Privacy Policy

Roof & Root · Operated by Leverage The Struggle, LLC
Effective date: July 9, 2026 · Last updated: October 10, 2026

1. Who we are

Roof & Root ("Roof & Root," "we," "us," or "our") is a mobile application that helps you organize everything about your household — your home, vehicles, family members, pets, belongings, documents, and the maintenance and reminders that go with them. Roof & Root is operated by Leverage The Struggle, LLC, a California limited liability company.

This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. By using Roof & Root, you agree to this Policy.

If you have questions, contact us at info@roofandroot.app.

2. Information we collect

a. Information you provide directly

• Account information: your email address, a password (which we store only in encrypted/hashed form), and a display name.
• Household content you add, which may include:
  • Home details (address, purchase and value information, mortgage or rent details, insurance policies, utility providers, home systems and appliances and your notes on them, warranties, paint colors, home history and improvements).
  • Vehicle details (make, model, VIN, mileage, service records, insurance, including its premium and renewal date, and your notes).
  • Family member profiles, which may include names, relationships, clothing/shoe sizes, and — only if you choose to enter it — health-related information such as medications, and insurance details, including other policies they hold (such as life, disability, long-term care, accident or supplemental).
  • Pet profiles (including vet, vaccine, and insurance information you choose to enter).
  • Photos and documents you upload (such as receipts, manuals, insurance cards, and other records).
  • Notes, tasks and reminders, calendar events (including who’s going, where, and a trip’s Before-you-leave checklist), shopping lists, and projects — some of which you may choose to use for sensitive details like access codes.
  • When you share Emergency info with a sitter, the app makes the sheet on your phone and hands it to the app you choose; it isn’t sent to us.
• Contacts you pick: if you pick someone from your iPhone's Contacts, we copy only that person's name, number, email and company into your household. We never read or upload your address book.
• Household sharing: if you create or join a household, the household content above is shared with the other members you invite or join.

b. Information collected automatically

• Basic device and app information needed to run the app. Reminders are scheduled on your device (we do not collect push-notification tokens).
• We do not use analytics or advertising SDKs, we do not track you across apps or websites, and we do not allow third parties to collect information about your activity across other sites or apps through Roof & Root or our website. Because we do not track you, our app and website work the same way whether or not your browser sends a "Do Not Track" or Global Privacy Control signal.
• Limited technical information (such as IP address) processed by our hosting provider to operate and secure the service.

c. Our website

Our website, roofandroot.app, does not use cookies, local storage, analytics, advertising pixels, or embedded third-party content. Its fonts and images are served from our own site. Our host, Cloudflare, processes standard technical information, such as your IP address and network-error reports, to deliver and secure the site.

Before launch, our website had a waitlist. It’s closed, and the site no longer collects email addresses. If you joined it, we keep your email address, where on the site you signed up, and the consent text you agreed to, and use them only to tell you Roof & Root is available. Any such email includes an unsubscribe link, and you can ask us to remove you at info@roofandroot.app.

d. What we do NOT want

We do not need and ask that you do not enter Social Security numbers, full payment-card numbers, or bank-account numbers into the app.

3. How we use your information

• Provide the app and its features, and sync your data across your devices and household members.
• Send reminders and notifications you've set up.
• Power AI features you choose to use (see Section 4).
• Maintain, secure, troubleshoot, and improve the app.
• Respond to your support requests.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not use it to serve you third-party advertising.

4. AI features

Some features let you scan a photo (for example, an appliance nameplate, a receipt, an insurance card, a medication label, or a VIN plate) or ask questions about your household. When you scan, the photo or document is sent to our AI provider, Anthropic, which reads it and returns the result to you. When you import a file from another app, its contents are sent to Anthropic to sort them into Roof & Root. When you add a vehicle or look it up again, its year, make, model and trim (and a bike’s type) may be sent to Anthropic to look up its specs. When you look up an item by its brand and model number, what you typed and the names of the item’s detail rows are sent. When you match a paint color to its brand’s, the color’s brand, code and name as written are sent.

