Privacy Notice

Last updated: May 2026

1. Who we are

evolveapp ("we", "us") operates the Rooted app and is the data controller for the personal data described below.

2. Personal data we collect

• Account data — name, email address, login credentials (or OAuth identifier if you sign in with Google).
• Profile and usage data — onboarding answers, mentor selection, habits, journal/intention text, XP, streaks, and other in-app activity you create.
• AI conversation data — the messages you send to mentors and the responses you receive, used to provide and improve the service.
• Calendar data — if you connect Google Calendar, we write events to a dedicated "Rooted Habits" calendar. We do not read your private events.
• Device and technical data — IP address, device identifiers, browser type, and basic telemetry for security and reliability.
• Support communications — messages you send our support team.

3. Why we use it (purposes & legal bases)

• Create your account and provide the service — performance of contract.
• Personalise mentors, habits, and insights — performance of contract.
• Send reminders and product updates — legitimate interests / consent where required.
• Prevent fraud, abuse, and secure the service — legitimate interests / legal obligation.
• Comply with tax and accounting laws — legal obligation.

4. Who we share it with

• Paddle.com — our Merchant of Record. Paddle processes payments, manages subscriptions, handles tax compliance, refunds, and issues invoices. See Paddle's Privacy Notice.
• Hosting and backend providers — cloud hosting, database, and authentication providers used to run Rooted.
• AI model providers — the AI gateway and underlying model providers used to generate mentor responses. Conversation content is sent to these providers to produce a response.
• Google — if you sign in with Google or connect Google Calendar.
• Professional advisers and authorities — where required by law or to protect our rights.

5. International transfers

Some of our providers are located outside the UK / EEA. Where personal data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Data retention

We keep personal data for as long as your account is active, plus a reasonable period afterwards to comply with legal obligations and resolve disputes. When no longer needed, data is deleted or anonymised.

7. Your rights

Subject to applicable law (including UK GDPR / EU GDPR), you have the right to access, rectify, erase, restrict, or port your personal data; to object to processing; to withdraw consent; and to lodge a complaint with your local supervisory authority. We aim to respond to requests within one month. To exercise your rights, contact evolveapp at hellosupportevolvelogin@gmail.com.

8. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls, and provider-level security — to protect your personal data. No system is perfectly secure; please use a strong, unique password.

9. Cookies and similar technologies

Rooted uses cookies and local storage that are strictly necessary to keep you signed in and to remember preferences. We do not use advertising cookies. Paddle may set cookies during checkout to process your payment.

10. Changes to this notice

We may update this notice from time to time. Material changes will be notified in-app or by email.

11. Contact

Questions about privacy or your data: hellosupportevolvelogin@gmail.com. See also our Terms and Refund Policy.