BREQK Privacy Policy

Last updated: October 1, 2026

This Privacy Policy describes how BREQK ("we," "us," or "our") collects, uses, and protects your information when you use the BREQK mobile application and related services (the "Service"). We act as the data controller where data protection laws apply.

We take your privacy seriously. The information you share with BREQK is personal and often sensitive. This policy is written to be specific and honest about what we collect, why, and what happens to it. If anything is unclear, contact us at contact@breqk.app.

BREQK is a self-help coaching tool, not a medical device. It does not provide medical, psychological, or professional advice, diagnosis, or treatment. The AI coach is an automated system, not a licensed professional. If you are in crisis, contact your local emergency services — do not rely on BREQK.

1. Information we collect

1.1 Information you provide directly

• Account information: your email address (held by our authentication provider for login and account management) and an optional display name.


• Age confirmation: when you create your account, you confirm that you meet the minimum age requirement (18 or the age of majority in your jurisdiction).


• Sensitive data acknowledgment: at signup, you separately acknowledge that BREQK will process sensitive information about your personal habits to provide coaching.


• Gender: you may optionally provide your gender during signup.


• Habit information: the name you give your habit, its category, how long you have had it, how often it occurs, your stated motivation, related notes, and triggers you identify.


• Onboarding information: your primary habit, how long you have had it, how often it occurs, your motivation, triggers you identify, and other information you provide during the setup process.


• Urge logs: when you log an urge, we collect intensity, trigger (including additional triggers you select), emotion (including additional emotions you select), general location context (such as "home," "work," "out," or "bed"), time of day, day of week, outcome (resisted or slipped), any free-text notes you add, and a local timestamp of when the urge was logged. If you open the AI coach during an urge, we also automatically record that you opened the coach, the time the coaching session started and ended, the duration of the session, the number of messages exchanged, and an internal data quality score.


• Daily reflections: the text you write as part of your daily reflection, along with the date and the type of day (derived from your logs).


• Coaching conversations: the messages you send to the AI coach and the responses it generates, stored as part of your conversation history.


• Consent records: records of consents you give or withdraw, with timestamps.


• Support and correspondence: if you contact us, we keep the correspondence to respond and improve.


• Any other information you voluntarily provide while using the Service.

1.2 Information collected automatically

• Device time zone: your device's time zone (an IANA name such as "America/New_York," not a GPS location) so that streaks and time-of-day patterns are calculated in your actual local time.


• Subscription and platform information: your subscription status, subscription start and expiry dates, platform, and any promotional code usage.


• Usage information: session count and last-active timestamp, used to understand how the Service is used and to identify accounts that may benefit from engagement reminders.


• Progress metrics: your current streak, longest streak, total clean days, and when your current streak started, used to calculate milestones and personalise coaching.


• Notification token: if you enable notifications, your device's push notification token is stored so we can deliver local reminders. This token is a technical identifier, not a name or location.


• Aggregate activity counts: total urges logged, total urges resisted, and the dates of your first logged habit and first logged urge, used for progress tracking and coaching context.


• Audit records: we log certain account events (such as changes to your notification or consent preferences, and data export requests) with timestamps for security and accountability.


• Other technical information: we and our infrastructure providers may collect additional information necessary to operate and secure the Service, such as error logs, request metadata, and authentication events.

1.3 Information we do not intentionally collect

We do not ask for or intentionally collect government identification numbers, financial payment card numbers (all billing is handled by your app store), precise GPS location, or sensitive details about third parties.

1.4 Sensitive information

Much of the information you share with BREQK relates to personal habits and may constitute sensitive or special-category data under data protection laws (for example, information about health, sexual behaviour, or mental wellbeing). We process this information because it is necessary to provide the coaching service you have requested, and because you have acknowledged this at signup. You can withdraw from the Service at any time by deleting your account.

2. How we use your information

• To provide the Service: maintaining your account, tracking your habits and streaks, recording urge logs, delivering coaching, and operating the features you use, along with any other processing necessary to run the Service.


• To provide AI coaching: each coaching response is generated using your conversation history and supporting context. The conversation so far — or a compacted summary of it for longer conversations — is shared with our AI provider (Anthropic) alongside each exchange. Supporting context includes: your display name, your active habits and their details (such as name, category, triggers, motivation, and streak information), recent urge events and their attributes, notes you have written about slipped urges, your daily reflections, summaries of your past coaching conversations, relevant statistics about your progress, and other information needed to personalise the coaching response. The coach also generates and stores brief summaries of past conversations and may compact long conversations into shorter summaries to maintain continuity across sessions. These summaries are stored on your account and included as context in future coaching interactions.


