For the grown-ups
Privacy Policy
Last updated 16 October 2026
Rooted Kids is operated by Bethel Foundry LLC. This policy covers rootedkids.app and the Rooted Kids app. Contact us at hello@rootedkids.app with privacy questions or requests.
The app has not been released. The website offers an adult-only email waitlist with double opt-in. Joining the waitlist does not create an app account or collect child information. The app descriptions below explain intended operation when available.
1. An adult-only waitlist
The waitlist is for parents and guardians aged 18 or over. It asks only for your email address and your confirmation that you are an adult parent or guardian. Please do not submit a child’s email, name, age or other child information.
We use your email to send a confirmation request. You will only subscribe to Rooted Kids launch emails after choosing the confirmation link. Joining will not create an app account, begin a trial or authorize a payment. We store your normalized email address, adult attestation, consent text version, request and confirmation timestamps, hashed confirmation and unsubscribe tokens, and the confirmation email’s delivery identifier. Confirmation links expire after 24 hours and work once.
The confirmation email and any launch emails include an unsubscribe link. You may also ask us to remove you by emailing hello@rootedkids.app. We will use the address for the launch updates you requested, not sell it or use it for unrelated marketing.
2. Parent accounts in the app
Parent accounts use an email address, authentication credentials and session information. We use account and parent PIN access information to sign you in, protect the Parent Area, manage profiles, provide support and display your plan. Subscription records may include the selected plan, billing period, entitlement status and purchase identifiers. Apple processes payment details; we do not collect your card number through this website.
If you contact us, we receive the information you choose to include. Please avoid sending sensitive child information in support emails.
3. Limited child profiles and learning data
Children use profiles managed through a parent’s account. The app is designed to keep only the information needed for its learning features:
- A first name or nickname, age band (3–6, 6–9 or 9+) and chosen avatar.
- Story, quiz and memory verse progress, and reflections.
- Prayer Jar marbles, badges and streaks.
Use a nickname where possible. Do not put a full name, address, school, contact details or other identifying information in a profile or reflection. We do not request a child’s exact date of birth, email address, photograph, location, contacts or advertising identifier.
We use learning data to deliver stories and activities, preserve progress and show parents how their children are doing. Planned Family targets, alerts, private effort comparisons and shared goals will use learning progress for those purposes. Children will not see a family ranking.
4. Children’s privacy and parental control
Rooted Kids is designed around parental involvement and the protections expected by COPPA and Apple’s Kids Category. There are no ads, chat, social features or open user-generated content. We do not track children for advertising or use third-party advertising or analytics in child mode. We do not sell children’s information.
Before the app launches, we will provide direct parental notice and obtain any verifiable parental consent required for child data collection. The website’s adult checkbox and email confirmation are not a substitute for that process.
A parent may review, correct or delete a child’s profile and learning data, and refuse further collection, by contacting hello@rootedkids.app. We will verify that the requester controls the parent account before disclosing or deleting data. You may request deletion of one profile or the entire parent account. Deletion removes saved progress and may prevent the affected profile from continuing to use the app. Deleting an account does not cancel an Apple subscription; cancel separately through Apple.
5. Service providers
We use service providers only for the functions they perform for us. The services used or planned for Rooted Kids are:
- Convex: the app’s backend, account-related records, child profiles and learning progress.
- Resend: delivery of website waitlist confirmation and launch emails, and authentication and support-related app emails. Resend processes the recipient address, email content and delivery records.
- Apple: planned iOS app distribution and in-app subscription payments. Apple handles billing under its own terms and privacy policy.
- Cloudflare: website hosting, content delivery and request security, with Cloudflare D1 storing adult waitlist records in its US jurisdiction. Our Worker does not store raw IP addresses, browser details or child data. It uses a hash of the request IP address and current minute only as a short-lived Cloudflare rate-limit key. Cloudflare may separately process technical request data to operate and secure its network.
RevenueCat is a planned subscription-management provider, not a confirmed live billing integration. If adopted, it would help validate Apple purchases and synchronize subscription access. Its final data use must be reflected in this policy before launch.
Service providers may process data in countries other than yours. We may disclose information when legally required, to protect people or the service, or as part of a lawful business transfer subject to appropriate privacy protections.
6. Cookies, security and retention
This static website does not set marketing cookies, load third-party analytics or store form entries in your browser. Website hosting may use necessary security mechanisms and operational logs. The app uses authentication sessions to keep parents signed in and restrict account access. We use access controls and secure transport, but no service can promise absolute security.
Unconfirmed waitlist rows are deleted by an hourly cleanup once seven days have passed since the latest accepted confirmation request (normally within seven days and one hour). Repeating a request while its 24-hour link is valid does not extend retention or send another email. Confirmed records remain until you unsubscribe or request verified deletion. On unsubscribe, we immediately clear the email, tokens, consent, attestation, delivery identifier and timestamps from the active record; only a SHA-256 hash of the normalized email and an unsubscribed marker remain, without a scheduled expiry, to respect your choice. An explicit new signup can replace that suppression record, but requires a fresh email confirmation. Cloudflare recovery copies may retain earlier data for its recovery window, up to 30 days; Resend retains delivery records under its own service retention settings.
App profile and learning records will be retained only as needed to provide the parent-managed account and learning features. We will delete them when a verified parent requests deletion or they are no longer needed for that purpose. Limited records may be retained where necessary for legal obligations, security or payment disputes. Backup copies will expire through the backup lifecycle and will not be used to restore a deleted active profile.
7. Your requests and policy changes
Contact hello@rootedkids.app to ask what information we hold, request correction or deletion, withdraw consent or raise a concern. Rights may also depend on where you live. We will verify identity and respond as required by applicable law.
We will update this policy when our practices change. Material changes affecting child data will receive any additional parental notice or consent required before the new use begins. The date above identifies the latest version.