Privacy Policy

Last updated: [DATE]

Draft — not yet legal advice. This document is a starting template tailored to how the Routindo app works. Have it reviewed by a lawyer or a privacy-compliance tool, and fill in every [PLACEHOLDER], before publishing or submitting it to an app store.

This Privacy Policy explains how [LEGAL ENTITY / OPERATOR NAME] (“Routindo”, “we”, “us”) collects, uses, and protects your information when you use the Routindo mobile and web application (the “Service”). If you have questions, contact us at [privacy@routindo.app].

Information we collect

Account information

Email and name. When you create an account with email and password, we store your email address and a display name derived from it. Passwords are stored only as a salted hash — we never store them in plain text.
Sign in with Google or Apple. If you sign in with a social provider, we receive your email address and basic profile information (including a profile photo, if available) from that provider.
Anonymous use. You can use Routindo without an account. In that case we create a device-scoped anonymous session that holds no email or identity; if you later sign up, your existing data is carried over to your new account.

Content you create

Your routines, their schedules and reminders, and your completion history (which routines you marked done and when).
Your preferences — such as which day your week starts on, which days count as your weekend, app and widget theme, and your device time zone.
Home-screen widget (Android). A snapshot of today’s routines is stored on your device so the widget can render offline. We also record a count of how many Routindo widgets you have installed, tied to your account, so we can decide whether to suggest adding one.

Technical information

IP address and server logs. Our servers process your IP address to operate the Service, prevent abuse, and rate-limit requests. Logs are kept for a limited period.
Your device time zone, so reminders resolve to the correct local day.

We do not sell your personal data, show third-party advertising, or use third-party analytics or tracking SDKs in the app.

How we use your information

To provide, maintain, and sync the Service across your devices.
To authenticate you and keep your account secure.
To send transactional emails you request or that are essential to your account — email verification codes, password-reset codes, and an account-deletion confirmation. We do not send marketing email without your consent.
To prevent fraud, abuse, and security incidents.
To comply with legal obligations.

Service providers we share data with

We use a small number of third-party processors to run the Service. They may process your data only on our instructions:

Cloud hosting & database — [HOSTING PROVIDER, e.g. Railway] and its managed PostgreSQL database store your account and app data.
Email delivery — Resend sends the transactional emails described above.
Sign-in providers — Google and Apple, if you choose to sign in with them.
Content delivery — routine icons are standard emoji images your device fetches from a public CDN (jsDelivr).

Data retention and deletion

We keep your information for as long as your account exists. You can delete your account at any time from within the app (Account → Delete account). Deletion is immediate and permanent: it erases your account and all associated data — routines, completion history, preferences, sessions, and linked sign-in providers. Server logs and backups are purged on their normal cycle.

Your rights

Depending on where you live (including under the GDPR and CCPA/CPRA), you may have the right to access, correct, delete, or export your data, and to object to or restrict certain processing. You can exercise deletion directly in the app; for other requests, contact [privacy@routindo.app]. You may also lodge a complaint with your local data-protection authority.

International transfers

Your data may be processed in [COUNTRY / REGION OF HOSTING]. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

Security

We protect your data with measures including encryption in transit, hashed passwords, and access controls. No method of transmission or storage is completely secure, but we work to protect your information.

Children

Routindo is not directed to children under [13 / 16], and we do not knowingly collect their personal data.

Changes to this policy

We may update this policy from time to time. We will post the new version here and update the “Last updated” date; significant changes will be communicated in-app or by email where appropriate.

Contact

[LEGAL ENTITY / OPERATOR NAME]
[privacy@routindo.app]