Privacy Policy

Effective: September 10, 2026

This policy describes how Routine Roaster (the “App”) handles your information. Routine Roaster is operated by Tin Liu (“we” / “us”). You can reach us at tliu2930@gmail.com.

The short version: there is no account and no sign-in, so we do not know who you are. What you make is kept on your phone and in your own iCloud, we never see it, and we never sell your data.

1. What you make

Some of this follows you between devices and some of it does not, so it is worth separating.

Kept on your phone and copied to your own iCloud:

• Your routines, the days they run, and their start and end dates
• The coaches you write, including their names, descriptions and portraits
• Your notification times and preferences

That copy is yours, not ours. It goes to Apple’s iCloud under your Apple ID, in the private database only you can read, so that it survives deleting the App and follows you to a new phone. We have no access to it, we receive no copy, and we cannot recover it for you. Apple’s handling of it is covered by Apple’s privacy policy.

If you are not signed in to iCloud, or you switch iCloud off for Routine Roaster in Settings, this stays on your phone alone and deleting the App deletes it.

Kept on your phone only, and never copied anywhere:

• Which routines you completed, and when — your check-off history, which is a record of what this device saw you do. It is kept for 90 days and older entries are deleted automatically. Deleting the App deletes all of it, and it does not move to a new phone.
• The messages your coach has sent you. Rebuilt from your routines, so there is nothing to restore.

2. What comes to us

Only when you tap “Generate with Pro.” That sends the coach name and the character description you typed to our server, which passes it to Anthropic (anthropic.com) to write that coach’s messages and choose a portrait.

It also sends a device check (see section 4). Nothing else goes with it — not your routines, not your completion history, and nothing that identifies you.

Generating a coach on device sends nothing at all and works with no network connection. It is free and unlimited.

3. The anonymous identifier

Pro generation costs us money per use, so the App counts how many each install has used. That requires something to count against, so the App creates a random identifier the first time it contacts our server.

It is not derived from your device, your Apple ID, your email, or anything about you. We cannot use it to identify you, contact you, or link you to any other service. It exists to hold a number.

4. The device check

The three free Pro generations cost us real money, and without a check anyone could script new anonymous identifiers to claim them over and over. So before a free generation runs, the App asks Apple’s App Attest service to confirm it is a genuine copy of Routine Roaster on a real device, and we store the key identifier Apple returns.

That identifier belongs to an installation of the App on one device. It is created by the App, cannot be read by any other app, is not Apple’s advertising identifier, and tells us nothing about you or your device beyond “this is real”.

Generations you have paid for skip the check entirely, so a problem with it can never cost you something you bought.

5. Purchases

Purchases are handled entirely by Apple. We never see your name, email, or payment details.

Apple provides a signed receipt for each purchase, and we store its transaction identifier so the generations you paid for can be credited — and restored if you reinstall or move to a new phone. That identifier records a purchase, not a person.

6. Notifications

Every message your coach sends is scheduled locally on your device. We operate no notification server, send you nothing, and hold no push token.

Apple’s iCloud sync uses a silent system notification to tell your phone that something changed on another device. That is between your phone and Apple; it carries no message, is never shown to you, and we are not involved in it.

7. What we do not do

• No analytics, telemetry, or crash reporting from your device. Our server records how long each Pro generation took and what it cost us, with nothing in it that identifies you or your coach
• No advertising, and no advertising identifiers
• No tracking across apps or websites
• No third-party SDKs in the App
• No selling or sharing of your data with anyone, for any purpose

8. Retention

The anonymous identifier, the count of generations used, purchase transaction identifiers, and the device-check key identifier are retained while the App is in service, because they are what prevent a paid balance from being lost and the free ones from being farmed. Coach descriptions sent for generation are not retained after the coach has been written.

9. Children

Routine Roaster is not directed at children under 13 and collects nothing that could identify a child.

10. Changes

We may update this policy as the App changes. The “Effective” date above changes with it.

11. Contact

Questions about this policy or your data? Email tliu2930@gmail.com.