GraceRoutine Privacy Policy

Short version GraceRoutine primarily stores your profile, routines, check-ins, notes, and photos locally on your device. Data is only sent off-device when you choose optional Google Drive backup and restore, or when production crash and diagnostic reporting is sent to Sentry. The app does not sell your personal information and does not use your self-care data for advertising.

1. Overview

This Privacy Policy describes how GraceRoutine handles information when you use the app. GraceRoutine is a self-care and routine tracking app that lets you manage routines, log progress, save wellbeing check-ins, store optional photos, personalize themes, and optionally back up your data to your own Google Drive account.

Unless otherwise stated, GraceRoutine is designed so that your information stays on your device by default.

2. Information We Collect

Information you enter in the app

Your profile details, such as your display name, selected experience style, theme choices, notification settings, and layout preferences.
Your security settings, including whether biometric lock is enabled and a locally stored hashed fallback passcode.
Your wellbeing check-ins, which may include energy, stress, mood notes, selected emotions, sleep quality, daily intention, and recent check-in history.
Your routine and task data, such as custom tasks, routine groups, schedules, reminder times, active programs, completion history, notes, and self-care points.
Optional images you choose to save, including routine log comparison photos and an optional profile photo.

Information collected automatically

Basic app diagnostics and error information when crash reporting is enabled in production builds.
Low-volume navigation and event breadcrumbs used for troubleshooting app problems.
Technical information needed to process local reminders, such as task identifiers and reminder timing metadata stored on your device.

Information from third-party services you choose to use

If you use backup or restore, GraceRoutine requests access to your Google Drive using the Google Drive drive.file scope so it can create, read, and restore backup files in your Drive.
GraceRoutine uses a browser-based OAuth flow for Google Drive backup. Short-lived access tokens are used during the backup or restore flow and are not intentionally stored as a persistent sign-in session by the app.

Stored locally by default Profile settings, routines, logs, check-ins, points, passcode hash, profile image path, and optional photos are stored on your device using local storage, local app files, and a local SQLite database.

Sent off-device only in limited cases Backup files may be uploaded to your Google Drive when you choose backup, and production crash or diagnostic data may be sent to Sentry.

3. How We Use Information

To run the app and save your routines, logs, check-ins, themes, and preferences.
To personalize the app experience, including adaptive messages, theme selection, layout choices, and routine reminders.
To protect access to the app when you enable biometric lock or a fallback passcode.
To create local reminder notifications for your selected routines and schedule settings.
To back up and restore your data to and from your Google Drive account when you choose to use that feature.
To detect, troubleshoot, and fix crashes, errors, and app stability issues.

5. Storage, Backup, and Retention

On-device storage

GraceRoutine stores most app data locally on your device. This may include browser local storage for profile settings and web fallback behavior, a local SQLite database for routines and logs, and app document storage for saved images.

Google Drive backup files

If you use backup, GraceRoutine creates a backup folder in your Google Drive and uploads a backup file that may contain a database export and archived photos. Those files remain in your Google Drive account until you delete them.

Retention

Locally stored app data remains on your device until you delete it, clear app storage, uninstall the app, or overwrite it through restore actions.
Backup files remain in your Google Drive until you delete them from Drive.
Crash and diagnostic data retention is governed by Sentry's retention settings.

6. Permissions and Device Features

Camera and Photos

If you choose to take or select a photo for a routine log or profile image, GraceRoutine accesses your camera or photo library only for that action and saves the selected image locally on your device.

Notifications

If you enable notifications, GraceRoutine schedules local notifications on your device to remind you about routines. These reminders are generated on-device and are not sent through a remote push notification service.

Biometric lock

If you enable biometric lock, GraceRoutine asks your device operating system to perform biometric verification. GraceRoutine does not receive or store your fingerprint, face template, or other raw biometric data. The app only receives a success or failure result from the operating system.

Passcode fallback

If you set a fallback passcode, the app stores a hashed version of that passcode locally on your device rather than storing the plain-text passcode.

Internet access

Internet access is used for Google Drive backup and restore, OAuth sign-in through your browser, and production crash and diagnostic reporting.

7. Security

GraceRoutine uses reasonable measures intended to protect information handled by the app, including local device storage, passcode hashing, and operating system biometric verification. However, no method of storage or transmission is completely secure, and we cannot guarantee absolute security.

8. Your Choices

You can choose whether to enable notifications, daily check-ins, biometric lock, and a fallback passcode.
You can choose whether to add photos, mood notes, intentions, and other optional self-care entries.
You can remove profile photos, delete app data from your device, uninstall the app, or delete backup files from your Google Drive.
You can decline to use Google Drive backup and continue using GraceRoutine only with local on-device storage.

9. Children's Privacy

GraceRoutine is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through the app. If you believe a child has provided personal information through GraceRoutine, please contact us using the support details made available with the app so the issue can be reviewed.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Your continued use of GraceRoutine after an updated policy becomes effective means the updated policy will apply going forward.

11. Contact

If you have questions about this Privacy Policy or privacy practices for GraceRoutine, you can contact Woolpack at info@woolpack.in or visit https://woolpack.in.