What we collect, and why.

This policy explains how Routine Mastery, Inc. (“Routine Mastery”, “we”, “us”) handles personal information collected through routinemastery.ai and its subdomains, through the forms on those pages, and through the emails we send in reply.

It sits alongside our Terms of Service and our Cookie Policy, which describes the measurement and identification scripts the site loads.

• We do not sell personal information, and we do not share it for cross-context behavioral advertising.
• There are no accounts yet. Nothing on the site today stores a gymnast's photos, video, or scores.
• The information we hold comes almost entirely from forms you chose to fill in.
• Children under 13 are not asked to give us information directly; a parent or guardian does that.
• We use a small number of service providers — hosting, database, email, measurement — and they act on our instructions.
• You can ask us to show you what we hold, correct it, or delete it, and we will.

Every field below is one you type into a form on the site. Optional fields are marked as such on the form itself; the required ones are the minimum we need to act on the submission.

Early access list

Your name and email address; whether you are a parent; whether you are an athlete; the gymnast's first name and competitive level if you choose to give them; whether the gymnast is under 13 or 13 and older; the gym's name if you give it; and which page or button you signed up from.

Pricing feedback

Your name and email address; how many gymnasts are in your household; which plan or path you would choose; what matters most to you in a family archive; your written comments; and whether you asked to be kept updated.

Directory submissions and corrections

The gym, coach, or meet being submitted, its city and state, the venue, competition dates, levels or programs, and a public link; plus your name, email address, and the organization you are with. Your name and email are used to review the submission and reply to you — they are not published in the directory.

Directory review responses

The programs and details you confirm or correct for a listing, whether you are authorized to speak for the business, and, if you choose to give them, your name and email so we can follow up.

Messages you send us

Anything you write to us by email, including corrections to a family-guide page, and whatever you include in it.

Request and server logs

Our hosting provider records ordinary web-server information for each request — IP address, timestamp, the page requested, referring page, browser and device type — and retains it for a limited period for security, abuse prevention, and diagnostics.

Rate-limiting records

To stop the public forms being used to send unwanted mail, we count recent submissions per sender and per recipient. Both the network address and the recipient email address are irreversibly hashed before they are stored; we keep the counts, not the addresses, and the records are for counting rather than remembering.

Bot protection

Some routes, such as revealing a gym's phone number, are checked by a bot-detection service that examines request and device signals to tell an automated client from a person.

Measurement

We use privacy-preserving, aggregate page analytics that do not build a profile of you across sites, and a business-visitor identification service. Both are described in the Cookie Policy.

• To run the site and the national directory, and to review, publish, or decline what is submitted to it.
• To reply to you — including the confirmation email you receive after a submission.
• To keep you updated about early access or launch, when you asked us to.
• To understand which pages and questions matter to families, in aggregate, so we build the right thing.
• To protect the Service: preventing spam, abuse, scraping, and fraud, and enforcing our Terms.
• To meet legal obligations and to establish, exercise, or defend legal claims.

We do not use the information families give us to make automated decisions that produce legal or similarly significant effects, and we do not use it for behavioral advertising.

If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following bases:

Consent

Joining the early-access list, asking to be kept updated, and any non-essential cookies or measurement. You may withdraw consent at any time, which does not affect processing already carried out.

Legitimate interests

Operating and securing the site, preventing abuse of the public forms, maintaining the accuracy of the directory, and understanding aggregate usage. We balance these against your rights and interests.

Contract

Providing a service you have asked us for, and — once paid plans exist — administering them.

Legal obligation

Meeting record-keeping, tax, and other legal requirements.

Routine Mastery is a service for parents and guardians. It is not directed to children under 13, and children under 13 may not create an account or submit information to us.

The early-access form asks whether the gymnast is under 13 or 13 and older. We ask so that we know when the information in front of us concerns a younger child and can treat it accordingly — it is not an invitation for a child to sign up.

A parent or guardian may choose to give us a gymnast's first name and competitive level. That is the only information about a child our forms collect, and it is given by the adult, not by the child. We do not knowingly collect personal information directly from a child under 13.

If you believe a child has given us information without a parent's involvement, write to hello@routinemastery.ai and we will delete it. A parent or guardian may also ask us at any time to show, correct, or delete information we hold about their child, and to stop collecting more.

When the family archive launches and accounts can hold a gymnast's media, we will publish the additional notices and parental-consent process that step requires before it opens.

After a submission we send a confirmation to the address you gave, so you have a record of it and so a mistyped address fails visibly rather than silently. That message is transactional.

