Privacy Policy

Routtine is a fitness and nutrition app built around Yulia's method. It helps you set your nutrition targets, log what you eat, check in on how you are doing, and follow your progress over time.

Routtine is operated by PT. Ananas Mahartha Dewata, Jl. Bypass Ngurah Rai No. 888X, Pemogan, Denpasar Selatan, Denpasar, Bali 80221, Indonesia, which is the controller responsible for the personal data described here.

This policy covers the Routtine app on iOS and Android and the websites we run. You can reach us any time at hello@routtine.app.

We collect what the app needs to do its job, and we have kept the list short enough to print. There is no advertising SDK in Routtine, no analytics SDK, and no crash-reporting service, so none of those appear below.

• Account details — your email address, and your name and phone number if you give them. If you sign in with Google or Apple, we receive your email and name from them.
• Profile and body data — your sex, date of birth, height, weight, activity level, your goal and target weight, and the body measurements you record.
• Daily check-ins — your mood, energy, sleep and cravings, and your cycle phase if you choose to track it.
• Food you log — the foods and portions you record, when you recorded them, and the nutrition figures behind them.
• Food searches — the words you type into food search and which result you chose, so we can find the gaps in our food database. Stored with your account and deleted after 90 days.
• Photos — a profile picture, and any photo you attach to a post if you take part in community features. A photo of a meal you send to the AI assistant is handled differently: see below.
• Messages you write — your conversations with the AI assistant, and any posts or comments you write in community features.
• Your account identifier — the id every row above is filed under, so we know which data is yours and nobody else's.
• Subscription records — if you subscribe to Premium, which plan you bought, when the current period ends, whether it renews, and the payment provider's own reference for it. We never see or store your card details, and we do not take the payment ourselves.
• Contribution records — if you take part in our food-data contribution programme, the products you submit and the payout details you give us so we can pay you.

We use it to run the app for you: to work out your targets, to show you what you have eaten and how your weight is moving, to answer you when you ask the AI assistant something, and to pay you if you contribute food data.

We do not sell your information. We do not rent it, trade it, or hand it to advertising platforms so they can find people like you.

As of the date at the top of this page, Routtine contains no advertising, no ad networks, and no third-party analytics or advertising trackers. If we ever add an analytics tool, we will update this policy first, name the tool, and where the law requires it, ask your permission before it collects anything.

Under Indonesia's Personal Data Protection Law and the GDPR we have to name a legal basis for each kind of processing. Plainly:

• Health data — your weight, food logs, check-ins and cycle: your specific consent, which we ask for separately and which you can decline without losing the rest of the app.
• Running your account and providing the service you signed up for: performance of the contract between us.
• Keeping the service safe and fixing what breaks: our legitimate interest in the product working and not being abused.
• Keeping payment and tax records, where a payment happened: our legal obligation.

If you allow it, Routtine reads one thing from your phone's health app: your step count. On iPhone that is Apple Health, on Android it is Health Connect.

We read your steps to show you your own daily activity beside your calorie target. That is the only purpose. We read them, we show them to you, and we do not copy them to our servers — the number on the card is read from your phone each time you open it. We never write anything back into Apple Health or Health Connect, and we never share this data with anyone.

You can refuse, and the rest of the app works normally. You can withdraw the permission at any time in Apple Health or Health Connect, without asking us.

Routtine includes an AI assistant. It is an AI, not Yulia, and it never speaks for her personally. Before you use it for the first time we show you what follows and ask you to agree; you can read the same disclosure again at any time from inside the chat.

To write you an answer, we send your message together with a snapshot of your journey data — today's food log, your weight trend, your recent check-ins, your cycle phase, and your profile stats — to our AI provider, Anthropic. If you send a photo of a meal for a calorie estimate, that photo is sent to Anthropic too.

Two commitments about that. We do not store the meal photos you send to the assistant; they are passed through for the estimate and not kept by us. And your data is not used to train Anthropic's models.

