ReRoot Privacy Policy

ReRoot App Inc. (“ReRoot,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use ReRoot, including our website at reroot.app and the ReRoot mobile apps for iOS and Android (together, the “Platform”).

By using the Platform, you agree to the practices described in this Privacy Policy.

This Privacy Policy should be read together with our Terms of Use, which govern your use of the Platform.

We collect the following categories of personal information:

Account Information

• Full name
• Email address
• Password (stored in encrypted form)
• Whether you joined as a member looking for services or as a service provider
• One-time email verification codes and password reset links we send you, which expire after use or after a short time

Profile Information (Providers)

• Professional field and professions
• Languages spoken
• Country of origin
• Location (city, state, country) and the map coordinates for that location
• Professional bio
• Profile photo
• Phone number, and your choice of whether it is shown on your profile

Profile Information (Members)

• Country of origin
• Current location and the map coordinates for that location
• Profile photo
• Phone number, and your choice of whether it is shown on your profile

Messages

• The content of messages you send and receive through the Platform
• Who sent and received each message, when it was sent, and whether it has been delivered and read

Report and Block Information

• The identity of the reporting user (associated with their account)
• The user, provider, profile, message, or content being reported
• The report category selected (e.g., harassment or hate, inappropriate content, scam or fraud, spam, or something else)
• Any optional details submitted in the free-text field
• Timestamp and status of the report
• The accounts you block and any reason you give when blocking

Notification and Communication Settings

• If you allow notifications in a ReRoot mobile app: the push notification token for your device and whether it is an iOS or Android device
• Your push notification and email preferences
• Records of which reminder, welcome, announcement, and other emails or notifications we have sent you, whether they were delivered, and, for some emails, whether they were opened

Referral Information

• If you sign up through another member’s referral link or code, the account that referred you
• If you take part in a ReRoot ambassador program, the providers you refer, their review status, and the number of times your referral link is opened

Location From Your Device

If you allow it, the ReRoot mobile apps and the website can use your device’s location to help set your profile’s location and, in the apps, to show professionals near you on the map. We only access your device’s location after you grant permission in your device or browser. See Section 12 (Map and Location Data).

Usage Information

• IP address and browser type
• Pages visited and search queries entered on the Platform
• Device and operating system information
• Analytics data collected via Google Analytics and Vercel Analytics on the website

Crash and Error Reports (Mobile Apps)

When a ReRoot mobile app crashes or encounters an error, it sends a technical report to our error-monitoring provider, Sentry. These reports contain technical data such as your device model, operating system and version, the app version, and details of the error. They are linked to your ReRoot account ID, but not to your name or email address. The app removes email addresses and sign-in tokens from these reports before they are sent, and does not include the content of your messages or what you type.

We do not currently collect payment information. If we introduce paid features in the future, we will update this Policy accordingly.

We use the information we collect to:

• Create and manage your account, including verifying your email address
• Display provider profiles on the Platform directory and map
• Enable users to search for and contact providers, including by sending and delivering messages
• Show you professionals near you and from your country of origin
• Improve and personalize the Platform experience
• Feature provider profiles on ReRoot’s social media channels to help promote their services
• Send service-related communications, including by email, push notification and, where you have consented, by SMS or phone (e.g., account updates, platform notifications)
• Send the notifications you can control described in Section 9, such as new message alerts and weekly updates about new professionals
• Notify ReRoot’s team when a new account is created (including the new user’s name, email address, account type, whether they signed up on the website or in an app, and who referred them, if anyone)
• Track referrals and, where applicable, ambassador program activity
• Diagnose and fix crashes and errors in the mobile apps
• Review and investigate reports submitted about users, providers, or content, and take appropriate action under our Terms of Use
• Comply with legal obligations
• Detect and prevent fraud or misuse of the Platform

We do not sell your personal information to third parties.

If you register as a service provider, the following information will be publicly visible to any visitor of the Platform, including unauthenticated users:

• Name
• Profession and field of expertise
• Languages spoken
• Country of origin
• Location (city, state, country), including on the map
• Professional bio
• Profile photo

Phone Number: Your phone number is shown on your profile only if you choose to show it, and only to users who are signed in to an account. You can hide it at any time in Settings, in which case other users can contact you by message only.

Map Location: Visitors who are not signed in see only an approximate area on your profile map. Signed-in users see your location on the map in more detail.

Members who are not service providers also have a profile that other users can see, which can include their name, profile photo, country of origin, and location.

By submitting this information, you consent to its display on the Platform and, for providers, to ReRoot featuring your profile on its social media channels for promotional purposes. You may update or remove this information at any time by editing your profile or contacting us.

Messages you send through the Platform are stored on our servers so that we can deliver them and show your conversation history on the website and in the apps.

