Rootlet - Privacy Policy

Last updated: August 7, 2026

Rootlet ("we", "our", "the app") is a children's educational app designed for ages 1-4. We take children's privacy very seriously and are committed to complying with the Children's Online Privacy Protection Act (COPPA) and the General Data Protection Regulation (GDPR).

1. Information We Collect

We do not collect any personal information from children.

Rootlet does not require account creation, login, or any form of registration. All games and activities work fully offline. The only network communication the app performs is anonymous purchase processing through Apple, Google, and RevenueCat (see sections 4 and 5). It never includes any personal information about you or your child.

2. Data Stored on Device

The app stores the following data locally on the device only:

• Game progress and interaction counts
• App settings (language, sound preferences, timer duration)
• Child profile (a first name and an age group, for example "2-3 years") - optional, entered exclusively by a parent or guardian through a section protected by a parental gate (math challenge). The exact date of birth is never stored.
• Nap calculator setting (the child's birth month, year and month only; the exact day is never stored) - optional, parent-entered
• Premium purchase status

This data stays on the device and is not accessible to us. The app itself never uploads it to any server or cloud service. On Android, the app opts out of the system's automatic backup. On Apple devices, your own device backup (for example an iCloud backup) may include app data; that backup belongs to you and is controlled in your device settings. All data is protected by the device's built-in encryption.

3. Advertising

Rootlet contains no advertising. The app displays no ads of any kind - no banners, no interstitials, no rewarded video. It integrates no advertising SDKs (including no Google AdMob) and performs no ad-related data collection.

4. In-App Purchases

Rootlet offers an optional one-time purchase that unlocks all premium games. The exact price in your currency is always shown in the store before you confirm. The purchase is processed by Apple (App Store) or Google (Google Play). We never receive, store, or process your payment details.

In-app purchases are protected by a parental gate (math challenge) to prevent accidental purchases by children.

5. Third-Party Services

Rootlet uses a single third-party service:

• RevenueCat - manages purchase receipts and entitlements so that the premium unlock can be delivered and restored on a new device. When the app starts and when a purchase or restore is made, the app sends RevenueCat: a randomly generated anonymous identifier, purchase receipt data from Apple or Google, and basic technical information (platform and app version). This purchase data is not linked to your identity, is never used for advertising or tracking, and contains no information about your child. RevenueCat processes it on our behalf as a data processor. Privacy policy: revenuecat.com/privacy

No third-party analytics, advertising, tracking, or profiling services are used. No personal data about children is shared with any third party.

6. Parental Controls

Rootlet includes a parental gate (math challenge) that restricts access to:

• App settings and preferences
• In-app purchase options
• External links (if any)

Parents can control session duration using the built-in timer.

7. COPPA Compliance

Rootlet is designed to comply with COPPA:

• No personal information is collected from children under 13
• No advertising, behavioral tracking, or profiling of any kind
• A parental gate (math challenge designed to be solvable only by adults) protects all settings, data entry, purchases, and external navigation
• The optional child profile is entered by a parent, never leaves the device, and is never transmitted to anyone
• The only third-party service used (RevenueCat) receives anonymous purchase data only and no personal information about children

8. GDPR Compliance

For users in the European Economic Area and the United Kingdom:

• Data controller: Wojciech Włodarczyk, contact: voytecode@gmail.com
• The child profile, game progress, and settings never leave your device; we have no access to them and do not process them
• Anonymous purchase data is processed through RevenueCat solely to deliver and restore the purchase you requested. Legal basis: performance of a contract (Art. 6(1)(b) GDPR)
• You can delete all data stored on the device by uninstalling the app. To request deletion of the anonymous purchase records held by RevenueCat, contact us at voytecode@gmail.com
• You have the right of access, rectification, and erasure, and the right to lodge a complaint with a supervisory authority (in Poland: the President of the Personal Data Protection Office, UODO)

9. Parental Rights & Data Deletion

Parents and guardians have the right to:

• Review any data stored by the app (accessible through the parental gate settings)
• Delete all app data by uninstalling the app or clearing app data in device settings
• Request deletion of the anonymous purchase records held by RevenueCat by contacting us
• Contact us at voytecode@gmail.com with any questions about their child's data

Uninstalling Rootlet removes all data stored on the device. We operate no servers of our own; the only records that exist outside the device are the anonymous purchase records at RevenueCat described in section 5.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy or our practices, please contact us at:

Data controller: Wojciech Włodarczyk
voytecode@gmail.com