Privacy Policy

Effective February 10, 2026 · Last updated October 9, 2026

Routines365 ("we," "us," or "our") is a daily habit-tracking application. We respect your privacy and are committed to collecting only the minimum data needed to provide and improve the service. This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

Account information

When you create an account we collect your email address. Authentication is handled by Supabase Auth (magic link, email + password, or one-time passcode).

Routine and activity data

Your routines, daily check-ins, journal entries, activity logs, streak history, quest progress, personal records (such as barbell lift weights and benchmark workout times), race results and split times, training session logs, and settings are stored so the app can function and sync across devices.

Apple Health data (optional)

If you grant permission, the app reads health metrics from Apple Health (HealthKit), including sleep stages, heart rate, heart rate variability (HRV), resting heart rate, blood oxygen (SpO₂), respiratory rate, and step count. This data is used exclusively to display insights within the app and to auto-complete habits based on your health goals.

We do not sell, share, or transfer Apple Health data to any third party for any purpose — including advertising, data brokering, or analytics. Health data is processed on your device and is never stored on our servers.

Technical data and crash reports

We automatically collect minimal technical data required to operate the service, such as device type and operating system version.

When the app hits an error while you are signed in, it sends a crash report to our own database: the error message and technical stack trace, the app screen where it happened, the app and web version, and the time. These reports are linked to your account so we can fix problems you run into. They never include your habits, journal entries, health data, or other content, and we remove email addresses and quoted text from error messages before sending. Crash reports are used only to keep the app working, are not used for tracking or advertising, and are automatically deleted after 30 days (or immediately if you delete your account).

We do not use third-party analytics, crash-reporting, or advertising SDKs.

2. How We Use Your Data

  • To authenticate your account and keep you signed in
  • To sync your routines, progress, and settings across devices
  • To display streaks, milestones, reports, and insights
  • To auto-complete habits when Apple Health data meets your configured goals (on-device only)
  • To send reminders and notifications you have opted into
  • To improve reliability, fix bugs, and develop new features

3. Data Storage and Security

Account and routine data is stored in a Supabase-hosted PostgreSQL database secured with row-level security (RLS). All data is transmitted over HTTPS/TLS. We follow industry best practices to protect your information, but no method of electronic transmission or storage is 100% secure.

4. Data Sharing

We do not sell or rent your personal data. We share data only in these limited circumstances:

  • Accountability partners: If you opt into the partner feature, your daily completion status is shared with your linked partner.
  • Service providers: We use Supabase for database hosting and authentication, and Vercel for web hosting. These providers process data on our behalf under their respective privacy policies.
  • Legal obligations: We may disclose data if required by law or to protect the rights and safety of our users.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, all associated data is permanently removed from our servers within 30 days.

6. Your Rights and Choices

  • Delete your account: You can permanently delete your account and all associated data from Settings → Security → Delete Account within the app.
  • Revoke health access: You can revoke Apple Health permissions at any time in your device’s Settings → Health → Data Access.
  • Manage notifications: You can disable push notifications from Settings → Notifications within the app or your device settings.
  • Export your data: You can request a copy of your data by contacting us at the email below.

7. Children’s Privacy

Routines365 is not intended for children under 13. You must be at least 13 years old to create an account. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

The App Store age rating describes the nature of the app’s content and is separate from this minimum account age.

8. Changes to This Policy

We may update this privacy policy from time to time. If we make material changes, we will notify you through the app or by email. The "last updated" date at the top reflects the most recent revision.

9. Contact Us

If you have questions about this privacy policy or your data, please contact us at routines365.app@gmail.com.