Privacy Policy

Routtine is a fitness and nutrition app built around Yulia's method. It is not released yet — today, routtine.app is a waitlist page and nothing more.

Routtine is operated by [legal entity name], [registered address], Indonesia, which is the controller responsible for the personal data described here. Registration as an electronic system provider (PSE) with Kominfo: [registration number, to be added before launch].

This policy covers the website you are reading now, and it sets out in advance how the app will handle your information when it launches. You can reach us any time at hello@routtine.app.

If you join the waitlist, we store three things:

• Your email address.
• Which language version of the site you signed up from, so we write to you in the right one.
• The date and time you signed up.

We use your email for one thing: to tell you when Routtine is available, and to let you know if the launch plan changes in a way that affects you. That is the whole list.

We do not sell your information. We do not rent it, trade it, or hand it to advertising platforms so they can find people like you.

As of the date at the top of this page, this site uses no analytics cookies, no advertising cookies, and no advertising pixels. If we add analytics or advertising tools later, we will update this policy first — naming the tool — and, where the law requires it, ask for your consent before anything starts collecting.

Under Indonesia's Personal Data Protection Law and the GDPR, we have to name the ground we rely on for each thing we do. In plain terms:

• Your waitlist email: your consent, given when you submit the form. You can withdraw it at any time.
• Health data — weight, food logs, check-ins, and cycle tracking, once the app exists: your explicit consent, asked for separately, and refusable without losing the rest of the app.
• Running your account and delivering what you signed up for: performance of our agreement with you.
• Keeping the service secure and fixing crashes: our legitimate interest in a product that works and is not abused.
• Keeping payment and tax records, once there is anything to pay for: our legal obligations.

The app is a daily food and habit tracker, so it will hold more than an email address. When it ships, it is expected to process:

• Account details — your name, email address, and sign-in credentials, handled by our authentication provider.
• Body data — your weight, measurements, and the goals you set.
• Food logs — what you ate, when, and the nutrition figures behind it.
• Daily check-ins — mood, energy, sleep, and cravings.
• Cycle tracking, if you choose to turn it on.
• Basic technical information — device type, app version, and crash reports — so we can fix what breaks.

Your cycle, your weight, your mood, and what you eat are sensitive. We treat them that way.

Cycle data exists in Routtine for one purpose: to power your own insights inside the app, so that what it asks of you fits where you are in your month. It is never sold. It is never shared with advertising platforms or ad networks, and it is never used to target advertising — ours or anyone else's.

Cycle tracking is optional. You can leave it switched off, switch it off later, or delete what you have logged, and the rest of the app keeps working.

We keep the list of companies involved as short as we can. The ones we rely on are service providers that run the plumbing on our behalf, under contract, and only on our instructions:

• Supabase, which hosts the database your waitlist entry and account data live in.
• Our website host and, once the app ships, the email service that sends your announcement and account emails.
• Apple and Google, when you download or pay for anything through their stores, under their own privacy policies.

Our database and hosting providers operate servers outside Indonesia, so your information may be stored or processed abroad. Where that happens, we use providers that commit to a level of protection consistent with Indonesian law and, where relevant, European data protection standards.

Everything travels to us over an encrypted connection, and it is stored with providers that hold recognised security certifications. Access to the database is limited to the people who need it to run Routtine, protected by individual accounts. We collect as little as the product actually needs, because data we never held cannot leak.

No system is perfect, so here is our commitment if one day ours is not. If personal data is exposed, we will tell the people affected and notify the relevant authority within 3 × 24 hours of becoming aware of it, as Indonesia's Personal Data Protection Law requires. We will say what happened, what data was involved, and what you should do — in plain language, without waiting for the story to look better.

Waitlist emails are kept until the launch announcements are done, and are deleted after that — or sooner, the moment you ask.

Once the app exists, your account data is kept while your account is open, and you will be able to delete your account and everything in it from inside the app — in your account settings, without emailing anyone or explaining yourself. Email works too, if you would rather.

When you delete your account, we delete or anonymise the data behind it within 30 days, apart from anything we are legally required to keep, such as payment records.

To have waitlist data deleted today, email hello@routtine.app from the address you signed up with, and say what you want removed. You do not need to give a reason.

Under Indonesia's Personal Data Protection Law (Law No. 27 of 2022), and equivalent rights elsewhere including the GDPR, you can ask us to:

• Tell you what personal data we hold about you, and give you a copy.
• Correct anything that is wrong or out of date.
• Delete your data.
• Stop using it, or restrict how we use it.
• Send you a copy in a portable format.
• Withdraw consent you gave earlier — which does not undo processing that already happened.

Email hello@routtine.app. We answer within a few days, and we will not make you explain yourself to get an answer. If we cannot do what you asked, we will tell you why. You also have the right to complain to the data protection authority in your country.

Routtine is not designed for, or directed at, anyone under 16, and we do not knowingly collect their data. If you believe a child has signed up, write to us and we will delete the account and everything attached to it.

As Routtine grows from a waitlist into an app, this policy will change with it. When it does, we update the date at the top of this page. If a change materially affects how we handle data you have already given us, we will tell you by email before it takes effect.

Questions, corrections, or a deletion request: hello@routtine.app. A person reads it.