Skip to main content
    PRIVACY & COOKIE NOTICE

    Privacy Policy

    Rootline: Ancestry & DNA  |  Last updated: August 23, 2026

    This Privacy Policy explains how Horus Teknoloji ve Dijital Hizmetler ("we", "us", or "our") collects, uses, stores, and protects information when you use the Rootline: Ancestry & DNA mobile application ("the App"). By using the App, you agree to the practices described in this policy.

    Face Data & Photos

    Summary. Your photograph is used for one purpose: to produce your ancestry estimate. It is never used to identify you, never sold, never used for advertising, and never used to train anyone's models.

    What we collect. When you run an analysis, the app captures or receives a JPEG photograph of a face — your own, and any photographs of relatives you choose to add to your family tree. We do not collect a faceprint, a face template, a face embedding, a depth map, or any TrueDepth/ARKit face geometry, and the app does not use Face ID data. The only thing derived from the photograph is a short list of descriptive morphological observations in standard anthropometric vocabulary — for example "mesocephalic", "mesorrhine", "orthognathic", "medium eumelanin".

    How it is processed. The photograph is uploaded over TLS to our private cloud storage (Supabase, hosted on AWS in the EU, eu-central-1 region), where it is stored in a bucket that is not public and is readable only by your own account under row-level security. Our server then creates a signed link to that file which expires after 10 minutes and passes it to our AI processing provider, eachlabs, which reads the photograph and returns the descriptive observations above. The observations — not the photograph — are then scored against a reference matrix bundled inside the app, on your device.

    Who it is shared with. The photograph is processed by two providers acting on our instructions: Supabase (storage and database hosting) and eachlabs (AI model inference). It is not shared with advertisers, analytics providers, data brokers, or anyone else, and it is not used to train any model.

    Photographs of other people. If you add a relative's photograph, it is handled exactly as your own. Only add photographs of people who have agreed to it, or of deceased relatives whose images you are entitled to use.

    How long we keep it. The photograph stays in your device's private app storage and in our cloud storage until you delete it. Deleting a person from the app removes their photograph and analysis; "Delete all my analyses and photos" in Settings removes every photograph and every analysis from both the device and our servers. If the server cannot be reached at that moment, the deletion is retried automatically the next time the app opens. Deleting the app removes the local copies.

    Analysing without uploading. If the app cannot reach our servers, the analysis runs entirely on your device and the photograph never leaves it.

    Other Information We Collect

    Device Identifier (IDFV)

    We use your device's Identifier for Vendor (IDFV), an anonymous device-level identifier provided by Apple, to associate your scan history and subscription status with your device. This identifier is not linked to your personal identity and cannot be used to identify you across apps or services.

    Purchase & Subscription Data

    If you subscribe to Rootline Premium, Apple processes the payment. We use Adapty (adapty.io) to manage subscription status — specifically to determine whether your device has an active subscription. Adapty receives your IDFV and subscription state. No payment details are visible to us or Adapty.

    Scan Results

    Your ethnicity analysis results (the percentage breakdown) are stored locally on your device and synced to our Supabase database, associated with your anonymous IDFV. This data is used to display your history and enable the comparison feature. It is not shared with third parties.

    Advertising & Attribution Data

    With your permission (requested via Apple's App Tracking Transparency prompt), we use your device's Advertising Identifier (IDFA) and our attribution partner AppsFlyer (appsflyer.com) to measure the performance of our advertising campaigns — for example, to understand which ad led to your app install. This data may be shared with our advertising partners, including Meta (Facebook/Instagram), solely for campaign measurement and optimization purposes. It is never combined with your face photo or ancestry results. If you decline the tracking permission prompt, this data is not collected and your experience in the App is unaffected.

    Information We Do Not Collect

    • We do not collect your name, email address, or any contact information
    • We do not require account registration
    • We do not collect location data
    • We do not use your face photo or ancestry results for advertising purposes

    Data Security

    All data transmitted between the App and our servers is protected using industry-standard encryption (HTTPS/TLS). Access to our cloud storage is restricted and controlled via authentication keys. We implement reasonable technical and organizational measures to protect your data against unauthorized access, loss, or disclosure.

    Children's Privacy

    The App is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided face data through the App, please contact us and we will delete it promptly.

    Your Rights

    You may delete your scan history and associated face data at any time from within the App (Profile → select a scan → Delete). This permanently removes the data from your device and our cloud storage. For any additional data requests or questions, please contact us.

    Third-Party Services

    • Supabase (supabase.com) — storage and database hosting (AWS, eu-central-1)
    • eachlabs (eachlabs.ai) — AI model inference
    • Adapty (adapty.io) — subscription management
    • AppsFlyer (appsflyer.com) — advertising attribution and campaign measurement (only with your tracking permission)
    • Apple App Store — payment processing

    Entertainment Disclaimer

    Rootline is an AI-powered entertainment application. Ancestry estimates are based on facial feature analysis and are intended for personal exploration and fun only. Results are not a substitute for genetic DNA testing and do not represent scientifically verified ancestry information.

    Changes to This Policy

    We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the App after an update constitutes acceptance of the revised policy.

    Contact Us

    Horus Teknoloji ve Dijital Hizmetler
    Email: hello@horusstudios.com