Privacy Policy
Last updated: 6 July 2026
RootsNRites ("we", "us") is operated by ONINE Innovations Pvt Ltd. Family data is among the most personal data there is. Our promises are simple: we never sell family data, we never use it to train AI models, and we show no ads.
What we collect
- Account data — your name, email address, password (stored hashed), and optional profile photo. If you sign in with Google or another provider, we receive your name, email and avatar from them.
- Family tree data — the names, relationships, dates and notes you add about your family members.
- Memories — voice and video recordings you capture, and their transcriptions.
- Event and marketplace data — ceremonies you plan, RSVPs (including dietary preferences guests share), and vendor bookings.
- Usage data — analytics about how the product is used (see Cookies & analytics below).
How we use it
- To provide the product: render your tree, generate your ritual calendar, transcribe memories, coordinate events.
- To keep your account secure and prevent abuse.
- To email you about your account and rituals you asked to be reminded of.
We do not sell or rent your data to anyone, and we do not use your family data to train machine-learning models.
Where your data lives
Your family's data is stored in your home region — currently the UK, EU, India, Canada or Australia — and processed in line with GDPR and equivalent local data-protection law.
Public trees and consent
- Trees are private by default. A tree appears in the public directory only when its owner sets it to public and a curator approves the listing.
- Lineage search covers opt-in profiles only, with consent-first matching: nothing is shared until both families say yes.
- People under 18 are never publicly indexed.
- Every change to a tree's public visibility is recorded in an audit log.
Sharing
We share data only with the service providers needed to run RootsNRites (hosting, email delivery, transcription) under contracts that limit them to processing on our instructions — and with vendors you explicitly book through the marketplace (they receive the event details needed to serve you). We may disclose data where the law requires it.
Retention and deletion
Your data stays as long as your account does. You can delete individual people, memories or whole trees at any time. If you ask us to delete your account, we honour the right to be forgotten within 30 days, including backups on their normal expiry cycle.
Your rights
Depending on where you live, you have the right to access, correct, export, restrict or delete your personal data, and to object to processing. Write to [email protected] and we will respond within 30 days. You may also complain to your local data-protection authority.
Cookies & analytics
We use essential cookies for sign-in and security, and Google Analytics / Tag Manager to understand product usage. We show no advertising and use no advertising cookies.
Changes
If we change this policy in a way that matters, we will tell you by email or an in-product notice before the change takes effect.
Contact
ONINE Innovations Pvt Ltd · [email protected]