Privacy

Nothing. RoutineAnchor has no first-party server and no account system. Your routines, steps, momentum history, parked impulses, parked thoughts, and mood tags are stored on your device (in an encrypted store protected by your device passcode) and, if you’re signed into iCloud, mirrored to your own private iCloud database. Apple encrypts that data in transit and at rest; we cannot read it.

If you invite someone to a focus session, the invite is a private iCloud share link. Only the minimum needed to feel co-present is shared with the people you invite: your chosen display name, an avatar glyph, the task text you type, and step-completion counts. Nothing else — no routines, no history. The host can revoke access at any time, and every iCloud hiccup degrades to a working solo session.

Connecting your calendar is optional and asked for only when you tap the connect card. Access is read-only and used on-device to show today’s events and offer a “get ready” run before your next appointment. Calendar data never leaves your device.

Reminders, step alarms, and impulse cool-down nudges are local notifications scheduled on your device. There is no push server.

Subscriptions and the lifetime unlock are handled entirely by Apple’s App Store (StoreKit). We never see or store payment details.

None. No analytics SDKs, no advertising identifiers, no third-party trackers, no data sold or shared — there is nothing to sell.

Delete the app to remove the on-device store. To remove synced data too, delete RoutineAnchor’s data from iCloud in Settings ▸ your name ▸ iCloud ▸ Manage Account Storage.

Email support@routineanchor.app. A human reads every message.