Last updated: July 29, 2026
Roots is built by Srikant Aggarwal in the Greater Toronto Area, Ontario. When you continue with Google, we receive your name, email, and profile photo so we can create your account.
We use that information to run the community — your profile, posts, friends, and messages. We do not sell your data. We do not show ads.
Media you upload is stored so other members can see it. Location fields you choose to share (like your city or home area) are used to help you find people nearby.
Where your data lives
Your account and posts are stored in Canada, on servers in Toronto. Photos and videos you upload are stored with Cloudflare.
Who else processes it
Running Roots means a handful of other companies touch some of your data. We use each one for a single job and send it only what that job needs:
Google — sign-in, and the map and place search you see when picking a location.
Fly.io — hosts the app and database (Toronto).
Cloudflare — stores the photos and videos you upload.
Resend — sends the few emails we send, like a notice that someone reported a post.
Giphy — powers GIF and sticker search. Your search words go to Giphy; your account does not.
OpenAI — three things. Posts and messages are checked automatically for hate, harassment and spam before they go out, which means that text is sent to OpenAI. The post suggestions in the composer are generated from your city, hometown and languages — never your name, email, or anything you have written. And when you add a profile photo, that photo is sent to OpenAI once and asked a single question: is there a face in it? We ask because a photo is how a neighbour recognises who they agreed to meet. The answer we keep is yes or no — nothing about who you are, and no copy of the photo is kept by OpenAI on our behalf. Photos are processed in the United States.
None of these companies are allowed to use your data for their own purposes, and we do not send them anything we have not described here.
How long we keep it
Your account and its content stay until you delete them. Delete a post and it is gone. Delete your account and we remove your profile, posts, comments, messages, uploads and sign-in sessions — permanently, not hidden. Backups roll off within 30 days.
Deleting your account
Settings → Delete account. It asks once to confirm, then removes everything and signs you out. You do not have to email anyone to leave.
Questions
Email support@myindianroots.ca. If you are in Canada and think we have mishandled your information, you can also raise it with the Office of the Privacy Commissioner of Canada.