Rooted & Remedied
Privacy policy
Last updated: October 28, 2026
Rooted & Remedied An app published by Unaccompanied Designers LLC
Effective date: October 4, 2026 Last updated: October 28, 2026
This policy explains what Rooted & Remedied collects, why, who it is shared with, and what you can do about it. It covers the Rooted & Remedied mobile application (the "App"). Unaccompanied Designers LLC ("we," "us," "our") is the controller of the information described here.
We do not sell your personal information, and we do not share it for advertising purposes.
1. Information we collect
1.1 Information you give us
Account information. Your email address, your display name, and a password. If you sign in with Google or Apple instead, we receive your email address and a stable identifier from that provider rather than a password. If you use Apple's Hide My Email, we receive only the relay address Apple generates, never your real one.
Profile photo. Optional. If you set one, the image file is stored on our servers.
Content you create in the App:
- Pantry — remedies you have made, including the name, the date made, shelf life and calculated expiry, your notes, and any photo you attach
- Ingredients on hand — the ingredients you track so the App can tell you what you can make
- Shopping list — items you add
- Favorites — remedies you save
- Collections — custom groupings you create, and their names
- Personal ratings — your private record of whether a remedy worked for you
- Preferences — notification settings, theme choice, and your time zone and preferred reminder hour
Support correspondence. If you email us, we keep the message and our reply.
1.2 Information collected automatically
Account activity timestamps — when your account was created and last updated.
Server logs. Our hosting provider records standard technical information when the App contacts our servers, including IP address, timestamp, and the request made. We use these only to keep the service secure and to diagnose faults — never to build a profile of you or to analyse your behaviour.
They are held by our hosting provider for a short, fixed window set by our hosting plan, in no case longer than 30 days, and are then deleted automatically. We do not export them, copy them into any longer-term store, or combine them with your account data.
That is the extent of automatic collection. See Section 2 for what we deliberately do not collect.
1.3 Device features the App uses
Microphone and speech recognition — only when you tap the voice-search control. Your speech is converted to text so it can be used as a search term. On Apple devices this uses Apple's speech recognition, and on Android the device's recognition service; depending on your device settings, that processing may happen on the device or on the platform provider's servers under their privacy policy. We never receive or store the audio. Only the resulting search text reaches the App, and we do not log your searches.
Camera and photo library — only when you choose to attach a photo to a remedy you have made, or set a profile photo. We access only the image you select. Photos you attach are stored on our servers as part of your content.
Notifications — the App schedules reminders about expiring pantry items locally on your device. These are generated by your device from data already on it. We do not operate a push-notification service and we do not collect push tokens.
1.4 Purchases
If you buy a subscription or Legacy Lifetime, the purchase itself is processed by Apple or Google. We never receive or store your payment card number, billing address, or any other payment credential.
We do receive and store, through our subscription-management provider, your entitlement status: which tier you hold, whether it is active, where it was purchased, and whether it was granted promotionally. This is linked to your account identifier so the App knows what to unlock.
1.5 Health information
The App is an educational reference about traditional remedies. We do not ask for, and the App does not integrate with, any health record, HealthKit, Google Fit, or similar health data source.
Content you choose to enter — which remedies you made, and your private ratings of whether they worked — is stored because the App's features require it. We recognise that such entries may reveal something about your interests or wellbeing. We treat them as your private content: they are visible only to you, they are never used for advertising, they are never sold, and they are deleted when you delete them or close your account.
2. What we do not collect
To be explicit, because it is as important as the list above:
- No analytics. The App contains no analytics SDK. We do not track screens viewed, searches performed, features used, or session length.
- No crash or performance reporting SDK.
- No advertising identifiers, no tracking across apps or websites, no ad networks.
- No location data. The App never requests location permission.
- No contacts, calendar, or device file access beyond the single image you choose to attach.
- No push notification tokens.
If this changes, we will update this policy and, where required, ask your permission first.
Do Not Track and Global Privacy Control. Some browsers and devices send a "Do Not Track" or Global Privacy Control signal. There is no single agreed standard for interpreting these signals, and we do not respond to them — because there is nothing for them to switch off. We do not track you across other apps or websites, we do not sell your personal information, and we do not share it for targeted advertising. Our practices are the same whether or not such a signal is present.
3. How we use your information
| Purpose | What it uses |
|---|---|
| Create and maintain your account | Email, name, password or sign-in provider identifier |
| Provide the App's features | Your pantry, ingredients, shopping list, favorites, collections, ratings |
| Calculate freshness and schedule expiry reminders | Pantry dates, your time zone, your reminder preferences |
| Unlock the tier you paid for | Entitlement status from our subscription provider |
| Understand subscription performance in aggregate | Purchase history and entitlement status from our subscription provider |
| Send transactional email (password reset, email confirmation) | Your email address |
| Respond to support requests | Your correspondence and account details |
| Keep the service secure and troubleshoot faults | Server logs |
| Comply with law | As required |
We do not use your information for profiling, automated decision-making with legal effect, or advertising.
