Privacy Policy
Root & Flag ("we", "us") helps people understand their citizenship, residency, travel, property and pension options, and connects them with independent professionals. This policy explains what we collect, why, and the choices you have.
What we collect
- Your profile: citizenships, residence permits and applications, age, relationship status, number of children, goals, ancestry details you enter, investment budget, income and work history. This can be sensitive. You choose what to enter, and the app works with estimates.
- Account details: your email address if you create an account.
- Consultation requests: your name, email, goal and message when you book a call.
- Technical data: basic logs (such as IP address and browser type) kept by our hosting and database providers for security.
How we use it
- To calculate and show your results, and to save them to your account.
- To respond to consultation requests and, with your permission, introduce you to professionals.
- To keep the service secure and fix problems.
We don't sell your information, and we don't use it for advertising. We share your details with a lawyer or other professional only after you ask us to make an introduction.
Where it's stored
If you don't create an account, your profile stays in your browser. If you do, it's stored with our database provider, Supabase, in the United States, protected so that only you can read your profile. Consultation requests can only be read by our team.
Service providers
- Supabase (database and sign-in) and our web host, Cloudflare, store or process data on our behalf.
- Cloudflare Web Analytics counts page visits so we can see how the site is used. It doesn't use cookies, doesn't see what you enter, and doesn't identify you.
- Pages load photos from Unsplash, passport images and emblems from Wikimedia Commons, and fonts from Google Fonts. These services receive your IP address when your browser fetches the files, but never your profile.
The site's security settings only allow your browser to send profile data to our database. Nothing you enter is shared with advertisers or sold.
Cookies and browser storage
We use browser storage to remember your profile and keep you signed in. We don't use advertising or tracking cookies.
How long we keep it
Account data is kept until you delete your account. Consultation requests are kept for up to 3 years unless you ask us to delete them sooner.
Your rights
You can delete your account yourself at any time: in the app, choose Edit my profile, then Delete my account under "Your data". This permanently removes your login, your saved story and any consultation requests linked to your account. If you never made an account, the same place clears your story from your browser.
You can also ask us to see, correct, export or delete your data. Depending on where you live (for example under the GDPR or California law), you may have additional rights. Email [email protected] and we'll respond within 30 days.
Children
The service is for adults. Children's details you enter (such as how many children you have) are used only for your own results.
Changes
If we make significant changes, we'll update this page and, if you have an account, let you know by email.
Contact
Root & Flag · [email protected]