Legal

Privacy Policy

Effective date: May 30, 2026

Plain-English summary: we collect your email, name, payment info (handled by Stripe; we never see your card number), and the things you do in the app (sessions you open, streaks, XP). We use this to run the Service. We don't sell your data. We don't show third-party ads. You can delete your account anytime.
Contents
  1. Who we are
  2. What we collect
  3. How we use it
  4. Who we share it with
  5. Cookies and similar tech
  6. How long we keep it
  7. Your rights
  8. Children's data
  9. How we protect it
  10. International users
  11. Updates to this Policy
  12. Contact

1. Who we are

Rooted with the Vine is operated by Quintic Growth LLC, a Texas limited liability company. References to "we," "us," and "our" mean Quintic Growth LLC.

2. What we collect

We collect only what we need to run the Service:

Information you give us

Information collected automatically

We do not collect: precise location, contact lists, microphone or camera input, advertising identifiers, or anything we don't need to operate the Service.

3. How we use it

We use the information we collect to:

We do not use your data to train AI models on your content, profile you for advertising, or sell your data to anyone.

4. Who we share it with

We share limited information with a small set of service providers who help us run the Service. Each is contractually required to use your data only for the purpose we've engaged them and to protect it appropriately.

We may share information if required by law, to enforce our Terms of Service, or to protect the rights, property, or safety of Quintic Growth LLC, our users, or others.

If we ever sell or transfer the business, your information may be transferred to the acquiring entity. We will notify you before any such transfer takes effect.

5. Cookies and similar tech

We use a small number of cookies and similar storage mechanisms:

We do not use third-party advertising cookies, tracking pixels, or cross-site analytics. We do not currently use Google Analytics on the Vine product.

6. How long we keep it

We keep account-related data for as long as your account is active and for a reasonable period afterward to handle billing, refunds, or legal obligations. When you delete your account, we delete or anonymize your personal data within 30 days, except where retention is required by law (e.g. tax records for payments).

Aggregate, de-identified analytics (e.g. "how many users completed Luke session 3") may be kept indefinitely; this data does not identify you.

7. Your rights

Depending on where you live, you may have the following rights regarding your personal data:

To exercise any of these rights, email tmillard@crossvale.com. We'll respond within 30 days.

California residents: under the CCPA/CPRA, you have the rights listed above. We do not sell or "share" your personal information for cross-context behavioral advertising.

EU/UK residents: under GDPR/UK GDPR, you have the rights listed above. The legal basis for our processing is (a) performance of a contract with you, (b) compliance with legal obligations, or (c) our legitimate interests in operating and securing the Service. You may complain to your local data protection authority.

8. Children's data

Rooted with the Vine is designed for families, and we take children's privacy seriously. Under our Children's Privacy Policy, child profiles (under age 13) may only be created by a parent or guardian under their own Family plan, and we collect only the minimum information needed for the child's profile to work.

9. How we protect it

We protect your data with industry-standard safeguards including TLS encryption in transit, encryption at rest by our database provider, hashed password storage, and tightly scoped access controls. No system is perfectly secure; we will notify affected users promptly if we ever discover a breach affecting your personal data, as required by applicable law.

10. International users

Rooted with the Vine is operated from the United States. If you access the Service from outside the U.S. your information will be transferred to and processed in the U.S. By using the Service you consent to this transfer. We will take steps to ensure your information receives an adequate level of protection.

11. Updates to this Policy

We may update this Privacy Policy from time to time. If we make a material change, we'll notify you by email or via the Service at least 14 days before the change takes effect. The effective date at the top of this page always reflects the current version.

12. Contact

Privacy questions? Email tmillard@crossvale.com or write to:

Quintic Growth LLC
Attn: Privacy
[Business address]
[City, State, ZIP]

Lawyer note: confirm whether the business needs to register a Data Protection Officer (DPO). A US business usually does not need one unless it processes EU residents at scale. If you plan EU marketing, add a cookie consent banner and confirm the Stripe and Supabase data-processing agreements (DPAs) are signed. Confirm tax-record retention period for your jurisdiction.