What Routina holds, and what it never does with it.
Last updated 3 August 2026.
The short version
Routina is a personal health record. It stores what you put into it, plus what you explicitly connect, so that you can read it back and hand a summary to a clinician. It is not advertising-funded, and there is nothing to sell: your data is never sold, never shared with advertisers, never used to build a profile of you, and never used to train a model.
It is also not a medical device. Nothing in it diagnoses, and nothing in it tells you what to do about a number. It describes what you recorded.
What it stores
Each category below is off until you turn it on, apart from the general one, and the app works with any subset. Declining a category hides that part of the app rather than degrading it.
- General health data - Body, diet, vitals and lab results, the everyday numbers Routina helps you make sense of.
- Mental-health entries - Mood notes and how your head's been. Kept private, only ever shown back to you.
- Menstrual cycle - Cycle dates and symptoms, so patterns can sit alongside the rest of your body.
- Skin & mole photos - Close-up photos to watch changes over time. Kept private to your account, opened only through a short-lived link for you, and never analysed.
- Overnight sleep audio (not collected yet) - Ambient sound through the night, from the companion app.
Alongside these it stores your email address (from signing in), and the few personal details you choose to give at /settings/you: a name, year of birth, sex, height, and which country's health service you use. Every one of those is optional, and the features that want them say so plainly when they are missing rather than guessing.
Where it lives, and who can read it
Data is held in a Supabase Postgres database and, for photos, in a private storage bucket. The app runs on Vercel. Every table is protected by row-level security keyed to your account, so one account cannot read another's rows.
On top of that, the sensitive columns are encrypted at rest with a key derived per user: free-text health notes, and the clinical numbers (body composition, vitals, lab values, measurements, your height). They are stored as ciphertext and decrypted only in the request that serves them to you. Skin photos are never public - they are reached through a short-lived signed link generated for you, and are never analysed.
What it connects to, only if you ask
- Google Health / Health Connect - steps, sleep, weight, body composition and resting heart rate, read from the hub on your phone or account. Connected by you, revocable by you.
- A scale or watch - through the same hub, or through a collector you run yourself.
- Saveri - a separate app of the same author, for the home-inventory link. Connected with a token you create, and only when you connect it.
Access tokens for these are stored encrypted. Disconnecting a source stops the sync and leaves the readings already imported in your account, where you can delete them.
The Android app
The Android app is the same account in a native shell. It asks for Health Connect permissions only for the record types listed above, and only after you grant them on the device. Its home-screen widgets use a device-specific token, scoped to the few actions they perform, which you can revoke at any time from Settings. Revoking it stops the widgets immediately.
What you can do
- Change your mind. Every consent can be withdrawn in Settings, as easily as it was given.
- Take a copy. The doctor report exports as a plain Markdown file you keep.
- Delete it. Ask and your account and its rows are removed, photos included. Deleted means deleted, not hidden.
Under the GDPR you also have the right to access, correct, port and object. Write to ux@luislandi.com and a person rather than a queue will answer.
Contact
Routina is built and run by Luis Landi. For anything on this page, including a deletion request or a complaint, write to ux@luislandi.com.