Privacy Policy
WisdomRoots (“WisdomRoots,” “we,” “us”) is operated by SaaSTree LLC, a Virginia limited liability company (42603 Callalily Way, Brambleton, VA 20148, USA). This Privacy Policy explains what information we collect when you use the WisdomRoots mobile app and related services (the “Service”), how we use it, who we share it with, and the choices you have.
If you have questions, contact us at support@wisdomroots.app.
A note on how WisdomRoots works
WisdomRoots is an app for private emotional reflection and for writing Future Letters — messages you compose today and schedule to be delivered by email to a recipient (yourself or someone else) on a future date. Some of what you write is, by design, transmitted by email when a letter is delivered. This policy explains exactly when that happens.
You can use parts of the app in a local-only preview mode without creating an account; in that mode your reflections and drafts stay on your device and are not sent to our servers.
Information we collect
Information you provide:
- Email address — collected when you create an account. You can sign in with an email one-time passcode (OTP) or with Sign in with Google; either way we do not store a password. If you use Sign in with Google, Google confirms your identity and provides us your email address (and basic profile information you approve) to create or access your account.
- Display name (optional) — a name you may add to your profile. You can leave it blank, and you can change or remove it at any time.
- Reflections — the text of reflections you save, along with any prompt and theme you choose. Unfinished reflections are saved to your account as drafts while you write, so you can resume them later.
- Photos you attach to reflections — if you add photos to a reflection, the image files are stored privately in our cloud storage, scoped to your account so only you can access them. Photos are not included in Future Letter emails.
- Future Letters — the letter body, the recipient’s name, the recipient’s email address, the delivery date, and your chosen delivery moment. Unsealed letters are saved to your account as drafts while you write.
- Notification preferences — if you use the notification settings, the choices you make in the app: which kinds of notifications you want, the days and time for reflection reminders, quiet hours, and whether recipient names may appear on your lock screen.
- Support correspondence — if you email us (for example, a data export or deletion request), we receive your message and email address.
Information collected automatically:
- Purchase and subscription status — if you buy a WisdomRoots Premium subscription, the purchase itself is processed by the Apple App Store or Google Play — we never receive your card or payment details. We and our subscription provider receive your purchase and subscription status (which plan, whether it is active, trial/renewal/expiry) tied to an app-specific user identifier, so we can unlock Premium features for your account.
- Push notification data — only if you allow notifications, we store your device’s push token, its platform (iOS or Android), the app version, and your device’s time zone (so reminders arrive at your local time and never during your quiet hours). If you use the notification settings, we also keep a history of the notifications we prepare for you: the notification text, when it was sent, whether it was delivered, and whether you opened it. This lets us avoid duplicates, respect frequency limits, and stop sending to devices that no longer accept notifications.
- Basic technical data necessary to operate the Service (for example, server logs containing record identifiers, timestamps, and status codes). We do not log the contents of your reflections or letters.
We do not currently use third-party analytics or advertising SDKs, and we do not collect location data, contacts, or device identifiers for tracking.
How we use your information
- To provide the Service: authenticate you, store and display your reflections and attached photos, and schedule and deliver your Future Letters.
- To deliver Future Letters by email on their scheduled date.
- To send you a delivery-confirmation email when one of your letters is delivered.
- If you allow notifications, to send push notifications you’ve chosen: for example, that a letter has been delivered or arrives soon, and gentle invitations to reflect on the days and at the time you pick. Notifications never contain the text of your reflections or letters. Recipient names appear only if you turn that on. You can change or turn off notifications at any time in the app (Profile → Notifications) or in your device settings.
- To process and validate your Premium subscription and unlock paid features.
- To respond to your support, export, and deletion requests.
- To maintain the security and integrity of the Service.
We do not sell your personal information, and we do not use the content of your reflections or letters for advertising or model training.
Who we share information with (sub-processors)
We share information only with service providers that help us operate the Service, and only as needed:
- Supabase — our database, authentication, and file-storage provider. Your account email, reflections, attached photos, and Future Letters are stored in Supabase (Postgres database + file storage) hosted in the United States (AWS, us-west-2 region). Access is restricted by row-level security and per-user storage rules so each account can only reach its own data.
- Resend — our email delivery provider. When a Future Letter is delivered, the letter’s content and the recipient’s email address are transmitted to Resend to send the message. We also use Resend to send account emails to your own address — your sign-in one-time passcodes and account-security codes (for example, to confirm account deletion) — and your delivery-confirmation email (which does not include the letter body). This is third-party data sharing necessary to provide the Service.
- Google — if you choose Sign in with Google, Google authenticates you and shares your email address (and basic profile information you approve) with us so we can create or access your account.
- Apple App Store / Google Play — process your Premium payment and manage the subscription. Your payment details are handled by the store, not by us.
- RevenueCat — our subscription-management provider. When you use the app while signed in, RevenueCat receives an app-specific user identifier so it can tell the app whether Premium is active. If you subscribe, it also receives your purchase and subscription status to validate the purchase. It does not receive your reflections, letters, or photos.
- Expo push notification service, Apple Push Notification service and Google Firebase Cloud Messaging — if you allow notifications, we send each notification’s text and your device push token to Expo, which delivers it through Apple (on iOS) or Google (on Android). They do not receive your reflections, letters, or photos.
We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, or property of our users or the public.
Data retention and deletion
- Your reflections, photos, and letters are retained while your account is active.
- When you delete an individual reflection or discard a draft, it disappears from the app immediately, and any attached photos are removed. Its text stays in our database, hidden from you and from the app, until you delete your account, at which point it is permanently erased.
- You can delete your account and associated data from the in-app Privacy screen. This removes your reflections, attached photos, Future Letters, drafts, notification settings, registered devices, notification history, and account record from our systems. (If in-app deletion is unavailable, you can email support@wisdomroots.app and we will delete your account data within 30 days of a verified request.)
- You can export your reflections and Future Letters at any time from the in-app Privacy screen. For a complete copy of everything we hold about you, including photos, drafts, and settings, email support@wisdomroots.app.
- Some records may be retained longer where required by law or to resolve disputes. Our email provider (Resend) and the app stores and RevenueCat may keep their own delivery and purchase records under their own policies.
Security
We protect your data with encryption in transit, encrypted storage of your sign-in session on your device, row-level security policies that scope data to each account, and restricted server-side access to delivery credentials. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Children’s privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.
Your rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can exercise the core of these rights through the in-app export and deletion request, or by contacting support@wisdomroots.app.
California residents (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information we collect and how we use it (described above), to request access to or deletion of your personal information, and to not be discriminated against for exercising these rights. We do not sell or share your personal information for cross-context behavioral advertising, and we do not use it for advertising or profiling. To make a request, contact support@wisdomroots.app; we will verify your request using your account email.
EEA / UK users
If you are in the EEA or UK, you may have additional rights under the GDPR (access, rectification, erasure, restriction, portability, and objection). Our legal basis for processing is the performance of our contract with you (providing the Service) and our legitimate interest in operating and securing it.
International users
Your information is processed and stored in the United States. By using the Service, you understand that your information will be transferred to and processed in the United States, which may have different data protection laws than your country.
Changes to this policy
We may update this Privacy Policy from time to time. We will update the “Last updated” date above and, for material changes, provide additional notice in the app or by email.
Contact
SaaSTree LLC (Virginia, USA)
42603 Callalily Way, Brambleton, VA 20148, USA
support@wisdomroots.app