Privacy Policy

Last updated: April 26, 2026

This Privacy Policy describes how the Routines iOS and watchOS app (“Routines,” “we,” “us”) handles your information. Routines is built around a single principle: your habit data belongs to you. We use Apple's privacy-preserving services wherever possible and do not sell or share your personal information with advertisers or third-party data brokers.

1. Information We Collect

Account information. Routines uses Sign in with Apple as its only authentication method. When you sign in, Apple shares an opaque user identifier and, at your option, your name and an email address (which you may choose to hide via Apple's private relay). We do not collect or store passwords.

Habit and routine data. Routines you create, completion history, scheduled times, stack arrangements, reflections (Reflect & Prepare journal), and similar content you enter into the app are stored in your private iCloud database via Apple's CloudKit. This data is end-to-end managed by Apple and is not visible to us.

Photos you attach. Photos you optionally attach to routines or commitments are stored in your private iCloud database alongside your habit data. We do not access, scan, or analyze these photos.

Health data. Routines does not request or read HealthKit data.

Subscription information. Subscription purchases are processed entirely by Apple via StoreKit. Apple shares only the receipt and entitlement state with the app; we do not receive your payment details.

2. How We Use Your Information

We use the information described above only to operate Routines on your devices: to display your routines, sync them across iPhone, Apple Watch, and widgets, send you reminder notifications you have configured, and provide the in-app analytics and personalized insights you see in the app. Personalized analytics copy is generated on-device using Apple's Foundation Models framework — your habit data is not sent to any external AI service.

3. Cross-Device Sync and Push Notifications

To wake your Apple Watch and widgets when state changes occur, Routines invokes a small server-side function hosted on Supabase. This function only relays a wake signal containing non-identifying metadata (device tokens managed by Apple Push Notification service and an opaque routine identifier) — your routine names, completion content, photos, and reflections are never sent to or stored on our servers. The actual data sync happens directly through Apple's CloudKit, peer to peer between your devices.

4. Analytics and Tracking

Routines does not include third-party analytics SDKs, advertising SDKs, or trackers. We do not use cookies on our marketing website beyond what is required for the page to function. We do not build advertising profiles and we do not participate in the App Tracking Transparency framework because we do not track users across other apps or websites.

5. Data Storage and Security

Your habit data lives in your personal iCloud account in a private CloudKit database that only your Apple ID can access. Apple secures this data in transit and at rest. Locally, Routines stores a Core Data cache on your device, protected by iOS file protection and the device passcode. We do not maintain a copy of your habit data on our own servers.

6. Data Sharing

We do not sell, rent, or share your personal information with third parties for advertising or marketing. We may disclose information if required to do so by law (for example, to comply with a court order). We use the following service providers strictly to operate the app: Apple (CloudKit, Sign in with Apple, StoreKit, Apple Push Notification service), and Supabase (push wake relay, no personal content stored).

7. Your Rights and Choices

Access and export. All your habit data is visible inside the app. Because data is stored in your iCloud, you can also access it via Apple's standard data and privacy tools.

Deletion. Deleting Routines from your devices and removing the app's data from iCloud (Settings → [your name] → iCloud → Manage Account Storage → Routines) permanently removes your routine data. You can also delete your account from within the app, which removes the app's CloudKit records associated with your Apple ID.

Notifications. You can disable notifications at any time in iOS Settings → Notifications → Routines.

Region-specific rights. Residents of the EU/EEA, UK, California, and other regions with applicable privacy laws have additional rights including access, rectification, erasure, restriction of processing, and the right to lodge a complaint with a supervisory authority. Contact us using the address below to exercise these rights.

8. Children's Privacy

Routines is not directed to children under 13 (or the equivalent age in your jurisdiction). We do not knowingly collect information from children. If you believe a child has provided information to us, please contact us so we can delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes will be communicated in the app or via email where appropriate.

10. Contact

If you have any questions about this Privacy Policy or your data, please contact us at support@routines.ninja.