• Messages are automatically screened for certain objectionable language, and a message that fails this check is not sent.
• When you receive a message, we may notify you by email and, in the mobile apps, by push notification. These notifications include the sender’s name and may include a short preview of the message.
• ReRoot personnel may review a message when it is reported, and may otherwise access messages where needed to investigate misuse, enforce our Terms of Use, or comply with the law.
• If you delete your account, the messages you sent and received are deleted, including from the other person’s conversation history.

Service Providers and Infrastructure

We use third-party services to operate the Platform. These providers may process your personal data on our behalf. They are listed in Section 7 (Service Providers).

Report Data

Information submitted in a report is shared internally with ReRoot personnel responsible for reviewing reports and enforcing our Terms of Use. The identity of the reporting user is not disclosed to the user, provider, or account that is the subject of the report. ReRoot may share limited, non-identifying information from a report with the reported party to give them an opportunity to respond, but will not reveal who filed the report.

Legal Requirements

We may disclose your information if required by law, subpoena, court order, or government authority, or to protect the rights, property, or safety of ReRoot, our users, or the public.

Business Transfers

If ReRoot is acquired or merged with another entity, your information may be transferred as part of that transaction. We will notify users of any such change via the Platform.

We use the following third-party services to operate the Platform:

• Vercel Inc. — website and server hosting, and Vercel Analytics
• Supabase — database and backend infrastructure
• Amazon Web Services (AWS) — storage of profile photos (Amazon S3)
• Google LLC — Google Maps Platform (maps, place search, and geocoding) and Google Analytics
• Resend — delivery of the emails we send you
• Expo (650 Industries, Inc.) — delivery of push notifications and app updates for the ReRoot mobile apps
• Sentry (Functional Software, Inc.) — crash and error reporting for the ReRoot mobile apps

All third-party processors are contractually obligated to protect your data and may only use it for purposes we specify.

Other Third-Party Services

• Push notifications are delivered to your device through Apple Push Notification service (for iOS) or Firebase Cloud Messaging (for Android), operated by Apple and Google.
• When you search for an address or choose a location on a map, the text you type or the point you choose may be sent to the OpenStreetMap Nominatim geocoding service to look up the address.
• If you download a ReRoot app from the Apple App Store or Google Play, Apple or Google processes information about that download under its own privacy policy.

We use the following analytics tools on the website to understand how the Platform is used:

• Google Analytics — collects anonymized usage data including page views, session duration, and general location. You can opt out via the Google Analytics Opt-Out Browser Add-on at tools.google.com/dlpage/gaoptout.
• Vercel Analytics — collects anonymized performance and usage metrics. Data is processed by Vercel Inc.

The ReRoot mobile apps send crash and error reports to Sentry, as described in Section 2. The apps do not use Google Analytics or Vercel Analytics.

See Section 20 (Cookies) for the cookies and similar technologies these tools use.

Account and Service Emails

We send service-related emails such as email verification codes, password reset links, welcome emails, and account notices. These are necessary for operating your account and cannot be opted out of while your account is active.

Notifications You Control

Depending on your settings, we may also send you:

• Messages — an email or push notification when someone messages you, and reminders about unread messages.
• New professionals from your country — a weekly email or push notification about professionals from your country of origin who recently joined near you. We use your country of origin and location to choose who to include.
• Profile reminders — reminders to complete your profile if it is missing details. Some reminder emails include a link that signs you in to your account, so please do not forward them.
• Announcements and news about ReRoot — occasional updates by email or push notification.

How to Turn Notifications Off

• On the website, go to Settings to turn message emails, weekly new-professional emails, and profile reminders on or off.
• In the ReRoot mobile apps, go to Settings → Notifications to turn each topic on or off for both push and email, or use “Pause all notifications” to stop push notifications and these emails at once. Account and security emails are still sent.
• You can also turn off push notifications for ReRoot at any time in your device’s settings.
• Our notification emails include a link to manage your email preferences or unsubscribe.
• You can also contact us at connect@reroot.app to stop any communication that is not required to operate your account.

Marketing Emails

If we send marketing or promotional email campaigns, each one includes a clear way to unsubscribe, in compliance with the CAN-SPAM Act. You may unsubscribe at any time using that link or by contacting us.

SMS and Phone Communications

If you provide your phone number and opt in where prompted, we may send you text messages or call you regarding your account, platform notifications, and, if introduced in the future, promotional offers, in accordance with the Telephone Consumer Protection Act (TCPA). Message and data rates may apply. You may opt out of non-essential SMS communications at any time by replying STOP to any message or by contacting connect@reroot.app. We do not currently send SMS or phone communications; this section will apply once such features are introduced.

The Platform allows registered, logged-in users to report other users, providers, profiles, messages, or content that they believe violates our Terms of Use, and to block other users. This section explains how this information is handled; the reporting and blocking process itself is described in our Terms of Use.

