Stay in control of your story.

What you can ask for

• Deletion of a profile field, photograph, upload, invitation, or family-person record containing your personal data.
• Correction of inaccurate information or a disputed connection.
• Access to, or a copy of, your personal information.
• Restriction, objection, or portability where applicable law provides those rights.
• Withdrawal of consent for any processing that relies on your consent.
• Removal of information about a child you are legally authorized to represent.

If you want the entire account removed as well, use the Account Deletion instructions. You may request removal of specific data while keeping the account, although some information is essential to continue providing account features.

If you do not have a Roots account

You can still contact us if someone has added your phone number, profile details, photograph, or family information. Give enough information to locate the relevant record without sending unnecessary sensitive material. We may need to verify your identity, parental responsibility, or authority to act for someone else. Simply naming a family does not authorize access to its private records.

What happens after you write

1. We review the request and determine whether more information is needed to locate the records or verify your authority.
2. We assess the applicable right, the purpose of processing, other people’s rights, and any legal retention obligation.
3. We carry out appropriate deletion, anonymization, correction, restriction, or disclosure and confirm the result, or explain the lawful reason for any limitation.

We aim to respond within 30 days and will comply with any shorter applicable deadline. If a legally permitted extension is needed, we will explain it. Requests are generally free; any exception must be permitted by applicable law and explained before a fee is charged.

Shared family information and retained records

Your account is separate from historical family information and content contributed by relatives. We assess whether shared content should be deleted, corrected, anonymized, or restricted rather than assume one request authorizes destruction of an entire family’s records. If a request is limited because of another person’s rights or a legal requirement, we will explain the reason and available next steps.

Deletion from active systems does not necessarily remove copies a relative has independently saved, data controlled independently by a messaging provider, or restricted backup copies immediately. We will identify relevant limits and retention criteria in our response. We do not permit restricted backup data to be restored to ordinary use in a way that defeats a fulfilled deletion request.

Escalation and legal contact

Reply to the request thread or email admin@craftcart.app if you disagree with the outcome or need an update. You may also complain to the competent data protection authority or seek other remedies available under applicable law. All Roots privacy, legal, data, and account concerns use this same contact address.

See the Privacy Policy for the information we collect, its purposes, recipients, retention criteria, and international processing.