Privacy Policy

Effective Date: June 20, 2025

Root and Remedy LLC ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our app, or interact with our services, which include providing health and wellness recommendations based on your submitted information. Our services are not intended to diagnose, treat, or cure any medical condition.

1. Information We Collect

We may collect personal and sensitive data that you voluntarily provide when using our services, including:

Name, email address, and login credentials
Demographic details such as age, gender, and location
Health-related information necessary to generate wellness recommendations
Facial images and biometric data, including facial features and tongue images, used to provide personalized wellness suggestions based on Traditional Chinese Medicine (TCM)
Usage data and device information through tools such as Firebase and analytics services

2. Use of Information

We use your information for the following purposes:

To create personalized wellness recommendations
To analyze facial images using AI models provided by OpenAI for non-diagnostic insights aligned with TCM practices
To provide customer support and improve user experience
To maintain and enhance the functionality of our app and website
To comply with legal obligations

Facial images are not used for identity verification, facial recognition, marketing, or surveillance purposes.

3. Disclosure of Information

We do not sell your personal information. We may share your information with:

Service providers (e.g., Firebase, OpenAI) under strict data protection agreements. Facial images shared with OpenAI are used exclusively for real-time analysis and are not stored by OpenAI.
Legal authorities, if required by law
Third-party partners only with your explicit consent

No other third parties have access to your facial data.

4. Legal Basis for Processing

If you are located in the European Economic Area (EEA), we process your personal data based on your consent, contractual necessity, legal obligations, or our legitimate interests in providing the service.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy unless a longer retention period is required by law. Uploaded facial images are securely stored in Firebase Storage, encrypted during transmission and at rest. When you delete your account, all associated data, including facial images and user profile information, will be permanently deleted from our servers.

6. Your Rights

You have the right to:

Access, correct, or delete your data
Withdraw consent at any time
Object to or restrict certain processing
File a complaint with a supervisory authority

7. International Data Transfers

If you are located outside the United States, please note that your information will be transferred to and processed in the U.S., where data protection laws may differ from those in your jurisdiction.

8. Data Security

We use reasonable technical and organizational measures, including industry-standard encryption and strict access controls, to safeguard your facial data and personal information. However, no method of transmission over the Internet is completely secure.

9. Children's Privacy

Our services are not directed to individuals under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on our website and updating the effective date.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Root and Remedy LLC
cliff@rootandremedy.com