Privacy Policy

Introduction

Routine Softworks, Inc. ("Routine Softworks," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we handle information when you use our products and services.

Core Privacy Principle

Your financial data stays on your device.

Our products are designed to run locally. Financial forecasting data (e.g., bank balances, transactions) retrieved through integrations such as Plaid is processed and stored on your device, not on servers operated by Routine Softworks.

Data Collection and Storage

Local Data Storage

• Financial and configuration data is stored locally on your device in local database files.
• Routine Softworks does not maintain a copy of this data on its own servers.
• Data is not transmitted to Routine Softworks unless you explicitly enable optional features (such as sending anonymized logs).

Website, Waitlist, and Communications

When you sign up for a waitlist or newsletter, we collect:

• Email address

We use Resend, a third-party email service provider, to manage communications. Your email address is stored in Resend's systems solely for the purpose of sending product updates and related information.

We do not sell or rent email addresses. Resend's handling of data is governed by their own Privacy Policy.

Logging and Diagnostics

• Logging is disabled by default.
• When enabled, logs are written locally to your device.
• You may optionally opt in to sending anonymized logs to Routine Softworks for troubleshooting.
• Logs do not contain banking credentials or personally identifiable financial data.

No Advertising or Behavioral Tracking

• We do not run advertising trackers.
• We do not use behavioral analytics, tracking pixels, or third-party ad networks.
• Diagnostic logging is strictly for debugging and reliability purposes.

Third-Party Services

Plaid

We use Plaid to enable secure bank connections.

How Plaid works:

• Bank credentials are entered directly into Plaid's secure interface.
• Routine Softworks does not receive or store your banking login credentials.

Data accessed via Plaid may include:

• Account identifiers and metadata
• Account balances
• Transaction history
• Institution information

Data handling:

• Data provided by Plaid is delivered to the application running on your device.
• This data is stored locally on your device and not retained on Routine Softworks servers.
• Plaid processes data in accordance with its own Privacy Policy.

Revoking access:

• You may disconnect your bank accounts at any time from within the application.
• You may also manage and revoke connections through Plaid's consumer portal: https://my.plaid.com.

Retention:

• When a Plaid connection is removed, locally stored Plaid-sourced data is deleted from the application.
• Routine Softworks does not retain copies of Plaid data after disconnection.

Plaid's use of your information is governed by Plaid's Privacy Policy. Plaid acts as a third-party data processor and processes your information based on your explicit consent. By connecting a financial account through Plaid, you authorize Plaid to access and process your financial information in accordance with Plaid's Privacy Policy.

You may withdraw your consent for Plaid's processing of your data at any time by disconnecting your financial accounts within the application or through Plaid's consumer portal. Withdrawal of consent does not affect data previously processed but will prevent future access.

Where required by applicable law, third-party services such as Plaid process personal data only with your explicit consent, which may be withdrawn at any time.

Stripe

We use Stripe, Inc. to process payments. Stripe acts as a data processor (or service provider) when processing payments on our behalf.

We do not collect your name or email. When you subscribe or make a purchase, you enter this information directly into Stripe's hosted checkout page. Stripe collects it from you.

Data Stripe collects directly:

• Payment method details (e.g., card number, expiration, CVC) are handled directly by Stripe on their hosted checkout page; card data never touches our servers.
• Routine Softworks does not store full payment credentials.
• Stripe may collect device information, IP address, and behavioral data (e.g., typing patterns, mouse movements on the payment form) for fraud detection and loss prevention.

Legal basis and retention:

• We process payment data to fulfill our contract with you, comply with legal obligations (e.g., tax and accounting), and for fraud prevention.
• Transaction records may be retained as required by applicable law (e.g., tax and accounting requirements).

International transfers:

Payment data may be transferred to the United States. Stripe relies on mechanisms such as Standard Contractual Clauses and the EU-U.S. Data Privacy Framework. See Stripe's Privacy Center for details.

Stripe's use of your data is governed by their Privacy Policy.

Resend

We use Resend for email communications related to waitlists and updates. Email addresses are stored and processed by Resend solely for this purpose. See Resend's Privacy Policy.

Planned Features and Future Integrations

We may introduce additional features involving third-party services, including:

• Optional web-based interfaces
• User-selected cloud storage providers (e.g., iCloud, Google Drive, Dropbox)
• Optional AI-assisted categorization or analysis

If these features are introduced: providers will be listed explicitly in this policy; data handling details will be disclosed prior to activation; and users will retain control over whether such features are enabled.

Data Security

Payment Processing

For payment processing, we rely on Stripe's security measures. Card data is never transmitted to or stored by Routine Softworks.

Local Security

Because data is stored locally, security depends on your device configuration. We recommend:

• Using full-disk encryption
• Applying strong file system permissions
• Keeping your operating system up to date

Your Rights

Access and Portability

• You have full access to your data through the application.
• You may export your data at any time.
• Local database files can be accessed using standard tools.

Deletion

• You may delete data through the application interface.
• To completely remove all data, you may delete the local database files directly.
• Routine Softworks does not retain backups of your financial data.

Payment and Subscription Data

• Payment and subscription data is collected and processed by Stripe. To manage or delete this data, cancel your subscription and contact Stripe or use Stripe's Privacy Center.

Email Communications

• You may unsubscribe from emails at any time using the unsubscribe link provided in each message.

Compliance

GDPR

Routine Softworks does not process or store user financial forecasting data on its own servers. Users maintain full control over their data, which is stored locally. Email addresses and optional anonymized logs are processed only with user consent. Payment data is processed by Stripe when you subscribe; Stripe's processing is governed by their privacy policy and data processing agreement.

CCPA

Routine Softworks does not sell personal information. Users retain control over locally stored data. Email addresses collected for communications are used solely for that purpose. Payment data is processed by Stripe when you subscribe; we do not sell or share payment data.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last Updated" date above. You may subscribe to our RSS feed to receive notifications of updates to this policy and other announcements. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact: hello@routinesoftworks.com