Privacy Policy

Who operates Rutmia

Rutmia is operated by Luis Angel Lucatero Villanueva, an individual in Mexico.

For privacy questions, rights requests, or support, email hola@rutmia.com. Please do not include HealthKit data, private habit information, or exported files unless they are necessary for your request.

What Rutmia handles

You can use Rutmia without creating a Rutmia account and without providing an email address to the app. Routine information is primarily stored and processed on your device. Depending on the features you use, this can include habit titles, schedules, reminders, goals, tracking settings, completion or check-in data, notes, and related preferences.

Rutmia does not use personal data for advertising. It does not sell or rent personal data and does not use cross-app tracking. Rutmia does not create a separate cloud profile for you.

Optional HealthKit and Calendar access

HealthKit and Calendar access is optional. When you grant permission, Rutmia uses the permitted information only for the feature described in the app. You can change these permissions in your device settings.

For the current cloud-assistance flows, HealthKit data, calendar event titles and notes, and raw completion or check-in history are not included in requests sent to Apple Private Cloud Compute or Google Gemini. The on-device features that use these permissions remain subject to Apple's controls and terms.

Optional iCloud sync

If you turn on iCloud sync, Apple stores and synchronizes your routine data through the Apple account and iCloud services you use. Apple controls those services under its own terms and privacy information.

Rutmia does not include your iCloud identity in requests to Apple Private Cloud Compute or Google Gemini. Turning off iCloud sync does not necessarily delete an existing Apple-managed copy; manage that copy through the Apple settings and controls available to you.

Apple Intelligence and optional cloud assistance

Rutmia can use Apple Intelligence for on-device understanding on supported devices. If you allow AI model sharing and Wi-Fi or cellular data is available, Rutmia tries Apple Private Cloud Compute first when it is available, then Google Gemini through Firebase. If consent is off, the network is unavailable, or cloud processing fails, Rutmia uses local processing. Basic conversational questions may receive a local response and should not consume cloud quota. Settings shows the provider currently available to the app and device.

For a routine proposal, the minimum cloud context can include your request, locale, time zone, opaque habit identifiers, active habit titles, categories, schedules, reminder settings, tracking settings, and goal configuration. Rutmia does not include HealthKit data, calendar event titles or notes, raw completion or check-in history, purchase data, email, advertising identifiers, or your iCloud identity in that proposal request.

When a cloud model writes a short motivational message, the request can include aggregate progress metrics: longest streak, number of active habits with insights, average completion rate, days since the last completion, and time-of-day context. It does not include habit titles or raw completion history for that message.

Rutmia validates the structured response and shows any suggested changes for your review. Rutmia does not apply an AI suggestion automatically.

Cloud prompts and responses are governed by the provider's current terms and privacy information. Rutmia does not promise a fixed provider retention period and does not make a promise that provider prompts or responses are never used for training. Review the provider documents before enabling cloud assistance.

Provider terms and services

Apple provides the App Store, iCloud, HealthKit, Calendar, on-device Apple Intelligence, Apple Private Cloud Compute, and other Apple services that you choose to use. Google provides Gemini through Firebase AI Logic for the optional cloud path. The public website is hosted by Vercel.

When you enable and use cloud assistance after the in-app disclosure, the applicable Apple, Google, and Firebase terms and privacy information govern their respective provider processing. If you do not want cloud-provider processing, keep AI model sharing disabled; requests then remain on-device.

Rutmia uses Firebase only for the optional Gemini connection and Firebase App Check protection described above. Rutmia does not use Firebase for account creation, advertising, cross-app tracking, analytics, crash reporting, routine storage, or a routine database.

Purchases and App Store payments

Purchases are handled through Apple's App Store payment systems. Rutmia does not receive your full payment-card details. Rutmia may receive the information needed to recognize whether Pro access is active, while Apple controls the payment flow, billing records, restoration, and refunds that Apple handles.

The website and support

If you email hola@rutmia.com, the information you choose to send is used to read and respond to your message. Your email provider and our mail systems may retain that message according to their own systems and policies; this Policy does not promise a fixed email-retention period.

The public website is hosted by Vercel. It may process technical information needed to deliver, protect, and troubleshoot pages. Rutmia does not intentionally use advertising cookies, advertising networks, or cross-app tracking on the website.

Why information is used

Rutmia uses information to provide the features you request, process routine data on your device, synchronize through iCloud when you enable it, provide cloud assistance after consent, recognize Pro access, respond to support messages, and protect the app and cloud service against misuse.

The legal basis for each activity depends on the activity and the law that applies where you live. Where applicable law requires consent, Rutmia will request it. This Policy does not remove any mandatory legal protection or right.

Retention, deletion, and consent withdrawal

Routine data stored on your device remains there until you delete it, remove the app, or use the app's controls. Rutmia may also keep recent local usage timestamps needed to enforce Free and Pro cloud limits and reasonable anti-abuse safeguards. Free and Pro cloud limits can differ, and neither plan promises unlimited cloud use.

You can withdraw cloud consent in Rutmia. After withdrawal, new requests remain on-device. You can also manage HealthKit, Calendar, notifications, and iCloud permissions through the app or your device settings. Data held by Apple or Google may require you to use that provider's own controls; Rutmia does not promise that turning off a permission deletes a provider-managed copy.

Rutmia does not operate a separate Rutmia account database for routine data. Apple and Google/Firebase provider retention and deletion are described in the provider documents linked above. Rutmia does not state a fixed period for cloud prompts or responses and does not promise that they are not used for training.

Security

Rutmia is designed to minimize what leaves your device, ask for cloud assistance only after the relevant consent, and protect the Google Gemini path with Firebase App Check in the app's production flow. Apple applies its own controls to Apple Private Cloud Compute. Rutmia validates the returned structured proposal and waits for your approval before applying changes.

Apple, Google/Firebase, Vercel, and your device also provide security controls for their services. No device, network, or online service can be promised to be completely secure.

International processing

Apple, Google/Firebase, and Vercel operate services that may process information in countries other than the country where you live. The provider's terms and privacy information describe their international processing and safeguards. Use of cloud assistance means that the limited request context described above may be processed through Apple or Google services, depending on the provider selected by the app.

Your rights and choices

Depending on your location and the law that applies, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal data; withdraw consent; opt out of certain processing; and complain to a regulator. In Mexico, these may include ARCO rights and the right to revoke consent when applicable. The available rights, exceptions, deadlines, and identity checks can differ in the United States, the EU, the United Kingdom, and other markets.

To make a request, email hola@rutmia.com. Rutmia may need enough information to understand and verify the request. Some information is controlled by you on your device, Apple, Google/Firebase, Vercel, or your email provider, so Rutmia may direct you to the relevant provider's controls when appropriate.

Children's privacy

Rutmia is intended for people aged 13 and older. If the law where you live sets a higher age or requires authorization from a parent or guardian, that requirement controls. Rutmia is not directed to children under 13.

If you are a parent or guardian and believe a child has provided personal information through Rutmia, email hola@rutmia.com. We will review the request and take the action required by applicable law.

Policy updates and contact

Privacy Policy updates are separate from acceptance of the Terms of Use. We will keep the current Policy, version, effective date, and version history visible on this page. For a material privacy change, Rutmia will provide a conspicuous notice and obtain any consent required by applicable law before using the changed practice.

For privacy questions or requests, email hola@rutmia.com. Rutmia is operated by Luis Angel Lucatero Villanueva.