How we store your data

In plain words: what we know about you, why, and what we never do.

City level only
Other members see you’re in Valencia — nothing more. No map, no district, no distance.
Personal data encrypted
Budget, notes and messages are encrypted. Even in the database they can’t be read without the key.
Where it lives
Server country — [TO BE SET]. We’ll say plainly where your data is and which laws apply.
Deletion for good
One button in your profile and we destroy the key. Data becomes unreadable at once; copies are gone within 30 days.

What we store and why

Telegram ID and name
To recognise you when you sign in and address you by name.
Consents
Which document, which version and when you accepted — the law requires it.
Questionnaire answers
Country, city, family, pets, timing — to build your plan.
Family tasks and documents
Document name and expiry — for reminders. No scans or numbers.

What we never do

— We don't sell data or share it with advertisers.
— We don't store geolocation — only your city.
— We don't store document scans or numbers.
— We don't store military registration details.
— We store nothing about you until you give consent.

Your rights

Download everything
An archive of your data in minutes in your profile.
Correct
Any field in the family profile at any time.
Delete
Your entire account or specific documents in one click.
Ghost mode
You don’t appear in the local members list.
How it works technically
— Each personal field is encrypted with its own key (AES-256-GCM); keys live in hardware security modules
— Search over encrypted data uses blind indexes, without server-side decryption
— Row-level security in the database itself: a family sees only its own family
— Deleting an account = destroying the key (crypto-shredding)
— End-to-end encrypted messages — in the next version
Questions about your data
Write to us — we reply within 24 hours. Full legal policy is available in the documents section.
privacy@reroots.app
Coming before launch: The country where data is stored, the company name and a contact for data questions. We will list them here once the server and company are chosen.