Rootica App Privacy Policy

Information we use

• Orders: name, delivery address, city, province, phone/WhatsApp number, optional email, selected products, quantities, discount code, order totals, confirmation, delivery and return details.
• Account: Shopify verifies email-code sign-in. We use the verified customer identifier, email, saved addresses and order history to show your own account. Authentication tokens are stored in the device's secure storage; administrative credentials are never placed in the app.
• Reviews: display name, email, rating, review text and photos you choose. Approved display names, text, ratings and photos are public. Review emails stay private. Photo metadata is removed during server image processing. Reports about abusive reviews are sent privately to moderators.
• Notifications: a random installation credential, Firebase installation and messaging identifiers, APNs token on Apple devices, platform, language, app/device technical metadata and your notification preferences. Firebase may process app version, device model, operating-system version, language and time zone to deliver notifications. Order alerts and promotional/announcement alerts are separate choices, both off until enabled.
• Service operation: network requests expose IP addresses to Rootica and its hosting/service providers. Limited technical and security logs help operate the service and prevent abuse. Firebase also processes SDK technical diagnostics and aggregate platform/version adoption information that is not linked to a user or device identifier; this is distinct from the Firebase Analytics product, which is not installed.

Why and where information is used

We use information to quote and fulfill physical-product orders, verify your account, provide customer support, moderate reviews, protect the service and deliver the notifications you enable. Rootica's Shopify store, COD service, Verify and ERP services, WhatsApp/Meta, delivery providers and hosting providers process relevant information for these purposes. Google Firebase and Apple process notification identifiers. These providers may process information outside Pakistan. Public reviews and selected photos are shared with other app and website users after moderation.

We do not sell your personal information. The app has no third-party advertising SDK, advertising identifier, cross-app advertising tracking or Firebase Analytics. Rootica promotions are sent only to users who enable promotional notifications.

Your choices and permissions

You can browse and order as a guest. Account login is optional. Internet access is required for live catalog, pricing, ordering and status. Notification permission is optional and can be changed in Account or your device settings. Photo access is requested only when you choose photos for a review; the app does not upload your entire photo library. The app does not request location, contacts, microphone or camera access. WhatsApp support and confirmation open the existing WhatsApp service; they do not mark an order confirmed by themselves.

Storage, retention and deletion

Saved local addresses, guest receipts and sign-in tokens are stored on your device. A server-side receipt is protected by a random installation credential. Connections use HTTPS and access to private server records is restricted. Keep your device protected. No system can guarantee absolute security.

We retain information while it is needed to provide the account or fulfill orders, support returns, prevent fraud and meet applicable record-keeping requirements. Unconsumed price quotes expire quickly. Notification preferences can be withdrawn at any time, which stops future registration for those alerts. On an in-app deletion request, the app deletes its Firebase installation identifier and messaging token; failed SDK cleanup retries on a later online launch. Firebase states that associated installation data is removed from its live and backup systems within 180 days. Provider backup retention can therefore extend beyond Rootica’s 30-day request processing.

In Account, choose Delete account and data to submit a verified request, or use our online deletion-request page without reinstalling the app. We verify ownership before acting. Requests are processed within 30 days; the private request-status receipt confirms completion. We delete your account and associated nonessential app data and request deletion from the relevant account/review systems. Necessary order, return, fraud and legally required records may be retained for those purposes. Deletion does not cancel an active order. Clearing local data removes this device's saved addresses and guest receipt access; contact support if you later need an old order.

Children and changes

The app is intended for adults shopping for physical products and is not directed at children. We may update this policy when the app or our services change; the effective date above identifies the current version.

رازداری کا خلاصہ

روٹیکا آپ کا نام، رابطہ، پتہ اور آرڈر کی تفصیل خریداری اور ڈیلیوری کے لیے استعمال کرتا ہے۔ لاگ ان شاپیفائی کے ای میل کوڈ سے ہوتا ہے۔ تبصرہ، نام اور منتخب تصاویر منظوری کے بعد عوامی ہوتے ہیں؛ ای میل نجی رہتی ہے۔ آرڈر اور آفرز کی اطلاعات الگ اور اختیاری ہیں۔ فائر بیس اور ایپل اطلاعات کے لیے ڈیوائس کے شناختی ٹوکن اور تکنیکی معلومات استعمال کرتے ہیں۔ ایپ لوکیشن، رابطوں، کیمرے یا مائیک کی اجازت نہیں مانگتی۔ اکاؤنٹ میں «اکاؤنٹ اور ڈیٹا حذف کریں» یا آن لائن فارم سے درخواست دیں۔ ملکیت کی تصدیق کے بعد ۳۰ دن میں کارروائی ہوگی اور نجی رسید پر تکمیل نظر آئے گی۔ ضروری آرڈر، واپسی، فراڈ یا قانونی ریکارڈ محفوظ رہ سکتے ہیں۔ سوالات کے لیے sales@rootica.pk سے رابطہ کریں۔