Privacy Policy
A plain-language summary of how RootBound handles your family’s record today.
This page describes what the product actually does today. Treat it as an honest summary, not final legal terms.
What we hold
The family record you and your family enter — names, relationships, dates, stories, photos and events — plus the account details needed to sign in.
Contact details stay private
Phone numbers and addresses are not shown to other members, not included in search, and not written into audit history. They move only when their owner allows it, and every grant can be withdrawn.
Membership is by invitation
Nobody finds your family by searching for it. People join through an invitation link or a printed QR card, and claim their own profile.
Leaving keeps the record
Deleting an account or leaving a family unclaims the person. It never deletes the person or their relationships — genealogy outlives accounts.
Face matching is opt-in
Photo face recognition runs only for families that turn it on, and a suggestion is never treated as fact: a person confirms every association. A provider processes images on our behalf; the feature sits behind an interface and can be swapped.
Still to write
The formal version — retention periods, how to request a full export or deletion, and exactly who to reach — will replace this draft when it is ready.
Draft last revised October 2026.