• Reports may only be submitted by users who are logged into an account. We associate each report with the reporting user’s account internally, but this identity is not disclosed to the reported party.
• Report content — including the category selected, any optional details you provide, and the item being reported — is accessible to ReRoot personnel involved in reviewing reports and enforcing our Terms of Use.
• When you block someone, we record the block and automatically file a report about that account, and ReRoot’s team is notified by email so it can review it. The person you block is not told who blocked them.
• We aim to review reports within five (5) to seven (7) business days of submission.
• We may retain report records, including after a report is resolved, for as long as necessary to enforce our Terms of Use, defend against disputes, or comply with legal obligations, consistent with Section 14 (Data Retention).
• We may contact the reporting user for additional information needed to evaluate a report.

We do not currently collect biometric identifiers or biometric information (such as facial geometry, fingerprints, or voiceprints) through the Platform. If we introduce features that collect biometric data in the future — for example, photo or video verification — we will update this Policy in advance and comply with applicable law, including the Illinois Biometric Information Privacy Act (BIPA), which may require obtaining your prior written consent and publishing a data retention and destruction schedule before any such collection begins.

The Platform uses Google Maps and Leaflet on the website, and Google Maps in the mobile apps, to display provider locations and power location-based search. When you use location features, your search queries and location input may be transmitted to Google LLC and processed according to Google’s Privacy Policy, available at policies.google.com/privacy. Address searches may also be sent to the OpenStreetMap Nominatim service. ReRoot does not control how these third parties process this data.

Location Permission

• The ReRoot mobile apps ask for permission before using your device’s location, and only use it while you are using the app.
• If you allow it, your location can be used to set the location on your profile and to center the map on where you are so you can find professionals near you.
• On the website, your browser asks for your permission before sharing your location. The website uses it when you choose to use your current location, and, if you have already given permission, the professional guide search may use it to fill in your area.
• You can decline or turn off location access at any time in your device or browser settings and enter your location manually instead.

ReRoot is based in Illinois, United States. Our service providers listed in Section 7 may process and store your data on servers located in the United States or other countries. By using the Platform, you consent to the transfer of your information to these locations, which may have different data protection laws than your country of residence.

We retain your personal information for as long as your account is active or as needed to provide you services. We may retain certain data as required by law or for legitimate business purposes such as fraud prevention. Report records are retained as described in Section 10 (Reporting, Blocking, and Report Data).

You can delete your account at any time in Settings on the website or in the ReRoot mobile apps, or by contacting connect@reroot.app. When you delete your account, we delete your account and profile information, the messages you sent and received, your blocks, your push notification tokens, your notification and email preferences, and the reports you filed. Account deletion cannot be undone.

You can control much of your information directly on the Platform:

• Edit your profile, including your name, photo, bio, languages, professions, country of origin, and location, at any time.
• Choose whether your phone number is shown on your profile in Settings.
• Block or report another user from their profile or from a conversation, and unblock people you have blocked in Settings.
• Choose which emails and push notifications you receive, as described in Section 9.
• Allow or deny location and notification permissions in your device or browser settings.
• Delete your account in Settings on the website or in the apps, as described in Section 14.

To request a copy of your information or a correction you cannot make yourself, contact us at connect@reroot.app.

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your personal information (subject to legal obligations)
• Opt out of certain uses of your information

To exercise any of these rights, contact us at connect@reroot.app. We will respond within 30 days.

California Residents: Under the California Consumer Privacy Act (CCPA), you have the right to know what personal information is collected, the right to delete, and the right to non-discrimination for exercising your rights.

Illinois Residents: We comply with applicable Illinois privacy laws, including the Illinois Personal Information Protection Act (PIPA) and, where applicable, the Illinois Biometric Information Privacy Act (BIPA).

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. Passwords are stored in encrypted form. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

The Platform is not intended for anyone under the age of 16 (or older, where local law requires a higher age without parental consent). We do not knowingly collect personal information from anyone under 16. If we become aware that we have collected such information, we will take steps to delete it promptly.

The Platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

We use cookies and similar technologies to operate the Platform, including:

• A sign-in cookie that keeps you signed in to the website. The mobile apps store your sign-in securely on your device instead.
• A referral cookie that remembers, for up to 30 days, the referral link you followed so that the referral can be credited when you sign up.
• Cookies set by Google Analytics to measure how the website is used.
• Browser storage used to remember display choices, such as which tab you last opened.

You can block or delete cookies in your browser settings. If you block the sign-in cookie, you will not be able to stay signed in to the website.

If you need this Privacy Policy in a different format, contact us at connect@reroot.app. Our Accessibility Statement explains how we work to make the Platform usable by everyone.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Policy on the Platform with an updated “Last Updated” date. Your continued use of the Platform after changes are posted constitutes your acceptance.

If you have any questions or concerns about this Privacy Policy, please contact us at:

ReRoot App Inc.
Chicago, Illinois, United States
Email: connect@reroot.app