Privacy
Plain-language summary of how Routine handles your information.
What we collect
Account details (name, email, optional phone), the routines you create, your appointment history with businesses on Routine, notification preferences and consent records. Payment details are handled by our payment processor — card numbers never touch Routine's servers.
Why we collect it
To calculate when you are due, find suitable appointment times, send the reminders you asked for and give businesses the minimum information needed to serve you. We do not sell personal data.
What businesses can see
A business can see your name, contact details, the appointments you book with them and any notes you add for them. Businesses cannot see routines or appointments belonging to other providers.
Reminders and consent
Transactional messages about appointments you have booked are part of the service. Marketing and SMS messages require separate opt-in, are logged with a timestamp, and can be withdrawn at any time from Account settings.
Retention
Appointment history is retained while your account is open so scheduling stays accurate. Deleting your account removes personal data; anonymised booking counts may be retained for fraud prevention and accounting.
Your rights
You can export a machine-readable copy of your data or request deletion from Account settings. Deletion requests are actioned within 30 days.
Security
Data is encrypted in transit and at rest. Access is enforced by row-level security so each account can only read its own records, and every privileged action is written to an audit log.