Privacy Policy

The short version: RootText keeps your personal data on your device, because it never asks for any. The only thing it sends us is anonymous usage statistics — no name, no email, no account, no location, nothing that identifies you — and you can turn those off.

Effective: 28 September 2026  ·  Last updated: 15 September 2026
Applies to RootText LLC, the RootText application on every platform we publish it for, and this website (roottext.com).

1. Who we are

RootText LLC is a limited liability company registered in the State of Wyoming, United States, and the publisher of the RootText app (“RootText: Bible Cryptogram” — “RootText” or “the app” below). Postal contact is via our registered agent:

2. What this policy covers

This policy covers the RootText application on every platform we publish it for — Google Play and, when released, the Apple App Store — and the roottext.com website, including its support form. If we release further applications, each will either be covered by a revision of this policy that names it, or carry its own.

It describes RootText as it ships today. When a future release changes what we handle — section 16 lists the changes we already know are coming — a revised policy will take effect with that release and will say plainly which release it applies from, so if you stay on an earlier version, the policy that described it remains available in the dated archive.

3. Anonymous usage statistics

RootText does not create accounts, does not ask for your name or email address, contains no advertising, and does not track you across other apps or websites. It sends one kind of information to us: anonymous usage statistics, described here in full.

What is sent

Each record is an event name with a small number of categories or ranges attached. The complete list of what an event can contain:

• What happened — for example the app was opened or put in the background, the tutorial was completed, a puzzle was started or solved or abandoned, the Daily Puzzle was solved, a free-plan limit was reached, the Plus screen was shown, a purchase was started, completed or failed, a subscription was switched to another plan, a restore of purchases was tried, a reflection was opened, the reader was opened, a verse was added to or reviewed from the memorization list, a passage was started or finished, an achievement was earned, Oil (the app's earned reward) was earned or spent, a share was started, a reminder was turned on or off, a reminder was shown or opened, notification permission was allowed or refused, a streak repair was used, a backup was made, the app failed to load its library, or the app ran into an unexpected error.
• Context, always as a category or a range — which platform (Android, iOS or desktop), the app version, roughly how long ago the app was first installed (for example “7–13 days”), whether the Plus upgrade is active, the region code of your device's language setting (for example “US” or “GB” — this is your locale, not your location), whether the device is a phone, tablet or computer, and for puzzles the source (Daily, category, passage, and so on), difficulty, length range, translation, stars, the number of hints used, and error and time ranges. Some events add one more category: how long the app was in use before it was put away (as a range, such as “6–15 minutes”); for a memorization review, whether it followed a tap on a review reminder; which reminder was shown or opened (daily, streak or review), and how many were shown, as a range; which two plans a subscription moved between and whether the change applies now or at renewal; which achievement was earned; the amount of Oil, as a range; whether a restore found a purchase; whether the reader was opened from “Continue reading”; and, if the app runs into an unexpected error, which part of the app it was in (for example “puzzle” or “purchases”) and whether the app had to close.
• A random identifier — a string of random characters that the app makes up the first time it runs. It is not your name, your email, your phone number, your device's serial number or advertising identifier, or anything else that belongs to you. It exists only so that we can count, for instance, how many people who installed in a given week came back a week later. You can reset it at any time (section 14).

What is never sent

• Your name, email address, phone number, contacts, photos, files, messages, or any account information — there are none.
• Your location, precise or approximate. We do not keep your IP address: the server that receives statistics uses it only to deliver the request and discards it.
• Any device identifier: no advertising ID, no Android ID, no serial number, no identifier-for-vendor.
• Which verses you choose. The verses you save, memorize, browse or search, your topics, your notes and your lists stay on your device. Statistics contain counts and ranges, never the reference of a verse you picked. (The Daily Puzzle verse is the same for everyone on that date and may be named.)
• Anything you type.
• Your payment details or purchase history. A purchase appears in statistics only as “a purchase of this plan was started, completed or failed”, “the subscription moved to this plan” or “a restore was tried”, with no transaction details — those stay with the app store (section 6).
• The details of an error. If the app runs into one, we receive only the part of the app it happened in and whether the app had to close — never the error message, the technical trace, or anything on screen.
• Which chapter you read, the text of a reminder, or the time you set it for.

