Your family’s history belongs to your family.

Roots stores the account information needed to sign you in, your family memberships, person and relationship records, stories, consent choices, invitations, and online profiles you choose to add.

Most records are limited to active members of your family space and can be restricted further. Living people are not available through public search. Public information appears only on an eligible memorial when the family has deliberately enabled it.

Roots uses layered access controls, protected sign-in, role-based permissions, and activity records to reduce unauthorised access. These protections work together without changing who owns family records or who decides how they are shared.

Roots relies on carefully selected service providers to keep the service available and secure. They receive only the access needed to perform their work and may not use family information for their own purposes.

Roots uses limited operational information to keep the service secure and available and to diagnose failures. Error messages created by the application are designed to use route templates, request status, and safe technical references—not family members’ names or the content of stories and sources. Hosting providers may process technical request metadata, such as the requested path, network address, and browser information, as needed to deliver and protect the service.

Product-usage analytics is currently disabled. Before Roots enables any product-learning measurement, it will update this notice, review the appropriate consent or objection choices, define each measure’s purpose and retention, and prohibit family content, family-record identifiers, and individual browsing histories.

Family records remain available while the relevant account and family space are active. Account holders can download information directly linked to their account and submit a deletion request from Settings. Because family history may have been contributed collaboratively, Roots reviews deletion requests before removing an account so one person’s request does not silently erase another family member’s records. Request status remains visible while it is under review.

Security and audit records may be retained after an account request where they are needed to protect families, investigate misuse, document consent and review decisions, or meet legal obligations. Private media follows its associated family record and consent choices.

You can correct records, restrict visibility, withdraw consent for stories or media, download your account-linked information, and submit an account deletion request from Settings. You can also contact support@savvyrilla.tech for access, correction, export, deletion, or questions about how a request is handled.