We send updates about early access and launch only to people who asked for them. Every such message has an unsubscribe link, and you can also ask us to stop by writing to hello@routinemastery.ai. Unsubscribing from updates does not stop a confirmation for something you submit afterwards.

We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not rent or trade contact lists. We use a small set of service providers, each of which is bound to use the information only to provide their service to us:

Vercel

Hosting, content delivery, aggregate web analytics, and bot protection for the site.

Neon

The managed PostgreSQL database that holds directory data and form submissions.

Postmark

Delivery of the confirmation and reply emails we send.

Happierleads

Business-visitor identification, which infers the organization a visit may be associated with from network information.

We may also disclose information where we are legally required to, to respond to a lawful request, to investigate suspected abuse or fraud, or to protect the rights and safety of families, the public, or us. If Routine Mastery is involved in a merger, acquisition, financing, or sale of assets, information may transfer as part of that transaction, and we will give notice before it becomes subject to a materially different policy.

Directory entries describe businesses and events: gym names, locations, programs, meet dates and venues, and publicly listed business contact details. That is business information and it is meant to be seen.

The name and email of the person who submits or corrects an entry are not published. A gym's telephone number is revealed one record at a time on request, rather than included in bulk responses, so the directory cannot be harvested as a calling list.

If you are a coach or organizer listed by name and you would rather not be, write to hello@routinemastery.ai and we will remove the entry.

• Early-access and pricing-feedback records: until you ask us to delete them, or until we decide the list is no longer needed.
• Directory submissions and review responses: for as long as the entry is published, plus a period afterwards so we can show why an entry says what it says.
• Rate-limiting records: a short rolling window, long enough to enforce an hourly cap.
• Server logs: the limited retention period set by our hosting provider.
• Email records: for as long as needed to show what was sent and to whom.

When information is no longer needed for the purpose it was collected for, we delete it or irreversibly aggregate it, unless we are required to keep it.

The site is served over HTTPS, database credentials and API tokens are held as server-side secrets and never exposed to the browser, submissions are validated and length-limited before they are stored, the public forms are rate limited and bot protected, and access to the database is restricted to the people who need it.

No service can promise perfect security, and we will not pretend otherwise. If we become aware of a breach affecting your personal information, we will notify you and the relevant regulators as the law requires.

Routine Mastery operates from the United States, and information is stored and processed there. If you use the site from outside the United States, you understand that your information will be transferred to a country whose data-protection laws may differ from your own. Where required, we use appropriate safeguards such as the European Commission's standard contractual clauses for those transfers.

Depending on where you live, you may have the right to:

• know what personal information we hold about you and get a copy of it;
• correct information that is wrong or incomplete;
• delete information we hold about you;
• obtain your information in a portable format;
• object to or restrict certain processing, and withdraw consent you previously gave;
• opt out of the sale or sharing of personal information, and of targeted advertising and profiling — none of which we do;
• be free from retaliation for exercising any of these rights.

To make a request, write to hello@routinemastery.ai from the address you gave us, or tell us enough to find your record. We will respond within the time the applicable law allows, and we may need to verify who you are before we act — particularly for a deletion request. An authorized agent may make a request on your behalf with proof of authority.

You may also set a Global Privacy Control signal in your browser. We treat it as an opt-out of any sale or sharing of personal information, though we do not sell or share it in the first place.

Residents of Texas, California, Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws have the rights listed above and may appeal a decision we make about a request by replying to our response.

For California residents: the categories of personal information we collect are identifiers (name, email address, IP address), commercial information (plan preferences and feedback), internet activity information (pages visited and referring page), and inferences drawn from those. We collect them from you and from your device, we use them for the purposes listed above, and we disclose them to the service providers named above. In the preceding twelve months we have not sold personal information, we have not shared it for cross-context behavioral advertising, and we have not knowingly sold or shared the personal information of anyone under 16.

We do not use or disclose sensitive personal information for any purpose beyond those permitted without an opt-out under applicable law.

We will update this policy as the product grows — most obviously when accounts and the family archive open. When we do, we will change the effective date at the top of the page, and for a material change affecting information we already hold we will give notice on the site or by email before it takes effect.

Privacy questions and requests go to hello@routinemastery.ai, or by post to:

Routine Mastery, Inc., [Street address], Austin, Texas [ZIP]

If you are in the EEA or the UK and believe we have not handled your information properly, you may also complain to your local supervisory authority. We would rather you told us first, so we can fix it.