Where it goes and who processes it

The application sends statistics, over an encrypted connection, to a server we operate at t.roottext.com, which checks that each record matches the list above and discards your IP address and device details before passing the record to our analytics provider, PostHog Inc., which stores and charts it for us in the European Union (its European cloud region, hosted in Frankfurt, Germany) under a data-processing agreement. PostHog processes the statistics only on our instructions, does not use them for its own purposes, and does not combine them with data from anyone else. We do not sell, rent, or share usage statistics with anyone else, and we do not use them for advertising.

Your choice

If your device's region is the United States, statistics are on by default and the app tells you so on first run. Everywhere else — including the European Economic Area, the United Kingdom and Switzerland — RootText asks you on first run whether it may send usage statistics, and sends nothing until you say yes. As an additional safeguard, our server refuses to retain any statistic that was sent under a default setting rather than an explicit yes when the request arrives from within the EEA, the United Kingdom or Switzerland — so even a device configured for another region gives up nothing while it is used there. In every region, Settings → Privacy lets you switch statistics off or on at any time, reset the random identifier, or ask us to delete the statistics already associated with it. Switching them off changes nothing else about the app, and no feature is ever conditioned on saying yes.

4. Data that stays on your device

5. Device permissions

RootText does not request access to your location, contacts, camera, microphone, photos, or files beyond the backup file you explicitly create and place yourself.

6. Purchases

RootText offers an optional paid upgrade, RootText Plus. We never see your payment details. Purchases, free trials, family sharing and offer or promotion codes are processed entirely by the app store you bought from — Google Play or the Apple App Store — under that store's own privacy policy. The store tells your device whether a purchase exists, and the app remembers that answer locally so the upgrade works offline. Your card number, billing address, and identity are never transmitted to us, and we have no way to obtain them. The only things that reach us are anonymous statistics that a purchase of a given plan was started, completed or failed, that a subscription was switched to another plan, or that a restore of purchases was tried and whether it found one (section 3).

7. Notifications

If you turn on reminders, they are scheduled and delivered by your own device. No notification service of ours is involved, and no information leaves your device to make them work. Turning them off in the app or in your device's settings stops them completely.

The reminders are a daily reminder, a streak reminder, and a reminder on the day verses you are memorizing come due for review. If usage statistics are on, the app counts — anonymously, as described in section 3 — whether notifications were allowed, how many reminders of each kind were shown, and which were opened, so that we can tell whether reminders help or only interrupt. It never sends a reminder's text, the time you chose, or which verses were due.

8. Sharing and backups

Three features hand information to another app or service because you asked them to:

• Share — when you share a result card, your device passes it to the app you pick (a messaging app, for example). What happens next is governed by that app, and the card is designed to contain no personal information — just the day's result and a link to RootText.
• Backup and restore — you can create a backup file of your progress and choose where it goes. It is your file, in your storage; we never receive it, and restoring it is equally under your control. Treat it like any personal file.
• Your device's own backup — RootText does not use Android's automatic backup, so your progress is not copied to a Google account. On iOS, your device's iCloud or computer backup may include RootText's data, under Apple's privacy policy; we have no access to it and you can disable it in your device settings. Because of this, the backup file you create yourself is the only copy of your progress that survives uninstalling the app.

9. When you contact us, and testing programs

If you write to us through the support form or by email, we receive what you send: your message, the email address you give us so we can reply, and the topic you select. We use it to answer you and to fix what you tell us about. We do not add you to a mailing list, and we do not sell, rent, or share it with anyone.

If you join a testing program (for example a closed beta on Google Play or TestFlight), the store shares with us the information its testing program requires — typically the email address you enrolled with — and you may choose to send us feedback, screenshots or a copy of your progress file. We use these only to improve the app, keep them only for the duration of the program plus a short period for follow-up, and delete them on request.

Support messages are delivered to our support mailbox by email, which means they pass through our website host and email provider in the ordinary course of delivery — the same way any email you send does. We keep support correspondence only as long as it is useful for support history, and you may ask us to delete it at any time (see section 14).

