletion.
• Manage your subscription through your Apple ID settings.

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to opt out of certain processing. Texas residents have rights under the Texas Data Privacy and Security Act, and residents of California, Colorado, Connecticut, Virginia, and other states may have similar rights under their respective laws. To exercise any of these rights, or to opt out of any sale or sharing of personal information, contact privacy@growwithrooted.com. We will not discriminate against you for exercising these rights.

Data retention

We retain your personal information for as long as your account is active or as needed to provide the App. If you delete your account, we will delete or de-identify your personal information within a reasonable period, except where we must retain it to comply with legal obligations, resolve disputes, or enforce our agreements. We may retain de-identified and aggregated information indefinitely.

Security

We take reasonable measures designed to protect your information, including encrypted transmission over HTTPS. However, no method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

Children

The App is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, please contact privacy@growwithrooted.com and we will delete it.

International users

The App is intended for use by residents of the United States. We do not currently direct the App to users in the European Union, United Kingdom, or other jurisdictions with comprehensive privacy regulations beyond U.S. state privacy laws.

Changes to this policy

If we materially change this Privacy Policy, we will update the effective date above and, where appropriate, notify you within the App or by email. Your continued use of the App after changes take effect constitutes acceptance of the updated policy.

Contact

Questions or requests regarding this Privacy Policy may be sent to:

privacy@growwithrooted.com
Rooted, operated by Paleo Holdings, LLC