Consumer Health Data Privacy Policy
This page covers the health details you can keep in Roof & Root: what they are, where they come from, what we do with them, who handles them, and how to see, delete or stop sharing them. It is written for people in Washington, Nevada and other states with consumer health data laws, and the same rules apply to everyone. Our Privacy Policy covers everything else.
Roof & Root is a household organizer, not a healthcare provider. You never have to enter health details; the app holds them only if you type or scan them in.
The health details the app can hold
- For the people in your family: medications (name, strength, directions, pharmacy, and the prescription number when you scan a label), allergies, doctors and their phone numbers, glasses and contact lens prescriptions, and health, dental and vision plan names and member IDs.
- Anything health-related you write yourself, such as a note, a doctor’s appointment on the calendar, or an extra detail on someone’s profile.
- For your pets: the vet’s name and phone number, vaccine records and the reminders made from them, and other vet details you add. Most health data laws cover only people, but we treat your pets’ records the same way.
Where they come from
Only from you or the people in your household. You type them in, scan something (a pill bottle, an insurance card, a glasses prescription or a vet record), or import a file from another app. We don’t buy health data, and we don’t collect it from anywhere else.
Please have a family member’s permission before you add their health details.
What we use them for
- To show them to you and the people in your household, on every phone signed in to it.
- To read a photo you scan, or a file you import from another app, and fill in the right fields, after you allow AI in the app.
- To answer your questions in Ask your home, after you allow AI in the app.
- To remind you when something is due, like a pet’s next vaccine.
We don’t use them for ads, we don’t use them to make guesses about you, and we don’t use them for anything you haven’t asked the app to do.
Who handles them
We don’t share your health details with any third party or affiliate. Two service providers handle them for us, under contract, only to run the features you use:
- Supabase stores your household’s records and keeps them in sync across phones, if you have an account. It also runs the server that passes your scans and questions to Anthropic. If you use the app without an account, your records stay on your phone.
- Anthropic, our AI provider, reads the photos you scan and the files you import from another app, and answers your Ask questions. With each question it answers, it gets a summary of your household that includes doctors, allergies, medications, glasses prescriptions and plan names, but never member IDs or prescription numbers. This happens only after the person using the feature taps Allow on their own phone, and Anthropic doesn’t train its models on it. The summary covers everyone in the household, so another member’s question includes your family’s health details too.
People you invite into your household see the same records you do, health details included. The household owner can remove a member at any time.
No one else gets your health details from us. Our other service providers (Apple, RevenueCat, Resend, RentCast, and Cloudflare, which hosts this website) never receive them. Supabase and Anthropic use their own providers to run their services, such as the networks that carry your data to them. When you export a backup or share something from the app yourself, it goes only where you send it. The one exception is if a law or court order requires us to hand something over.
No third party collects your health details over time or across other apps or websites through Roof & Root.
We never sell them
We don’t sell your health details, or any other personal information.
How long we keep them
As long as your account is open. When you delete your account, we erase it from our servers right away, along with every household where no other adult remains (you were the only member, or everyone else has a kid account), family health details included. A household you share with another adult keeps its records, family health details included, for the people in it. On your phone, everything stays until you delete it or the app.
Your rights, and how to use them
- See them. They’re all in the app: open the Root tab, then a person or a pet. For a copy of your records, use Settings → Export a backup. Photos and documents aren’t in that file, so email us for copies. To confirm what we hold, or for a list of everyone who handles it, email us.
- Delete them. Clear a detail in the app, and the change reaches our servers the next time your phone syncs. Deleting a whole person, pet, note or event removes it from every phone and erases its contents from our servers; only a note that it was deleted stays, so the other phones know to remove it. From version 1.2, its photos and documents are deleted with it; email us to remove any left by an older version. To erase everything from our servers, delete your account (a household you share with another adult keeps them): Settings → your account at the top → Delete account. Or email us and we’ll delete exactly what you ask for, and pass the request on to the service providers above.
- Withdraw your consent. Nothing goes to Anthropic unless someone scans something, imports a file from another app, or asks a question, after tapping Allow on their own phone. Not using those features, or deleting the app, ends your own permission. But each Ask question carries the whole household’s health details, so if you share a household, another member’s questions still include yours. To stop that, clear the details from the profile, or ask everyone in the household to stop using Ask. To stop us storing them, clear them from the record they’re in (or delete the whole record, which erases its contents from our servers), email us and we’ll erase them, or delete your account.
To make a request by email, write to info@roofandroot.app from the address on your account, so we know it’s you. We’ll never ask for your password. Requests are free, and we answer within 45 days. If we need more time, up to 45 more days, we’ll tell you why.
If we say no, you can appeal
If we turn down a request, we’ll tell you why. To appeal, reply to that email, or write to info@roofandroot.app with “Appeal” in the subject. We’ll answer in writing within 45 days, saying what we did or didn’t do, and why. If we still say no, you can file a complaint with the Washington State Attorney General, or with your own state’s attorney general.
Changes to this policy
If we ever want to collect a new kind of health detail, use one for something new, or have someone new handle them, we’ll update this page and ask for your permission in the app first. For any other material change, we’ll update the dates above and let you know in the app or by email.
Contact us
Leverage The Struggle, LLC
1065 Cling Way
Calimesa, CA 92320
info@roofandroot.app