4. Who we share it with
We do not sell your personal information. We do not share it for cross-context behavioural advertising. We share it only with the service providers below, each of which processes it on our behalf under contract and for no other purpose:
| Provider | What it handles | Why |
|---|---|---|
| Supabase | Database, authentication, file storage | Stores your account, your content, and your photos |
| RevenueCat | Subscription and entitlement status | Tells the App which tier you hold |
| Resend | Transactional email delivery | Sends password resets and confirmations |
| Google Workspace | Support mailbox | Receives and stores your support emails |
| Apple · Google | Payment processing, and sign-in if you use it | Handles purchases; we receive confirmation, never payment details |
We may also disclose information where we are legally required to, where necessary to protect the rights or safety of a person, or in connection with a merger, acquisition, or sale of assets — in which case we will give notice before your information becomes subject to a different policy.
5. Where your information is stored
Our database, authentication, and file storage are hosted by Supabase in the United States, in Amazon Web Services' US East (Northern Virginia) region — us-east-1. Our transactional email provider and our support mailbox also operate in the United States.
If you are located outside the United States, your information will be transferred to and processed in the United States, where data protection law may differ from that of your country. By using the App you understand that this transfer is necessary to provide the service.
6. How long we keep it
We keep your account and content for as long as your account is open.
When you delete your account, your profile, pantry, ingredients, shopping list, favorites, collections, ratings, and photos are deleted. Backups made in the ordinary course may retain copies for a short period before rolling off. We may retain a limited record where the law requires it, or where it is necessary to resolve a dispute or enforce our agreements.
Support correspondence is kept in our support mailbox.
7. Your choices and rights
Regardless of where you live, you can:
- Access and correct your profile information from within the App
- Edit or delete any content you have created, at any time
- Delete your account, from the profile screen in the App or by following these instructions
- Turn notifications off, in the App's settings or your device settings
- Request a copy of your data. We do not yet offer a self-service export. Email support@rootedandremedied.com and we will send you a copy of the information associated with your account.
To exercise any of these, or if you have a question, email support@rootedandremedied.com. We will respond within the time the applicable law allows, and within 45 days in any case. We will not discriminate against you for exercising a privacy right.
7.1 United States — state privacy rights
If you live in California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Tennessee, or another state with a comprehensive privacy law, you have the right to:
- Know what personal information we collect, use, and disclose — Sections 1 through 4 describe this
- Access a copy of it
- Correct inaccurate personal information
- Delete your personal information
- Opt out of sale or sharing for targeted advertising — we do not sell or share for advertising, so there is nothing to opt out of
- Appeal a refusal of any request, and be told how
- Be free from discrimination for exercising these rights
Under the California Consumer Privacy Act, we confirm that in the preceding twelve months we have not sold personal information and have not shared it for cross-context behavioural advertising.
The CCPA requires opt-in consent before selling or sharing the personal information of a consumer under 16. Because we do not sell or share personal information at all, that requirement does not arise for us. Our own rule is stricter than either threshold: the App requires every user to be 18 or older, as described in Section 8.
You may use an authorised agent to make a request; we may ask you to verify that you authorised them.
7.2 Outside the United States
If you are in the European Economic Area, the United Kingdom, or another jurisdiction with comparable law, you also have the right to object to or restrict processing, to data portability, and to lodge a complaint with your supervisory authority. Our legal basis for processing is the performance of our contract with you (providing the App), our legitimate interest in keeping the service secure, and your consent where we ask for it — for example, for microphone or photo access.
8. Children
The App is intended for adults. You must be 18 or older to create an account, as stated in our Terms of Service.
We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete the account and its contents. If you believe a minor has created an account, email support@rootedandremedied.com and we will act promptly.
9. Security
Your content is protected by database row-level security, so your records are reachable only by your own authenticated session. Traffic between the App and our servers is encrypted in transit. Passwords are stored only as salted hashes — we cannot read them. Administrative access to user records is limited to authorised staff and restricted to what support requires.
No system is completely secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and the relevant authorities as the law requires.
10. Changes to this policy
We may update this policy. If we make a material change — for example, collecting a new category of information or adding a new provider — we will update the date above and give reasonable notice in the App or by email before it takes effect. Continued use after the effective date means you accept the updated policy.
11. Contact us
support@rootedandremedied.com
Unaccompanied Designers LLC d/b/a Rooted & Remedied
This policy is also published at unaccompanieddesigners.com/products/rooted-and-remedied/privacy