Privacy Policy

To help explain things as clearly as possible in this Privacy Policy, every time any of these terms are referenced, are strictly defined as:

• Cookie: small amount of data generated by a website and saved by your web browser. It is used to identify your browser, provide analytics, remember information about you such as your language preference or login information.
• Company: when this policy mentions "Company," "we," "us," or "our," it refers to ROOT app developer, that is responsible for your information under this Privacy Policy. For developer details, please refer to the Apple App Store and Google Play Store listing of the ROOT app.
• Country: the app developer is based in Czechia, and all data processing complies with applicable laws in this jurisdiction.
• Device: any internet connected device such as a phone, tablet, computer or any other device that can be used to visit ROOT app and use the services.
• Personal Data: any information that directly, indirectly, or in connection with other information — including a personal identification number — allows for the identification or identifiability of a natural person.
• Service: refers to the service provided by ROOT app as described in the relative terms (if available) and on this platform.
• You: a person or entity that is registered with ROOT app to use the Services.

When you use ROOT app, we may collect the following information:

• Email Address: Used for account creation, authentication, and communication related to ROOT app features, updates, and customer support. When you use Apple Sign In, you may choose not to disclose your real email address.
• Nickname: Used to personalize your user experience in the app and during support services.
• Bodyweight: Collected to provide accurate weight recommendations using the app algorithm.
• Health & Fitness Data: With your permission, we read health data from Apple HealthKit or Google Health Connect, and we collect the training you log in the app (exercises, sets, reps, weight, and cardio). The exact health data we read and why is listed in "Health & Fitness Data We Read" below. We only request the permissions needed for features visible in the app, and you can grant or revoke them at any time in your device settings.

We collect this information to enhance your app experience and ensure the functionality of our services. Your data is stored securely, and we do not sell your personal information. We do not share it with third parties except as required to provide the services you've opted into (including with a coach you connect with — see below) or as outlined in this Privacy Policy.

With your explicit permission, ROOT reads the following health data from Apple HealthKit (iOS) or Android Health Connect, each only for the purposes listed:

How this data is handled:

• Read on-device, in the foreground only. We read this data from Apple Health / Health Connect on your device, only when you open the app. There is no background collection.
• Read-only. ROOT reads health data only — we never write anything back into your Apple Health or Health Connect.
• Where it is stored. These values, and the metrics we derive from them (recovery score, cardio training load, VO₂max, sleep length, resting heart rate), are stored in your account using Firebase / Firestore (Google Cloud).
• Not for advertising or resale. We do not sell your health data, do not share it with third parties for advertising or marketing, and do not use it for advertising or data mining.
• Your control. You can grant or revoke each permission at any time in your device settings, and you can delete this data by deleting your account (see "How Long Do We Keep Your Information?").

If you connect a coach, your health-derived metrics become visible to that coach as part of the coaching service you opt into — this is described in "Coaches & Data Access" and is separate from the third-party advertising and marketing uses we rule out above.

Any of the information we collect from you may be used in one of the following ways:

• To personalize your experience (your information helps us to better respond to your individual needs).
• To improve our app (we continually strive to improve our app offerings based on the information and feedback we receive from you).
• To improve customer service (your information helps us to more effectively respond to your customer service requests and support needs).
• To process transactions.
• To send periodic emails.

ROOT is a coaching product. You can connect with a coach yourself, from the app, by opening "Enable coach access" and letting your coach scan your personal QR code. This is an explicit, in-app opt-in — at that moment the app tells you: "You are giving consent to your coach to see your exercise and personal data."

When coach access is enabled:

• Your coach can view your statistics, training history, exercise and personal data, and your health-derived metrics (such as recovery score, cardio training load, and VO₂max), and can create, edit, and delete exercises in your app so they can program your training. Your coach can also view these on the ROOT coach web dashboard.
• Your coach cannot change your app settings, log you out, or delete your account.
• You can have one coach at a time.
• You stay in control. You can end coach access at any time with "Revoke coach access," which stops your coach's future access to your data.
• A coach is not a data buyer. They are a recipient you choose; we do not sell or rent your data to them.
• No onward sharing by the coach. A coach cannot re-share your data through the Service (for example to another coach or a doctor). You can, however, choose to share your own profile with people you pick — see "Sharing Your Profile With Others" below.

Minors. ROOT is used by athletes under 18, including through a coach or club. For users under 16, we obtain consent from a parent or legal guardian before the athlete uses the Service, and that consent covers the processing of the athlete's data and its visibility to a connected coach. In the United States, for users under 13, we additionally restrict processing of health-derived metrics (such as recovery score, cardio training load, and VO₂max) in line with COPPA. A parent or legal guardian remains responsible for supervising the minor's use of ROOT, including any purchases, which are controlled through Apple and Google family and parental controls.

Beyond connecting a single coach, ROOT lets you share your own dashboard with specific people you choose — for example an external coach, a physiotherapist, or a parent — by creating a share link from the app or the ROOT web dashboard. Sharing is always something you start.

