Your information · Your choices
Rootlayer Privacy Policy
Rootlayer Software LLC (“Rootlayer,” “we,” or “us”) operates the products and services described in this notice. This policy explains what personal information we collect, why we use it, who can receive it, and how to contact us about your information.
1. Products and services covered
This policy covers Rootlayer’s website, inquiries, support, and the following Rootlayer products: SpinFamily; RedTeamGo (also styled Red Team Go, a Ledger & Logic program); ReLayerCRE (also styled ReLayer); and Ledger & Logic, including its learning and community experiences. It applies to account creation, sign-in, registration, product use, and pilot forms for these services.
A product-specific notice may add detail about a particular feature. Information collected depends on the product and features you use; using one product does not automatically enroll you in another product or its marketing. Services operated by third parties have their own privacy policies. For customer organizations that determine how their own data is used, our processing is also governed by the applicable service agreement and documented instructions.
2. SpinFamily pilot signup
The SpinFamily pilot signup is intended for an adult parent or guardian. The form requests these four items:
- First name: to address you and coordinate your participation.
- Email address: to respond to your signup, send pilot invitations and logistics, and request pilot-related feedback.
- Number of children: to understand participating household sizes and plan the pilot and its research.
- How you heard about SpinFamily: to understand which outreach channels help families discover the pilot.
The number of children is household information linked to the adult’s signup. It is not a request for children’s identities. Do not enter children’s names, email addresses, dates of birth, school details, photos, health information, or other identifying information in this form. When describing how you heard about us, give the channel or organization rather than another person’s private contact details.
The form service may also record a submission time, consent response, and technical or spam-prevention information. We use pilot responses to organize recruitment, communicate with volunteers, and improve the pilot. Participation is voluntary. Signing up does not create a child account, authorize a purchase, or subscribe you to unrelated marketing.
We use contact details for pilot administration and use counts and referral channels to assess recruitment. Pilot responses are not published as an identifiable participant list. Any later interviews, recordings, product-usage measurement, testimonials, or additional research questions require their own explanation and applicable permission; this signup is not blanket consent to those activities.
To withdraw from pilot contact or request correction or deletion of your signup, email privacy@spinfamilyapp.com with “SpinFamily pilot privacy” in the subject. Withdrawal does not affect your ability to browse the public website.
3. Product and account information
Depending on the service you use, we process the following categories:
- SpinFamily: adult account email and sign-in information; account and household identifiers; selected plans, saved history, completion records, preferences, profile labels and custom activities you choose to save; and subscription or payment-status references for paid features. Anonymous or session-only features may keep information on your device instead of saving it to an account. Household profiles are not separate child logins.
- RedTeamGo: signup email, optional name and interests, contact preferences, mission and attempt identifiers, submitted findings, methods, reproduction steps, improvements and submission times. Its current Field Team email gate uses a browser registration flag; it is not verified account authentication. Browser report drafts stay on the device until submitted. Reports support facilitator review and learning.
- ReLayerCRE / ReLayer: account name and email, organization and membership roles, software inventories and costs, workflow descriptions, reconstruction blueprints, decisions, submissions, evaluations, audit records and subscription references. AI-enabled workflows may process inputs, generated outputs and related trace information. Only submit information you are authorized to provide.
- Ledger & Logic: account and profile information, course or cohort enrollment, access roles, learning submissions, progress or notebook information where saved, community posts and replies, waitlist signups, and support requests. Community content is visible to the audience of the room where you post; submitted learner answers may be available to authorized instructors and administrators.
- Rootlayer website and support: contact information and the project, organization, inquiry, or support details you send us. Account services also process authentication and session information, timestamps, and security or operational logs.
Where a payment provider handles checkout, it collects payment details under its own notice. Our applications use transaction, customer, subscription and entitlement references to manage access and billing; do not send full payment-card details or account passwords in forms, reports or support messages.
