1. Overview
This Privacy Policy explains how RUTINA("we", "us") collects, uses, shares, and protects personal data when you use rutina.al and related services (the "Service").
By using the Service, you acknowledge this policy. Where consent is required (for example, optional health details, camera access, or certain AI features), we will ask for it or obtain it through your use of those features.
2. Who we are
RUTINA operates the fitness coaching platform available at rutina.al. For privacy requests, contact redtocila@gmail.com.
3. Data we collect
Account & contact data
- Name, email address, and password (stored hashed)
- Optional phone number
- Profile settings such as locale, unit system, avatar, and preferences
Health, lifestyle & intake data
- Age, gender, height, weight, and fitness goals
- Optional intake questionnaire answers (for example sleep, diet, allergies, injuries, medications, stress, work schedule, and related lifestyle details)
- Macro targets and water goals
Fitness & usage content
- Workouts, sessions, cardio, HIIT, habits, and calendar entries
- Meal logs, macros, grocery lists, and related nutrition data
- Weight and body measurement logs
- Progress photos (live Snapshot or From gallery) and meal photos you capture or upload
- Progress photo identity baseline and AI analysis results used to verify that later photos match you and the expected pose
- Barcode values you scan for meal logging and product/nutrition suggestions returned from public databases
- AI chat messages, plan requests, and coaching interactions
Referrals
- Your referral code and successful invite relationships
- Referral credit balances, discounts applied, and related checkout metadata
Payments & subscriptions
- Subscription plan, status, billing interval, and order references processed via PokPay
- Challenge entry payments and related order metadata when applicable
- We do not store full payment card numbers on our servers
Device permissions & media
- When you use photo or barcode features, your browser may request camera and/or photo library access. Media stays on your device until you capture or select an image to upload.
- We process the images and barcodes you choose to submit for the features you use (logging, AI review, coaching).
Technical & diagnostic data
- Device/browser information, IP address, and approximate location derived from network data
- Pages visited, feature usage, and performance metrics
- Error and crash logs used to keep the Service reliable
Local device data
- Authentication session cookies needed to keep you signed in
- Theme, accent, and similar UI preferences in local storage
- Draft intake answers stored locally on your device before signup
- Acknowledgments such as progress photo or AI Coach "Read me" agreements stored locally so we know you have accepted in-app rules
- Temporary referral codes from share links until checkout
4. How we use data
- Create and manage your account
- Deliver personalized workouts, nutrition tools, and coaching
- Process subscriptions, challenge fees, referrals, and related billing
- Power AI features you use (meal analysis, barcode-assisted logging, chat, plans, predictions, progress photo review, recommendations, and reports)
- Verify progress photo authenticity and identity consistency across check-ins
- Run live classes, challenges, rankings, and progress features
- Send service notices (for example plan delivery, billing, or security alerts)
- Improve product quality, prevent abuse, and fix bugs
- Comply with legal obligations
5. Legal bases (EEA / UK and similar)
Where GDPR or similar laws apply, we process personal data under these bases:
- Contract: to provide the Service you request (account, plans, payments, core tracking features)
- Legitimate interests: security, fraud prevention, product improvement, abuse prevention for challenges/referrals, and aggregated analytics — balanced against your rights
- Consent: optional health/intake details, camera/gallery access in your browser, and certain voluntary features; you may withdraw consent where processing is consent-based
- Legal obligation: when we must keep records for tax, accounting, or lawful requests
Health-related information you choose to provide is used to personalize coaching and plans. Provide only what you are comfortable sharing.
6. How we share data
We do not sell your personal data. We share data only as needed with:
- Infrastructure providers such as Supabase (database, authentication, file storage) and our hosting platform
- Payment processors such as PokPay to complete transactions
- AI providers (for example OpenAI and/or Anthropic) when you use AI features — limited to the content needed for that request (which may include meal or progress images and related context)
- Public product databases such as Open Food Facts when you scan a barcode — we send the barcode to look up product and nutrition information
- Optional search/tools used by AI coaching for web-assisted answers, when that capability is enabled
- Monitoring & performance tools such as error tracking (e.g. Sentry) and performance insights
- Coaches / platform operators who need access to deliver your training, review progress photos, or provide support
- Authorities when required by law or to protect rights, safety, and the integrity of the Service
Challenge leaderboards or community features may display your display name, progress metrics, or other information you choose to share in that context. Referral relationships link inviter and invitee accounts only as needed to apply discounts and credits.
7. International transfers
Some providers process data in countries outside Albania or the EEA. Where required, we rely on appropriate safeguards such as the provider's standard contractual clauses or equivalent transfer mechanisms.
8. Retention
- Account, profile, fitness logs, progress photos, and referral records are generally kept while your account is active
- Meal photos are typically retained for a limited period (about 30 days) and then removed according to our photo expiration process
- Progress photo identity baselines and AI analysis metadata are kept with your account so later check-ins can be verified consistently
- Billing and transaction records may be kept longer as required for accounting, disputes, or legal compliance
- After account deletion requests, we delete or anonymize personal data within a reasonable period, except where retention is required by law or for legitimate security/billing needs
9. Security
We use industry-standard safeguards including encrypted connections (HTTPS), access controls, authenticated sessions, and database row-level security for user data. No method of transmission or storage is 100% secure. Please use a strong unique password and notify us of any suspected unauthorized access.
10. Your rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Export or receive a copy of your data
- Object to or restrict certain processing
- Withdraw consent where processing is based on consent
- Lodge a complaint with a supervisory authority
To exercise these rights, email redtocila@gmail.com. We may need to verify your identity before fulfilling a request.
You can also review this policy anytime from your Profile tab in the app.
11. Cookies & local storage
We use essential cookies and similar technologies for authentication and session management so the Service works securely. We also store preferences (such as theme and accent), temporary intake drafts, referral codes from share links, and Read me acknowledgments in your browser's local storage. These are not used for advertising networks.
12. Children
The Service is intended for users aged 16 and older. We do not knowingly collect personal data from children under 16. If you believe a child has provided data, contact us and we will take appropriate steps to delete it.
13. Changes
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest version. For material changes, we may provide additional notice in-app or by email.
14. Contact
Privacy questions or requests: redtocila@gmail.com. You can also reach support at +355 69 994 4675 or via our contact page.
Related: Terms of Service.