Privacy Policy

• Your assessment answers — including mental health screening responses — are private to your account by default.
• We do not sell your information, and we run no advertising or third-party analytics trackers. We measure how the site is used ourselves, anonymously.
• Nobody at Grounded Initiative Holdings LLC reads your results unless you explicitly share them, and you can withdraw that at any time.
• Rooted is not a healthcare provider and is not covered by HIPAA. That is explained below.
• Nobody monitors your results. Rooted cannot respond to an emergency.

Rooted is operated by Grounded Initiative Holdings LLC, based in Washington, DC. You can reach us at info@groundinitiativeproject.com.

HIPAA applies to healthcare providers who bill electronically, health plans, healthcare clearinghouses, and the vendors acting on their behalf. Rooted is a wellness and education platform. We do not provide medical care and we do not bill insurance, so we are not a HIPAA covered entity, and the information you give us is not protected health information under that law.

We tell you this plainly because health apps are often assumed to be HIPAA-covered when they are not. Other laws do apply to us, including the FTC Act and state privacy laws, and the commitments on this page are ones we are accountable for.

Account information. Your email address, and a display name if you provide one.

Assessment responses. Your answers across the seven wellness domains, your goals, interests, and access notes, and your responses to standardized screening questionnaires — the PHQ-9 (depression), GAD-7 (anxiety), and PC-PTSD-5 (trauma). This includes your answers to questions about self-harm and suicidal thoughts.

Activity you create. Saved plans, workout logs, nutrition goals, scheduled activities, saved quotes, service reviews, and referrals.

Payment information. Handled by Stripe. We receive subscription status and records of what you bought; we never see your full card number.

Google Calendar. Only if you connect it, and only to write the activities you choose to schedule.

Anonymous usage measurement. To learn which pages help people and where they get stuck, the site records which pages and labelled sections are viewed and for how long, how far an assessment got (the step number, never the answers), a few milestones such as viewing results or finishing a meditation, page-speed measurements, a count of page errors, a rough device type (phone, tablet or computer), and the website or campaign tag that brought you here (the domain only, never the full address). These records carry a random identifier stored in your browser — not your name, email or account — and we never send them to anyone else. Staff pages are not measured. Clearing your browser storage resets the identifier.

To score your assessment, generate your narrative summary, curate services and providers that fit your situation, surface crisis resources when your responses indicate you may need them, run your subscription, and send transactional email you can unsubscribe from.

We do not sell your information. We do not use it for advertising. Rooted contains no advertising pixels, third-party analytics trackers, or marketing tags. Anonymous usage measurement stays on our own servers and is used only to improve Rooted.

Rooted uses an AI service to write the narrative summary on your results page. When it runs, we send that service your domain need scores, your stated goal, your interests, your access notes, any nutrition note you wrote, and the list of services we are considering for you.

We do not send your mental health screening answers to the AI service. Your PHQ-9, GAD-7, and PC-PTSD-5 responses stay in our database and are scored by our own code.

The AI service is provided through Lovable's AI gateway, which routes the request to Google's Gemini model.

We share information with the companies that run Rooted's infrastructure, and with nobody else:

• Supabase, through Lovable Cloud — our database and authentication. Everything described above is stored there.
• Lovable AI Gateway and Google — the narrative summary, as described above.
• Stripe — payments and subscriptions.
• Mailgun — transactional email delivery.
• Google Calendar — only if you connect it.

We may also disclose information if the law requires it, or to protect someone's safety.

Your assessment results are visible only to you unless you choose otherwise. Each result has a sharing control that is off by default. Turning it on lets Rooted's own care staff open that specific assessment so they can refer you to a provider or follow up.

Sharing is per assessment — turning it on for one result does not share the others. You can withdraw it at any time from the result itself or from Settings, and access ends immediately. Sharing a result with our care staff does not share it with the providers, businesses, or instructors listed in the catalog.

We keep your account and assessment history while your account is open. Deleting your account deletes your assessments and the activity attached to them.

Anonymous usage records are deleted automatically after 13 months.

To delete your account or ask what we hold about you, email info@groundinitiativeproject.com.

• Turn sharing off for any result, at any time.
• Disconnect Google Calendar from Settings.
• Unsubscribe from email using the link in any message we send.
• Cancel your subscription from Settings.
• Ask us for a copy of your information, or for it to be deleted.

Depending on where you live, you may have additional rights under state privacy law. Contact us and we will honor them.

Every table holding your information enforces row-level security, so the database itself refuses to return another person's rows. Traffic is encrypted in transit, and credentials for connected accounts are encrypted before storage.

No system is perfectly secure. If a breach affects your information, we will notify you as required by law.

Rooted is for adults. It is not intended for anyone under 18, and we do not knowingly collect information from children.

Rooted shows crisis resources when your screening responses suggest you may need support, but no one is watching your results in real time. Rooted cannot respond to an emergency. If you are in danger, call or text 988 in the US, or call 911.

If we change this policy in a way that matters, we will tell you before the change takes effect. Continuing to use Rooted after that means you accept the updated policy.

See also our Terms of Service.