← Back

Privacy Policy

Last updated: October 2, 2026

Root & Whole (“we”, “us”) is a small independent service for reading aphorisms and setting them on your own photographs. This page explains what we collect, why, and the choices you have. Questions: [email protected].

What we collect

• Your email address, when you sign in. We use it to send your sign-in code and to identify your account. There are no passwords.
• Your activity in the app: the quotes you save or like.
• Technical logs: our server records the pages requested, your IP address, browser type and referring page. We use these for basic traffic statistics, abuse prevention and debugging.
• Purchase information, if you buy something: our payment provider handles your payment details. We never see or store your card number; we receive confirmation that the payment succeeded and the email associated with it.

What we do not collect

• Your photos. When you make a picture, the photo is processed inside your own browser. It is not uploaded to our servers.
• We do not ask for your phone number, and we do not sell your personal information.

Cookies and local storage

• A sign-in token is kept in your browser’s local storage so you stay signed in.
• A first-party cookie remembers your device (for example, to keep a “like” attached to it). We do not use advertising or cross-site tracking cookies.

Who we share data with

Only service providers that help us run the site: hosting and network (Cloudflare and our server host), email delivery (Resend), and payments (Creem, our Merchant of Record, which processes your payment details directly; we never see your card number). They process data on our behalf and only for those purposes. We may also disclose information if the law requires it.

Where your data is stored

Our servers are in the United States. If you use the service from elsewhere, your data will be transferred to and processed in the United States.

How long we keep it

We keep your account information while your account exists. Server logs are kept only as long as needed for statistics, security and debugging. You can ask us to delete your account and associated data at any time.

Your choices

You can ask to access, correct, export or delete your data, or object to how we use it, by emailing [email protected] from the address on your account. We will respond within a reasonable time.

Children

The service is not directed to children under 13, and we do not knowingly collect their personal information.

Changes

If we change this policy in a meaningful way, we will update the date above and, where appropriate, tell you by email or on the site.