When you ask a question in Ask your home (called "Ask your house" in version 1.0) and it is answered by AI, your question, the earlier messages in that conversation, and a summary of your household records are sent to Anthropic so it can answer. The summary is the same whatever you ask, and it includes:

• Your current home: its address and size, your home insurance carrier, phone number and renewal date, utility providers, systems and appliances (including model and serial numbers, and your notes on them), service pros, work history, projects, notes, and maintenance reminders.
• Your vehicles and pets: year, make, model, mileage, specs, parts, your notes, registration renewal date, and insurance carrier and renewal date for vehicles; name, breed, age, weight, vet, and details such as food, insurance carrier and license renewal date for pets.
• Your calendar: upcoming events, and events from the past month, with who each one is for and a trip’s dates and type. A trip’s place, its notes and its Before-you-leave checklist are not sent.
• Your family members: names, relationships, birthdays and ages, clothing sizes, other details you add to their profiles, and health details: doctors, allergies, medications, glasses prescriptions, and health, dental and vision plan names. A life insurance policy (or one you file as Other) goes by its kind and carrier; disability, long-term care, accident and supplemental policies are not sent.

The app leaves ID numbers out of the summary (insurance member and policy numbers, prescription numbers, pet license numbers, license plates, and VINs), along with the codes and passwords in your Codes & Access notes (Ask gets only each note's title, its line names, such as "Side gate," and where its water, gas and electrical shutoffs are). The app also looks for access codes, passwords, safe combinations and license plates in your other notes and details, labelled ("Gate code: 4417") or written into a sentence ("the door code is 4417"), and leaves out the ones it recognizes; a policy or member number typed next to a carrier’s name is left out too. Keep codes and passwords in Codes & Access, where they’re never sent. Your photos and documents, and your mortgage and home-value details, are not sent with questions. When Ask answers from the records on your phone instead, nothing is sent.

The app asks for your explicit permission before any of this is sent the first time, and asks again before we start sending a new kind of information. You can stop using AI features at any time; the rest of the app works without them. Deleting the app also ends this permission. Permission is given on each phone, and the household summary sent with a question covers everyone in the household, so when another member of your household uses Ask, your details go with their questions.

• Our AI provider processes this content to generate your result and, per its terms with us, does not use your inputs to train its models.
• AI results may be inaccurate or incomplete. Always verify important details (such as model numbers, warranty dates, or maintenance guidance) before relying on them.

5. Who we share information with

We share information only with service providers that help us operate the app, and only as needed:

• Supabase — database, authentication, file storage, and hosting.
• Anthropic — AI processing of content you submit to AI features (see Section 4).
• RentCast — property-valuation service. If you turn on automatic home values (a Plus feature), we send your home's street address — and nothing else about your household — to RentCast to estimate its value. The app asks for your permission first.
• Resend — delivers our emails: sign-up codes, password resets, and emails to people who joined our pre-launch waitlist.
• RevenueCat — manages subscriptions bought through the App Store. It receives your account ID and your purchase and subscription history, never your household content.
• Expo (650 Industries) — delivers app updates. When the app opens, it asks Expo whether a newer version of the app's code is available. It sends your device platform, the app and update version numbers, a random ID for this installation (not linked to your account), technical details if the app crashed, and your IP address. Expo never receives your household records, photos or account details.
• Cloudflare — hosts our website.
• Apple — app distribution through the App Store, and in-app subscriptions and billing.
• Other members of your household — who can see the shared household content.

Each of these providers may use your information only to provide its service to us, and is bound by terms that require it to protect your information at least as well as this Policy does.

Public vehicle lookups: when you decode a VIN, open Garage or a car's page, or check for recalls, the app queries the U.S. National Highway Traffic Safety Administration's public databases directly, sending only the VIN or the vehicle's make, model, and year.

Connection test: if our support team asks you to run the app's connection test, the app also sends blocks of filler text (up to about 1 MB) to httpbin.org, a public testing service, to check your network connection. Nothing about you or your household is included; like any website, httpbin.org sees your IP address.

We may also disclose information if required by law, to protect the rights, safety, or property of Roof & Root or others, or in connection with a business transfer (such as a merger or acquisition).

We do not sell your personal information.

6. How we store and protect your information

Your data is stored with our hosting provider and protected using measures including encryption in transit and at rest, database row-level security that limits data to your household, server-side handling of sensitive keys, and private (non-public) storage for your photos and documents.

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. Please keep your own copies of anything critical, and use the in-app export feature to back up your records. Photos and documents aren’t in the exported file, so email us for copies of the ones stored with your account.

