Legal
Privacy Policy
Routinek is built so your day's data stays yours. This policy explains what we collect, why, who processes it on our behalf, and how to control it. It applies to the Routinek app and routinek.app.
1. What we collect
Account
Email address, password (hashed) or Apple / Google sign-in identifier, name, username, and an optional profile photo.
Profile and goals
Sex, date of birth, height, weight, body-fat estimate, nationality (for currency), activity level, training goal, experience, schedule, gym equipment and injuries, used to compute your targets and build your plan.
What you log
Supplements, medications and injectables with their doses and stock, food and meals, water, weigh-ins, workouts (sets, reps, weights, cardio), routines and reminders.
Photos, files and messages you send to Captain
Meal photos, labels, InBody or lab reports and chat messages, when you choose to share them.
Emergency card (optional)
If you fill in the emergency card we store what you enter there: blood type, conditions, allergies, medications, an emergency contact's name and phone number, and your notes. It is kept in your account and shown on your own device. You can edit or clear it at any time.
Your account, invites and sharing
If you sign in with Apple we keep the token Apple issues, only so that we can revoke Routinek's access when you delete your account. If you invite friends we keep your invite code and which accounts joined with it, to count the reward. If you share a recipe, a public web page with that recipe (its name, ingredients and steps, never your name or account) exists at its link until you stop sharing. If you switch on the come-back reminder, it uses your first name. News and offers from Routinek are sent as notifications only if you switch them on in Settings → Reminders, and stop when you switch them off.
Apple Health (optional)
If you connect Apple Health we read steps, active energy, weight, sleep, heart-rate variability, resting heart rate, blood oxygen, respiratory rate and nutrition, and write the food, macros, water and body weight you log. Health data is used only to run the app's features for you. It is never used for advertising or marketing and never sold. It leaves our systems only to the processors named in section 3: our database host, to store it in your own account, and our AI provider, which receives a summary of the day's readings with a message you send to Captain, to answer it. You can disconnect at any time in the Health app or in Settings → System settings → Connections.
Connected apps and wearables (optional)
If you connect Google Health (the data your Fitbit or Pixel Watch records), WHOOP or Oura, we read only what the app shows you: sleep and its stages, heart rate and resting heart rate, heart-rate variability, blood oxygen, breathing rate, skin temperature, steps, active energy, workouts, weight and body measurements, and the account identifier that tells us whose data it is. We read; we never write anything back.
We use it for one thing only, to run the features you can see: your rings and history, the readiness and recovery line on Home, how the Adaptive Plan eases or pushes a session, and the sleep and recovery context Captain reads when you ask about your day. It is never used for advertising or marketing, never sold, and never used to train AI models. The only place it leaves our systems is section 3: recent readings are included with your Captain conversations so its answers can use them; they are never sent anywhere else. Disconnect at any time in You → Connected apps, which deletes the connection and the stored readings.
Routinek's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Purchases
Subscription status from the App Store via RevenueCat (product, renewal date). We never see your card details.
Device and diagnostics
Device model, OS version, app version, language, and error logs when something breaks. No advertising identifiers, no cross-app tracking.
2. Why we use it
- To run the Service: compute targets, build plans, remind you, sync across your devices.
- To let Captain answer you: your messages, the day's context and any photo or file you attach are sent to our AI provider to generate the reply. They are not used to train models.
- To handle subscriptions, support requests and account security.
- To fix bugs and improve the app (aggregated, non-identifying usage).
3. Who processes data for us
- Supabase, database, authentication and file storage (your account and logs).
- Resend, delivery of sign-in codes, support replies and account emails (your email address).
- Expo, push-notification delivery (a device token and the reminder text).
- Cloudflare, hosting for Captain's service and this website.
- Open Food Facts and the USDA FoodData Central database, food and barcode lookups (the search term or barcode only; nothing about you).
- OpenAI, the AI models behind Captain (GPT). Receives the message you send Captain, a summary of your day (foods, doses, routines, targets) and any photo or file you attach, to generate the reply; not used to train models. Today's and the last week's readings from Apple Health, Google Health, WHOOP or Oura are included with your Captain conversations so the answers can use them. They are never used to train models, never used for advertising, and never shared with anyone else.
- RevenueCat and Apple, subscriptions and purchases.
- Apple and Google, sign-in, if you choose them.
Each processes data only on our instructions and under their own security commitments. Data may be stored or processed outside Kuwait; we choose providers with recognised safeguards.
4. Retention and deletion
We keep your data while your account exists. Delete your account from You → System settings → Delete account, profile, logs, routines, sessions and photos are removed from our systems immediately; backups expire within 30 days. You can also email [email protected] from your account's address. Subscription records are kept by Apple under its policies.
5. Your rights
You can access, correct, export (You → System settings → Download my data, on every plan; paid plans can also export a PDF report) and delete your data, disconnect Apple Health or any connected app or wearable, and withdraw consent for optional features at any time. Where your local law gives you further rights (such as objection or portability), email us and we'll honour them.
6. Security
Data is encrypted in transit; sessions are stored in the device's secure keychain; access to production systems is restricted. No system is perfectly secure, tell us at [email protected] if you believe something's wrong.
7. Children
Routinek is not for children under 16 and we do not knowingly collect their data. If you believe a child has an account, contact us and we'll remove it.
8. Changes
We'll announce material changes in the app or by email. The effective date at the top tells you when this policy was last updated.
9. Contact
Routinek, Kuwait, [email protected]