The assistant is not a doctor, a dietitian or a psychologist. Questions about medication, pregnancy, a medical condition, or your relationship with food get you a boundary and a pointer to a qualified professional, never advice. Nothing it says is a substitute for professional care.

Your cycle, your weight, your mood, and what you eat are sensitive. We treat them that way.

Cycle data exists in Routtine for one purpose: to power your own insights inside the app, so that what it asks of you fits where you are in your month. It is never sold. It is never shared with advertising platforms or ad networks, and it is never used to target advertising — ours or anyone else's.

None of the health or fitness data in Routtine is ever used to decide anything about your employment or your eligibility for insurance, and we never pass it to anyone making those decisions.

Cycle tracking is optional. You can leave it switched off, switch it off later, or delete what you have logged, and the rest of the app keeps working.

We keep the list of companies involved as short as we can. These are service providers that run the plumbing on our behalf, under contract, and only on our instructions:

• Supabase, which hosts the database and file storage your account data lives in, and handles sign-in.
• Anthropic, which runs the model behind the AI assistant, and receives only what is described in the AI section above.
• FatSecret, a food-data provider we query when a food is not in our own database. It receives the search words, not your account or your logs.
• Vercel, which hosts our websites.
• Apple and Google, when you download the app or pay through their stores, under their own privacy policies.
• Xendit, the payment provider for subscriptions bought on our website. It receives your name, email address and account identifier so the payment can be matched to your account, and it handles the card details we never see.

Our database and hosting providers operate servers outside Indonesia, so your information may be stored or processed abroad. Where that happens, we use providers that commit to a level of protection consistent with Indonesian law and, where relevant, European data protection standards.

Everything travels to us over an encrypted connection, and it is stored with providers that hold recognised security certifications. Every row in our database is fenced to the account that owns it, so one member's data cannot be read from another member's session. Access for our own staff is limited to the people who need it to run Routtine, protected by individual accounts. We collect as little as the product actually needs, because data we never held cannot leak.

No system is perfect, so here is our commitment if one day ours is not. If personal data is exposed, we will tell the people affected and notify the relevant authority within 3 × 24 hours of becoming aware of it, as Indonesia's Personal Data Protection Law requires. We will say what happened, what data was involved, and what you should do — in plain language, without waiting for the story to look better.

Your account data is kept while your account is open. Food searches are deleted after 90 days regardless.

You can delete your account and everything in it from inside the app: Profile, then Delete account. It does not require emailing anyone or explaining yourself, and it takes effect immediately.

If you would rather not use the app to do it, you can request deletion at https://www.routtine.app/delete-account, or email hello@routtine.app from the address you signed up with.

When you delete your account, we delete or anonymise the data behind it within 30 days, apart from anything we are legally required to keep, such as payment records for contributions we have already paid. Those are billing records, not your health data.

Under Indonesia's Personal Data Protection Law (Law No. 27 of 2022), and equivalent rights elsewhere including the GDPR, you can ask us to:

• Tell you what personal data we hold about you, and give you a copy.
• Correct anything that is wrong or out of date.
• Delete your data.
• Stop using it, or restrict how we use it.
• Send you a copy in a portable format.
• Withdraw consent you gave earlier — which does not undo processing that already happened.

Email hello@routtine.app. We answer within a few days, and we will not make you explain yourself to get an answer. If we cannot do what you asked, we will tell you why. You also have the right to complain to the data protection authority in your country.

Routtine is not designed for, or directed at, anyone under 16, and we do not knowingly collect their data. If you believe a child has signed up, write to us and we will delete the account and everything attached to it.

As Routtine grows, this policy will change with it. When it does, we update the date at the top of this page. If a change materially affects how we handle data you have already given us, we will tell you by email before it takes effect.

Questions, corrections, or a deletion request: hello@routtine.app. A person reads it.