7. Data retention and deletion

We keep your information for as long as your account is active. You can:

• Export your records at any time from within the app. Photos and documents aren’t in the exported file, so email us for copies of the ones stored with your account.
• Delete your account from within the app (Settings → your account at the top → Delete account; in version 1.0 that row is called “Account & family sharing”), or by emailing info@roofandroot.app from the address on your account — see how to delete your account. When you delete your account, we delete your login and account record, and every household where no other adult remains (you were the only member, or everyone else has a kid account), with all its records, photos and documents, except where we are required to retain certain records by law. A household you share with another adult stays for its members, including what you added to it; if you owned it, ownership passes to the adult who joined it first.

Purchase records stay. If you subscribed to Plus, Apple keeps the purchase in your Apple account, and RevenueCat, the service that manages our subscriptions, keeps the record of what you bought and when under a random ID rather than your name or email. We keep that record for tax, refunds and fraud prevention. Once your account is deleted, nothing we keep connects that ID to you, apart from server logs that delete themselves within a week.

8. Your choices and rights

You can review, edit, export, and delete your information at any time within the app, or email us for copies of the photos and documents stored with your account, which aren’t in the exported file. Clearing a detail changes it on our servers too. Deleting a whole record, such as a person, pet, note or event, removes it from every phone and erases its contents from our servers; only a note that it was deleted stays, so the other phones know to remove it. From version 1.2, its photos and documents are deleted with it; email us to remove any left by an older version.

California residents (CCPA/CPRA): You have the right to know what personal information we collect, to request access to or deletion of it, to correct it, and to not be discriminated against for exercising these rights. We do not sell or "share" personal information for cross-context behavioral advertising. To exercise these rights, use the in-app tools or contact us at info@roofandroot.app.

Residents of other states with privacy laws (such as Virginia, Colorado, Connecticut, and Washington) may have similar rights. Contact us to exercise them.

Canadian residents: You may request access to or correction of your personal information, and withdraw your consent, by contacting us. The person in charge of protecting personal information at Roof & Root is Jose Estevez, Founder, at info@roofandroot.app. Your information is stored in the United States (see Section 11) and may be accessible to U.S. courts and authorities under U.S. law.

9. Health-related information

Roof & Root lets you optionally store health-related information (such as family members' medications or insurance details) for your own convenience. We are not a healthcare provider, and Roof & Root is not a HIPAA-covered entity — this information is data you choose to store and control. If you would prefer not to store health-related information in the app, simply leave those fields blank. Please make sure you have a family member’s permission before you enter their health details.

Health information and AI: if you use Ask your home, the health details in your family members' profiles (doctors, allergies, medications, glasses prescriptions, and health, dental and vision plan names) are part of the household summary sent to Anthropic with each question (see Section 4). This happens only after the person asking gives permission in the app on their own phone. The summary covers everyone in the household, so another member’s question includes your family’s health details too. Anthropic uses it only to answer your question and does not train on it. Insurance member numbers and prescription numbers are never sent with a question. A photo you scan or a file you import is sent as it is, so Anthropic can read any numbers on it.

Consumer health data: if you are a resident of Washington, Nevada, or another state with a consumer-health-data law, we collect this information only when you enter it, use it only to provide the features you use, and share it only with the people in your household and two service providers, Supabase and Anthropic (with Anthropic, only after the person using the feature gives permission in the app on their own phone). We never sell it. You can review or clear it in the app at any time; deleting a whole record erases its contents from our servers too. Health details go to Anthropic only when someone scans, imports or uses Ask, so to stop sending them, everyone in your household has to stop using those features; clearing the details also keeps them out of Ask questions. You can also contact us at info@roofandroot.app with questions or to exercise your rights. Our Consumer Health Data Privacy Policy explains this in full.

10. Children's privacy

Roof & Root is not directed to children under 13, and we do not knowingly collect personal information directly from children under 13. Parents and guardians may choose to add family-member profiles for members of their household. If you believe a child has provided us information directly, contact us and we will delete it.

11. Where we operate

Roof & Root is operated from the United States, and your information is processed and stored in the United States.

12. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will update the "Last updated" date and, where appropriate, notify you in the app. Your continued use of Roof & Root after changes take effect means you accept the updated Policy.

13. Contact us

Leverage The Struggle, LLC
1065 Cling Way
Calimesa, CA 92320
info@roofandroot.app