RoutineSense Privacy Policy

Last updated: August 17, 2026

RoutineSense is developed by BafaTech Consulting ("we", "us"). This policy explains what information the app handles, how it is used, and the choices you have. RoutineSense is designed to run primarily on your device — creating an account is optional.

The short version

• The app works fully offline. You do not need an account to use it.
• Your routine data and journal entries are stored in an encrypted database on your device.
• If you sign in, some data (routine windows, interests, and feedback on suggestions) is synced to our backend so you can back it up and restore it. Your journal entries, notes, and name stay on your device only.
• We do not collect your precise location, we do not sell your data, and we do not use third-party advertising.

Information we process

• Account information (optional): if you sign in with email, Apple, or Google, we receive your email address and a user ID to authenticate you. Sign in with Apple may provide a private relay email instead of your real address.
• Routine and usage data: your routine windows (labels, days, times), your interests, and your feedback on suggestions (accepted / skipped / completed) together with a categorical context snapshot (for example a time-of-day band or day type). We never record your precise location or raw sensor data. This is used to personalize suggestions and show your insights.
• On-device-only data: your name (if you enter one), your journal entries, and your reading / learning queue are stored only on your device and are never uploaded to our servers.
• Diagnostics: if crash reporting is enabled, we use Sentry to collect crash and error reports (device and OS information, stack traces) to fix problems. Sensitive fields are scrubbed before sending.
• Product analytics: we record minimal first-party analytics events (an event type and identifiers only, such as "data exported"). These never include window times, titles, or location.

How your data is stored and protected

• On-device data is kept in an encrypted database (SQLCipher).
• You can turn on biometric lock (Face ID / fingerprint) for sensitive screens. Those checks are performed by your device’s operating system — we never receive your biometric data.
• Network traffic uses TLS with certificate pinning.
• On our backend, row-level security ensures only you can read or change your own rows.

When data leaves your device

No data leaves your device unless you sign in.

• When you are signed in, the app syncs your routine windows, interests, and feedback events to our backend (Supabase) as a backup / restore and multi-device feature.
• Notifications are generated on your device. We do not run a push server that can see your routines.

Service providers

We share data with the following providers only as needed to run the app. We do not sell or share your personal data with advertisers or data brokers.

• Supabase — backend hosting, authentication, and the database for your account and synced data.
• Sentry — crash and error diagnostics (only if enabled).
• Apple and Google — only if you choose to sign in with them.

Data retention

• On-device data stays until you delete it or uninstall the app.
• Synced data stays until you delete it or delete your account. Older raw feedback signals are purged periodically under our retention policy.
• When you delete your account, your account and its data are removed, and backups are purged within 30 days.

Your choices and rights

• Use the app offline — you can skip creating an account entirely.
• Export your data: Settings → Export my data (JSON).
• Delete on-device data: Settings → Delete all data.
• Delete your account: Settings → Account → Delete account, which removes your account and its cloud data.
• Depending on where you live (for example under GDPR or CCPA), you may have rights to access, correct, or delete your data. Contact us to exercise them.

Children's privacy

RoutineSense is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect data from them.

International users

If you use the app outside the country where our servers are located, your information may be processed in other countries whose data protection laws differ from your own.

Changes to this policy

We may update this policy from time to time. The "Last updated" date above reflects the most recent version, and material changes will be reflected in the app.

Contact

Questions about this policy or your data? Email us at partners@bafatechconsulting.com.