4. How we use information
We use information to provide requested services; administer accounts, permissions and subscriptions; organize pilots and learning programs; respond to inquiries; process and review user submissions; maintain records of decisions and activity; troubleshoot problems; improve the service; and protect against abuse or unauthorized access.
We send service-related messages needed for your account, inquiry, enrollment or pilot participation. Optional educational or promotional updates use the preferences you select. You can withdraw from optional messages using the message’s unsubscribe option or by contacting us. A pilot signup is not permission for unrelated promotional campaigns.
7. Retention and deletion
We retain personal information for the purposes described in this policy and for applicable account, contractual, security, billing, dispute-resolution and legal needs. The appropriate period depends on the record and why it is needed.
For SpinFamily pilot signup, identifiable responses are kept while arranging recruitment and necessary pilot follow-up. When that purpose ends, we delete or de-identify them unless you separately request continuing contact or an applicable obligation requires retention. You can request withdrawal or deletion sooner. Results that no longer reasonably identify a household may be retained for research and planning.
Account information and saved work may remain while you use the service. You can use available deletion controls for individual records or contact us for broader requests. Deleting a browser draft or local registration flag does not remove a submitted form. Some billing, consent, fraud-prevention or security records may need to be retained; backups may expire on a different cycle. We will explain relevant limits when responding to a request.
8. Your choices and privacy requests
For SpinFamily, contact privacy@spinfamilyapp.com. For all other Rootlayer products and the Rootlayer website, contact dion@cddt.online. You can ask what personal information we hold about you, request access or a copy, correct inaccurate information, request deletion, withdraw optional contact permission, or raise a privacy concern. Include the product name and the email you used, but do not send passwords, payment-card numbers, identity documents or children’s details in the initial request.
We may ask for proportionate information to verify that you are entitled to the records before disclosing or deleting them. If an organization controls the relevant workspace records, we may coordinate with its authorized administrator. Requests are handled in accordance with applicable law; some records may be exempt or required to be retained.
Depending on where you live and the laws that apply, additional rights may include portability, objection to or restriction of processing, appeal of a request decision, and a complaint to a privacy regulator. Contact us to exercise an applicable right or appeal a response. We will not penalize you for exercising applicable privacy rights.
9. Parents, guardians and children
SpinFamily is designed for parents and guardians and is not directed to children. Children cannot create SpinFamily accounts or sign in. The pilot signup and account administration are for adults.
An adult account holder may add household members, including children, using a nickname or first name and an avatar appearance they choose. We do not ask for children’s last names, birthdates, photos, schools, locations or contact details, and we ask parents and guardians not to enter them. A child count supplied by an adult does not establish a child account or authorize collection directly from children.
We use household member details only to personalize your family’s plans. We do not sell them, use them for advertising, or use them to train AI models. We share them only with service providers that host and run SpinFamily, or where the law requires.
We keep household member details until you remove them or delete your account. You can review, change or delete them in the app, or by emailing privacy@spinfamilyapp.com.
We do not knowingly collect personal information directly from children under 13. If we learn that we have, we will delete it promptly. If you believe a child has supplied personal information directly, contact privacy@spinfamilyapp.com. Any future feature that collects personal information directly from children needs appropriate notices, parental controls and legally required consent before activation.
10. Security and processing locations
We use safeguards appropriate to the service, including access restrictions, authentication where provided, secure transport and controls over service credentials. Security measures vary by product and feature; no online service is completely secure. Keep your account credentials private and contact us if you suspect unauthorized access.
Rootlayer operates in the United States. Our service providers may process information in the United States or other countries. Applicable laws and contractual protections govern that processing. This policy does not promise storage exclusively in one country.
11. Changes and contact
We update this policy when our products or information practices change. The date and version above identify the current notice. We will provide additional notice or obtain consent where required for material changes.
Privacy contacts: SpinFamily — privacy@spinfamilyapp.com. RedTeamGo, ReLayerCRE, Ledger & Logic and the Rootlayer website — Rootlayer Software LLC, Privacy Operations, dion@cddt.online. Please name the product in your request so we can route it correctly.