Privacy Policy

This Privacy Policy explains what personal information Routinli collects across the Routinli mobile app, routinli.com, and partners.routinli.com (together, the “Platform”), why we collect it, and what we do — and don’t do — with it.

1. Scope

This Policy covers both Members (who use the Routinli app) and Partners (who publish Programs through the Routinli Partners portal). Where something applies to only one group, we say so.

2. What we collect

Directly from you:

• Account info — name, email, and password (stored hashed, never in plain text)
• If you sign in with Apple or Google, we receive your email address and a unique account identifier from them — never your password for those services
• Profile info — for Partners: brand name, photo, bio
• Routines you create — their steps, schedules, notes, and your progress through them
• Content Partners create — Programs, Routines, Steps, and the images and video they upload
• Your activity in the app — the Programs you download and any ratings or likes you leave
• Payment info — card details are entered directly with Stripe and never reach our servers; for Partners receiving payouts, bank details are held by Stripe, not by us
• Anything you send us — the contents of support requests and copyright notices

Automatically:

• Basic usage data — which features are used, so we can fix what’s broken and improve what isn’t
• Device type, operating system, app version, and time zone, for crash reporting and compatibility

We don’t collect health data from Apple Health or any comparable health service, and we don’t track your location.

3. How we use it

To run the Platform: create and secure your account, keep your routines in sync across your devices, deliver the Programs you download, process payments and Partner payouts, show you relevant content in Explore, respond when you contact us, and keep the Platform safe from abuse. We also use aggregate, non-identifying numbers to understand how the product is doing.

We don’t use your information to build advertising profiles or to target ads to you.

4. What we don’t do

We never share a Member’s identity with the Partner whose Program they downloaded, rated, or liked.Partners only ever see aggregate numbers — download counts, rating averages, engagement trends — never who’s behind them.

We don’t sell your personal information to anyone, and we never have.

5. Sharing with third parties

We share information only where it’s needed to run the Platform:

• Stripe — to process payments and, for Partners, payouts
• Supabase — our database, authentication, and file storage infrastructure
• Apple and Google — for app distribution and, where applicable, crash and analytics reporting
• Our email provider — to send transactional messages like password resets and receipts

We may also disclose information where the law requires it, or where it’s necessary to investigate abuse or protect someone’s safety. Beyond what’s described in Section 4, we don’t share your information with other Partners or Members, and we don’t sell it to advertisers or data brokers.

6. Data retention

We keep your information for as long as your account is active, and for a reasonable period afterward where we need to for legal, tax, or dispute-resolution reasons. Records of completed purchases are kept as long as tax law requires.

7. Deleting your account

You can request deletion of your Routinli account, and the personal information attached to it, by emailing admin@routinli.com from the address on your account. We’ll confirm and complete the deletion within a reasonable time.

Deletion removes your profile, your routines and progress, your downloaded Programs, and your ratings and likes. We keep the minimum records we’re legally required to keep — principally transaction records — and aggregate counts that no longer identify you.

8. Your rights

You can review and update most of your profile information directly in the app or the Partners portal. Depending on where you live, you may also have rights to access, correct, export, or delete your information, and to withdraw consent — under Canada’s PIPEDA, the GDPR, or comparable local law. Email admin@routinli.com to make a request; we’ll respond within the time your local law allows and won’t charge you for it.

9. Security

Data is encrypted in transit, passwords are hashed, and access to production systems is limited to people who need it. No system is perfectly secure, but if a breach ever affects your information, we’ll notify you and the relevant regulator as the law requires.

10. Children’s privacy

The Platform isn’t directed at children, and we don’t knowingly collect personal information from anyone under 13 (or the minimum age in your country, if higher). If you believe a child has given us information, email admin@routinli.com and we’ll delete it.

11. International transfers

Routinli is based in Ontario, Canada, and our infrastructure providers may process data in other countries, including the United States. Wherever your information is processed, we require it to be handled with the protections described in this Policy.

12. Changes

We may update this Policy from time to time. We’ll flag material changes; continuing to use the Platform after an update means you accept the revised Policy.

13. Contact

Questions about this Policy, or requests about your information, can be sent to admin@routinli.com or through our Support page.