Privacy Policy

Effective date: October 2, 2026

This Privacy Policy explains how RoutineSpot LLC ("RoutineSpot," "we," "us," or "our"), collects, uses, and discloses information when you use the RoutineSpot iOS application, our website, and related services (together, the "Services").

RoutineSpot is currently offered only in the United States.

Summary

• We use account information and the fitness content you create to provide and sync the Services.
• We may review the routines and workouts stored in your account to improve the app.
• We do not collect data from Apple Health, precise location, contacts, motion sensors, or wearable devices.
• We do not sell personal information or consumer health data.
• We do not use personal information for targeted advertising.
• You can delete your account and associated RoutineSpot content from Settings in the app.

Information we collect

Information you provide

Account information. When you create or use an account, we collect your email address, account identifier, authentication information, and, if you use Sign in with Apple and choose to share it, your name. Apple may provide a private relay email address instead of your personal email address. Passwords are handled by Firebase Authentication. We do not have access to your plain-text password.

Fitness and user content. We collect the content you create in RoutineSpot, including routine and exercise names, notes, planned and completed sets, weights, repetitions, rest periods, timers, workout dates, completion status, and workout history. This information may be considered fitness, health, or consumer health data under some state laws.

Settings. We collect settings needed to provide your chosen experience, such as rest-timer settings, sound preferences, and whether to keep the screen awake during a workout.

Support and privacy requests. If you contact us, we collect the information in your message and any other information you choose to provide.

Waitlist

If you join the waitlist on this website, we store the email address you submit, the time you joined, and that you signed up on this site. We use that address to send TestFlight invites and launch notes. We do not sell the list. Firebase App Check with reCAPTCHA Enterprise checks that the signup came from this site. Google can process device, browser, and interaction signals for that check.

Information collected automatically

Usage information. In production versions of the app, we use Firebase Analytics to collect a limited set of events, such as sign-in success or failure, starting or saving a workout, opening a routine, and adding an exercise. Events may be linked to your Firebase account identifier. We do not send exercise names, routine names, notes, email addresses, authentication tokens, or other authored workout content to Firebase Analytics.

Crash and diagnostics information. We use Firebase Crashlytics to collect crash reports and selected error reports. These reports may include your Firebase account identifier, app state, device and operating-system details, and technical diagnostics. We limit custom reports to reason codes and technical identifiers. We do not intentionally include your email address, authentication tokens, or authored workout text.

Performance information. We use Firebase Performance Monitoring to measure app launch, save, collection-load, and network performance. This may include timing data, network request information, device information, app version, and an outcome such as success or error. We do not intentionally include authored content or direct contact information in custom performance traces.

Security and service logs. Our service providers and servers may automatically receive IP address, request date and time, device and app information, authentication status, App Check signals, and security or error logs. We use this information to operate, secure, debug, and prevent abuse of the Services.

Information we do not collect through current app features

RoutineSpot does not currently collect:

• payment-card or purchase information
• advertising identifiers for targeted advertising
• precise geolocation
• contacts
• Apple Health or HealthKit data
• heart rate or other biometric measurements
• photos, camera recordings, or microphone recordings
• raw motion or wearable-sensor data

RoutineSpot may use Apple speech, Siri, Shortcuts, Spotlight, notification, and audio features when you enable or invoke them. Apple processes information under its own terms and privacy policy. RoutineSpot does not receive a recording of your Siri request from Apple. A request's text and the resulting action may be processed by RoutineSpot when needed to complete the request.

How we use information

We use information to:

• create, authenticate, secure, and manage your account
• store, sync, display, edit, and delete your routines, exercises, workouts, history, and settings
• restore an active workout across launches or devices
• provide rest timers, notifications, Siri and Shortcuts actions, and Spotlight indexing
• enforce product limits and prevent fraud, misuse, and unauthorized access
• measure use and performance and improve the Services
• review the routines, exercises, and workouts stored in your account to see how the app is used and to improve it
• diagnose crashes and technical failures
• respond to support, privacy, and legal requests
• comply with law and protect users, RoutineSpot, and others

That review uses the documents already stored for your account. We do not copy that text into Firebase Analytics.

We do not use your fitness or consumer health data for advertising, data brokerage, or decisions about employment, insurance, credit, housing, or health care.

How we disclose information

We disclose information only as described below.

Service providers

Google Firebase and Google Cloud. We use Firebase Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, App Check, Analytics, Crashlytics, and Performance Monitoring. Google processes account, user content, usage, diagnostic, performance, network, and security information to provide these services to us.

Apple. If you use Sign in with Apple, Siri, Shortcuts, Spotlight, notifications, or other Apple platform features, Apple processes information needed to provide those features. Information you choose to share with RoutineSpot is handled under this policy.

These providers may process information in the United States and in other locations where they operate. Their handling of information is also governed by their own privacy terms.