• How it works. You create a link and send it to the person you choose. They open it and sign in with their own Google or Apple account (they do not need a ROOT account) to see your dashboard.
• What they can see. By default a shared link is view-only — the person can see your dashboard and metrics but cannot change anything.
• Programming access (optional). If, and only if, you choose it when creating the link, the person can also add training programs to your ROOT account. This is the same kind of access a connected coach has, and it never happens unless you grant it.
• You can share with more than one person. You may create several links (for example one for your physiotherapist and one for a parent). Each link is intended for one person.
• You stay in control. You can see who you have shared with and revoke any share at any time, from the app or the web dashboard; the person you shared with can also end it. Revoking stops their future access.
• Not a sale, no re-sharing. A person you share with is a recipient you choose, not a data buyer — we do not sell or rent your data. They cannot change your settings, log you out, delete your account, or re-share your data onward through the Service.

Minors. If you are under 16, a parent or legal guardian must consent to your use of ROOT and to sharing your profile, and should decide and approve who you share with. Sharing a minor's profile is the responsibility of their parent or legal guardian.

We may share the information that we collect, both personal and non-personal, with third parties such as service providers who help us operate the platform (hosting, database management, email management). We will likely share your personal information with these third parties to enable them to perform these services for us and for you.

Making your data available to a coach you have connected with, or to a person you choose to share your profile with (see "Coaches & Data Access" and "Sharing Your Profile With Others"), is not a sale or transfer to a third party — it is access you asked us to provide. We do not sell your personal information, and we do not use your health & fitness data for advertising.

We may also disclose personal information about you to government or law enforcement officials or private parties as we believe necessary or appropriate in order to respond to claims, legal process (including subpoenas), to protect our rights and interests, or to otherwise comply with applicable laws, rules and regulations.

We keep your information only so long as we need it to provide ROOT app to you and fulfill the purposes described in this policy. When we no longer need to use your information and there is no need for us to keep it to comply with our legal or regulatory obligations — for example when you delete your user account — we'll either remove it from our systems or depersonalize it so that we can't identify you.

We implement a variety of security measures to maintain the safety of your personal information. We offer the use of a secure server. All supplied sensitive information is transmitted via Secure Socket Layer (SSL) technology. We cannot, however, ensure or warrant the absolute security of any information you transmit to ROOT app or guarantee that your information on the Service may not be accessed, disclosed, altered, or destroyed by a breach of any of our physical, technical, or managerial safeguards.

ROOT app strictly adheres to the Apple HealthKit and Google Health Connect Permissions Policies.

• Limited Use: We only use your health data to provide or improve the features of ROOT app that are prominent in the user interface.
• No Advertising: We will never use your health or vitals data for advertising purposes or similar services.
• No Sale of Data: We do not sell your health data to third parties, data brokers, or information resellers.
• No Transfer to Third Parties: We do not transfer your health data to third parties unless it is necessary to provide or improve our Service's features, to comply with applicable law, or as part of a merger/acquisition.
• Human Review: We do not allow humans to read your health data unless we have your affirmative agreement for specific purposes, or it is required for security or legal compliance. Enabling coach access is one such affirmative agreement, authorising your coach to view the training and health metrics described in "Coaches & Data Access."

We do not collect any payment details. Subscription in-app payments are handled by Apple Inc. and Google LLC through their respective app stores.

ROOT is intended for athletes aged 13 and over, and is used by minors both individually and through a coach or club. We take additional steps for younger users:

• Parental consent (under 16). For users under 16, we obtain consent from a parent or legal guardian before the athlete uses the Service. The same consent covers their data being processed and made visible to a connected coach.
• United States (under 13). For users under 13 in the United States, we restrict processing of health-derived metrics (such as recovery score, cardio training load, and VO₂max), consistent with COPPA.
• No extra data from minors. We do not collect any categories of data from minors beyond those described in "What Information Do We Collect?" and "Health & Fitness Data We Read."

If you are a parent or legal guardian and you believe that your child has provided us with personal data without your consent, please contact us at info@rootathletic.com and we will delete it.

ROOT app uses "Cookies" to identify the areas of our app that you have visited. A Cookie is a small piece of data stored on your computer or mobile device by your web browser. We use Cookies to enhance the performance and functionality of our app but are non-essential to their use. We never place Personally Identifiable Information in Cookies.

Wherever you are, you can ask us to access, correct, export, or delete your personal data, and to restrict or object to certain processing. You can also withdraw a consent (such as coach access) at any time. We apply these protections as our global baseline and honour the specific rights your local law gives you.

• EU / EEA / UK (GDPR): rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your local supervisory authority. Our lawful bases are your consent (e.g. coach access and health data), performance of our contract with you, and our legitimate interests in operating the Service.
• California (CCPA/CPRA): rights to know, delete, and correct your personal information, and to opt out of "sale"/"sharing" — note we do not sell or share your data for cross-context advertising. We will not discriminate against you for exercising your rights.
• Everywhere else: we extend the same core rights as our baseline.

To exercise any right, contact us at info@rootathletic.com. Deleting your account removes or de-identifies your data, subject to any legal retention obligations.

This Privacy Policy is governed by the laws of Czechia without regard to its conflict of laws provision. By using ROOT app or contacting us directly, you signify your acceptance of this Privacy Policy.

We may update this Privacy Policy from time to time so that it accurately reflects our Service and policies. Changes are effective when we post the updated policy with a new "Updated at" date. Your continued use of the Service after changes are posted means you accept them. We encourage you to review this page periodically.

Don't hesitate to contact us if you have any questions: info@rootathletic.com