10. This website

• No cookies. This website sets no cookies of its own and runs no analytics. There is no consent banner because there is nothing to consent to.
• No external requests. Every font, style, and image on this site is served from roottext.com. Your visit here is not disclosed to any third party by us.
• Hosting logs. Like every website, ours is delivered by a hosting provider, which processes the technical details necessary to serve a page — including your IP address — and may retain standard server logs briefly for security and abuse prevention. We do not use these logs to identify or profile visitors, and we do not combine them with anything else.
• Links to the app stores. Some links on this site carry a campaign label (for example which page you came from) so that the app store can tell us, in aggregate, how many people installed RootText after visiting. The label contains nothing about you.

11. Children

RootText is suitable for general audiences and is not directed at children under 13. We do not knowingly collect personal information from anyone, of any age. The anonymous usage statistics described in section 3 contain no personal information and cannot be used to identify or contact a child, and there is nothing for a parent to request access to or deletion of beyond the anonymous statistics, which anyone may delete from Settings.

12. Security

The most effective security measure we take is architectural: data that is never collected cannot be breached, leaked, or subpoenaed from us, and the usage statistics we do collect are designed not to single anyone out: they carry no name, contact detail, location or device identifier — only counts, ranges, and a random identifier that you can reset or delete at any time. Statistics travel over encrypted connections only. Your data on your device is protected by your device's own security — its lock screen and its encryption — and a backup file you create is protected by wherever you choose to keep it. Support correspondence is held in our support mailbox, access to which is limited to the people answering it.

13. Retention

• Application data: not applicable — we never have it. It lives on your device until you delete it there.
• Anonymous usage statistics: kept in event form for up to 25 months, then only as aggregate totals that contain no identifier at all. Deleted earlier on request (section 14).
• Support and testing-program correspondence: kept while it is useful for support history, deleted on request.
• Website hosting logs: retained briefly by our hosting provider on standard rotation; not used by us.

14. Your rights and choices

Rights of access, correction, deletion, and portability apply to data a company holds about you. From the application, the only thing we hold is anonymous statistics that cannot be traced to you — and you already have complete, direct control:

• See your data — it is in the app, on your device.
• Export it — use the backup feature in Settings.
• Delete it — use “Reset All Progress” in Settings, or uninstall the app.
• Stop usage statistics — Settings → Privacy → switch off “Send anonymous usage statistics”.
• Reset the random identifier — Settings → Privacy → “Reset statistics identifier”. Earlier statistics can then no longer be connected to later ones. “Reset All Progress” does this too.
• Delete your statistics — Settings → Privacy → “Delete my usage statistics” sends a deletion request for the current identifier to our server and resets the identifier. Because the identifier is the only link, this is the complete deletion of everything we could ever associate with your device.

If you have written to us, you may ask us to delete that correspondence at any time by writing to the same address.

European Economic Area, United Kingdom and Switzerland (GDPR / UK GDPR / FADP)

Where these laws apply, we process two things: support correspondence you send us, on the basis of our legitimate interest in answering you; and anonymous usage statistics, only with your consent, which the app asks for on first run and which you may withdraw at any time in Settings → Privacy with no effect on the app. The statistics contain no name or contact detail, and no record of belief or practice — we never process which verses you study, and every event carries only counts and ranges from a fixed list. You have the right to access, rectify, erase, restrict, or object to our processing, the right to data portability, the right to withdraw consent, and the right to lodge a complaint with your supervisory authority. We do not carry out profiling or automated decision-making. Our usage statistics are stored by our processor in the European Union (Frankfurt, Germany); we are located in the United States, and our access from there — like the support email you send us, which is processed in the United States — is protected by the standard contractual clauses in our data-processing agreement and by our processor's participation in the EU-US Data Privacy Framework and its UK extension.