Legal, safety, and business reasons

We may disclose information:

• when you direct us or consent
• to comply with a subpoena, court order, or other legal obligation
• to investigate fraud, security incidents, or violations of our User Agreement
• to protect the rights, safety, and property of users, RoutineSpot, or others
• to professional advisers who owe confidentiality duties
• in connection with a financing, merger, acquisition, reorganization, bankruptcy, or sale of assets, subject to applicable law

We may use and disclose aggregated or deidentified information that cannot reasonably be linked to you. We will not try to reidentify information that we maintain as deidentified.

No sale or targeted advertising

We do not sell personal information or consumer health data for money or other valuable consideration. We do not share personal information for cross-context behavioral or targeted advertising. We do not use your information to profile you in furtherance of decisions that produce legal or similarly significant effects.

Because we do not engage in these activities, RoutineSpot does not currently provide a sale or targeted-advertising opt-out. If our practices change, we will update this policy and provide any controls required by law before the change takes effect.

Consumer Health Data Privacy

This section applies to "consumer health data" as defined by applicable state law, including Washington's My Health My Data Act and similar laws.

Categories of consumer health data

RoutineSpot may collect:

• exercise and workout plans
• workout dates, durations, completion status, and history
• sets, repetitions, weights, rest periods, and related notes
• inferences that are directly apparent from this data, such as that you planned or completed a type of exercise

RoutineSpot does not currently collect diagnoses, prescriptions, medical records, reproductive or sexual health information, precise location, biometric identifiers, or data from HealthKit or wearable devices.

Sources and purposes

We collect consumer health data directly from you when you enter it and from your use of workout features. We use it to provide the features you request, sync your account, show history and progress context, review how those features are used so we can improve them, secure the Services, and comply with law.

Consumer health data disclosures

We disclose consumer health data to:

• Google Firebase and Google Cloud to host, sync, secure, and operate the Services
• other recipients when you direct us, or when a legal, safety, or business disclosure described above applies

RoutineSpot has no affiliates that receive consumer health data as of the effective date above. We do not sell consumer health data.

Your consumer health data rights

Subject to applicable law, you may ask us to:

• confirm whether we collect, share, or sell your consumer health data
• access the consumer health data we hold about you
• receive a list of third parties and affiliates with whom we shared or sold your consumer health data
• withdraw consent for collection or sharing that is based on consent
• delete your consumer health data

You may delete your account in the app or contact us at support@routinespot.com. If we deny your request, you may appeal by replying to our decision with the subject "Privacy Appeal." You may also contact your state attorney general where applicable.

RoutineSpot is a fitness service, not a health-care provider. RoutineSpot is not a covered entity or business associate under the Health Insurance Portability and Accountability Act ("HIPAA"), and data in RoutineSpot is not protected by HIPAA.

Retention

We keep account information, fitness content, workout history, and settings while your account is active, unless you delete content sooner. When you delete your account in Settings, our deletion process removes your Firebase Authentication account and RoutineSpot data associated with your account, including user records, routines, workouts, and exercise templates.

Analytics, crash, performance, security, and server logs are retained according to our providers' settings and for as long as reasonably needed for the purposes described in this policy. Some information may remain temporarily in encrypted backups or be retained longer when required for security, fraud prevention, dispute resolution, or law. We may retain aggregated or deidentified information that cannot reasonably identify you.

Your choices and rights

Depending on your state, you may have the right to:

• know whether we process your personal information
• access personal information we hold about you
• correct inaccurate personal information
• delete personal information
• receive a portable copy of information you provided
• opt out of sale, targeted advertising, or certain profiling
• limit certain uses of sensitive personal information
• appeal a denied request
• exercise your rights without discriminatory treatment

You can edit or delete much of your content in the app. You can delete your account from Settings after signing in again. You may also send a request to support@routinespot.com.

We may ask you to verify your identity using your account or email address. An authorized agent may submit a request where state law permits. We may require proof of the agent's authority and may ask you to confirm the request. We will respond within the time required by applicable law.

You can control Siri, notifications, and related permissions in iOS Settings.

Security

We use administrative, technical, and organizational safeguards designed to protect personal information. These include authenticated, user-scoped storage, access controls, request verification, encrypted transport, product limits, and abuse controls. No system is completely secure, and we cannot guarantee that information will never be lost, accessed, or disclosed without authorization.

Protect your password and device. Contact us promptly if you believe someone has accessed your account without permission.

Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from a child under 13. If you believe a child under 13 has provided information to RoutineSpot, contact us at support@routinespot.com. We will take appropriate steps to delete it.

If you are under the age of majority in your state, use RoutineSpot only with the permission and supervision of a parent or legal guardian.

Changes to this policy

We may update this policy as the Services or law changes. We will post the updated policy and change the effective date. If a change materially affects how we use information already collected, we will provide additional notice or request consent when required by law.

Contact us

For privacy questions or requests, contact:

RoutineSpot LLC
Email: support@routinespot.com
Support: support@routinespot.com