Privacy Policy

Rutina (“we”, “us”) is a personal habit and goal dashboard. This policy covers the Rutina web app and installable (PWA) app. If you have any question about it, contact us at [email protected].

We only collect what the app needs to work for you:

• Account information. Your email address and (optionally) your name. If you sign up with a password we store a one-way cryptographic hash of it — never the password itself. If you sign in with Google we store your Google account identifier and, if provided, your name and avatar image URL.
• The data you track. The goals, habits, and check-ins you create; weekly reviews; and any measurements you log — including health-related figures such as body weight and blood-glucose readings when you choose to track them.
• Preferences. Settings such as your timezone, day-cutoff hour, reminder times, and theme.
• Feedback. Anything you send us through the in-app feedback form.
• Subscription information, if you buy a plan. Which plan you are on, when the period ends, and identifiers linking your account to the payment. We never see or store your card details — those go directly to our payment provider and never touch our servers.
• Technical data. A session record tied to your login cookie, and standard server logs (such as IP address and request time) kept by our hosting provider for security and reliability.

We do not use third-party advertising or analytics trackers, and we do not sell your data.

• To provide the core service — showing your progress, consistency, and reminders.
• To authenticate you and keep your account secure.
• To respond to your feedback and support requests.
• To operate, debug, and improve the app.

We rely on your consent (which you give by choosing to track something) and on the necessity of processing to deliver the service you signed up for.

Your data is stored in a hosted PostgreSQL database and served from cloud infrastructure. We use a small number of processors strictly to run the service:

• Hosting & database providers that run the app and store your data on our behalf.
• Google, only if you choose to sign in with Google, to verify your identity.
• Stripe and Link, only if you buy a plan. They are the merchant of record for the purchase, so they — not we — collect your payment details and billing address, and they send your receipts. We receive back only which plan you bought and whether it is still active.
• An email provider, only if you opt in to the daily digest, to deliver it.
• Google Gemini, only if you use German conversation practice, to generate the replies you hear. What you say during a practice session is sent to be answered, along with the name you have chosen to be called by, so the replies can use it. Nothing else about your account goes with it. We use the paid API, under terms that do not permit your content to be used to train models.

We never sell or rent your data. We only disclose it if you explicitly ask us to, or where we are legally required to.

Share links. If you create a share link, anyone with that link can view a read-only snapshot of the specific goals you included, without logging in, until the link expires or you revoke it. Only share it with people you trust.

• Access & export. You can download a complete copy of your data at any time from Settings (a full JSON export).
• Correction. You can edit or delete your entries, habits, and goals directly in the app.
• Deletion. You can delete your account, which removes your personal data and tracked history. You can also email us at [email protected] to request deletion.
• Objection & portability. Depending on where you live (for example under the GDPR or UK GDPR), you may have additional rights to restrict or object to processing and to lodge a complaint with your local data-protection authority.

We keep your data for as long as your account is active. When you delete your account, the associated records are removed. Limited operational logs and audit records of administrative actions may be retained for a short period for security and legal compliance.

Rutina uses a single essential cookie to keep you signed in. It stores only an opaque session token — no tracking or advertising identifiers. We also use your browser’s local storage to remember your theme preference. Because these are strictly necessary to run the app, we don’t show a cookie banner for them.

Rutina is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has provided us information, contact us and we will delete it.

We may update this policy as the app evolves. When we make a material change we’ll update the date at the top of this page and, where appropriate, notify you in the app.

Questions, requests, or concerns about your privacy? Email us at [email protected]and we’ll help.