Representative in the EU/EEA and the United Kingdom. RootText LLC has appointed Data Protection Representative Limited (trading as DataRep), 77 Camden Street Lower, Dublin, D02 XE80, Ireland (registered in Ireland, number 616588), as its data protection representative under Article 27 of the GDPR in the European Union and the European Economic Area, and under Article 27 of the UK GDPR in the United Kingdom. Residents of those countries, and their supervisory authorities, may raise any matter about our processing of personal data with DataRep, which will pass it to us:

• by email to datarequest@datarep.com, quoting RootText LLC in the subject line;
• through DataRep's web form at www.datarep.com/data-request; or
• by post to any of the addresses below. Please address the envelope to DataRep, not to RootText, or it may not reach us.

DataRep handles data-protection matters only. Questions about the app itself — purchases, puzzles, problems — go to support@roottext.com, and any request in this section may also be sent to us directly at privacy@roottext.com. We have not appointed a representative in Switzerland: at our scale the Federal Act on Data Protection does not require one, and Swiss residents may write to us directly at that address.

California (CCPA/CPRA) and other US states

We do not sell or share personal information and have never done so. We do not collect sensitive personal information. The only personal information we receive is what you include when you contact us. Anonymous usage statistics are not linked and not reasonably linkable to you or your household. California residents may request access to or deletion of their correspondence, and we will not discriminate against anyone for exercising their rights. We do not respond differently to browsers with “Do Not Track” or Global Privacy Control signals on this website, because the website tracks nothing to begin with.

15. Accounts and deletion

RootText currently has no accounts. There is nothing to sign up for, and therefore no account for us to delete: store requirements to offer account deletion do not apply, because no account is ever created. Deleting your data is entirely in your hands — “Reset All Progress” in Settings, or uninstalling the app, removes it from the only place it exists; “Delete my usage statistics” removes the anonymous statistics (section 14). When accounts arrive with future online features (see section 16), account-deletion controls will ship with them.

16. Changes to this policy

We plan to add online features in future releases — an optional account with syncing of progress between your devices, gift and group subscriptions, and community features such as shared play. Those cannot work without an account and a server, so accounts will come with them. Two things will stay true: the core game will remain fully playable without an account, and any release that changes what we handle will revise this policy before it ships — announced with clear notice in the application, never a silent edit. Dated copies of previous versions are kept so you can see what the policy said at any point in time.

Revision history

• 15 September 2026 — named, in section 3, the further anonymous statistics the application sends from version 1.0.0: reminders shown and opened, whether notification permission was allowed, subscription plan changes, restore attempts, opening the reader, time in use as a range, achievements earned, Oil earned or spent as a range, whether a memorization review followed a reminder, and the part of the app in which an unexpected error occurred. Each is a category or range of the kind section 3 already described; none contains a verse, chapter, anything typed, a setting's value, or an error's details, and the rule that statistics are optional is unchanged. Also named the memorization review reminder in sections 5 and 7, and updated sections 4 and 6 to match. This revision was published before the effective date and forms part of the version effective 28 September 2026.
• 28 September 2026 — added anonymous usage statistics (section 3), the Internet permission (section 5), the Apple App Store and trials, family sharing and codes (section 6), device backups (section 8), testing programs (section 9), campaign labels on store links (section 10), the controls in section 14, and our representative in the EU/EEA and the UK (section 14). This is the current version, first published on 3 September 2026 ahead of its effective date.
• 8 September 2026 — named our data protection representative in the EU/EEA and the United Kingdom (Data Protection Representative Limited, trading as DataRep, appointed 3 September 2026) with its contact channels and postal addresses, replacing the appointment-in-progress note; and corrected that note, which had said a representative in Switzerland was being appointed — none is, as section 14 now explains.
• 3 September 2026 — revised the pre-effective text above: the analytics provider is PostHog Inc. in its EU (Frankfurt) region, replacing the TelemetryDeck GmbH named in the draft published in August; statistics are asked-for on first run in every region outside the United States, with the server-side safeguard for the EEA, UK and Switzerland described in section 3; and the representative paragraph in section 14 was added.
• 9 August 2026 — initial publication, covering RootText v1 and roottext.com, when the application sent no data at all. Read this version.

17. Contact

Questions about this policy: email support@roottext.com, use the support form and choose “Privacy question”, or write to the postal address in section 1.