• To personalise your experience: showing your progress, celebrating milestones, generating insights, and allowing the coach to reflect your history and patterns.


• To maintain and improve the Service: understanding how features are used, fixing problems, and — where you have given optional consent — using de-identified data to improve coaching quality, train better behavioural-health AI models, and advance research into habit-change patterns.


• To communicate with you: sending account-related messages (such as email verification), milestone notifications, and service updates. You can manage notification preferences in the app and in your device settings.


• To keep the Service safe and lawful: preventing fraud and abuse, enforcing our Terms, maintaining security, complying with legal obligations, and any other processing necessary to protect the Service and its users.

3. Legal bases for processing

Where data protection law requires a legal basis, we rely on:

• Performance of a contract: processing necessary to provide the Service you signed up for, including your account, habit tracking, AI coaching, and related features.


• Consent: for optional data collection (the de-identified improvement dataset, described in Section 4), for processing sensitive information (acknowledged at signup), and for certain communications.


• Legitimate interests: for security, abuse prevention, and service improvement, where those interests are not overridden by your rights.


• Legal obligation: where required by applicable law.

4. Optional improvement data (de-identified dataset)

4.1 What this is

Separately from using the Service, you may choose to allow us to retain de-identified data about your urge patterns and coaching interactions. This data helps us improve coaching quality, train better behavioural-health AI models, and advance research into habit-change patterns. It may also be shared with or licensed to third parties for these purposes (see Section 5). This choice:

• is off by default — you must actively enable it;


• is separate from your agreement to use the Service — declining does not affect your ability to use any feature;


• can be turned on or off at any time in the app (Profile settings);


• when turned off, stops new data from being added going forward. Data already collected while it was enabled remains and is subject to the deletion process described below.

4.2 What the data includes

When enabled, de-identified data collected from your urge logs and coaching sessions may include:

• Urge attributes: intensity, trigger, emotion, general time of day, day of week, a timestamp, and outcome (resisted or slipped).


• Habit attributes: the name you gave your habit, its category, how long you have had it, and how often it occurs.


• Your gender, if provided.


• Whether the AI coach was used, for how long, and a quality indicator.


• An analytical summary of the coaching interaction — describing patterns, techniques used, emotional dynamics, and outcomes. This summary is generated by AI and is not the full conversation transcript. We instruct the AI to exclude personal names, direct quotes, and identifying details, and we apply automated scrubbing. However, no automated process is perfect, and summaries may contain brief analytical fragments derived from the coaching exchange.


• Statistical and contextual information about your usage, progress, and patterns, such as your streak, time using the Service, and aggregate progress indicators.


• Derived analytical fields: the number of coaching messages exchanged during the session, a coaching effectiveness indicator, the month of year, and the week within your streak.


• Device time zone and subscription tier.

4.3 What the data does not include

This data does not include your personal name, email address, full coaching conversation transcripts, free-text notes you added to urge logs, or your general location context.

We take steps to exclude identifying information from coaching summaries, including AI-level instructions and automated text scrubbing. While these measures are effective in most cases, we cannot guarantee that every identifying detail will be caught. We treat this data with the same care as personal data.

4.4 While your account is active — pseudonymised

While your account exists, this data is pseudonymised: it does not contain your name or email, but is linked to an internal identifier so that we can honour your right to withdraw consent or request deletion. During this period, we treat it as personal data and protect it with the same security measures as the rest of your information.

4.5 After account deletion — de-identified and severed

If you delete your account, we take the following steps on any retained improvement data:

• Timestamps are rounded to remove precise timing.


• The direct link between the data and your identity is permanently and irreversibly severed — the internal identifier is removed and the mapping is deleted.

After these steps, the retained data cannot reasonably be connected back to you or to any individual. We retain this de-identified data to continue improving the Service, to train behavioural-health AI models, and for research purposes. Because it can no longer reasonably identify anyone, it is not subject to individual deletion requests.

No de-identification method is absolute. We apply these measures to make re-identification not reasonably possible by any means reasonably likely to be used.

5. How we share your information

We do not sell your personal, identifiable information. We share information only in the following circumstances:

• AI coaching provider (Anthropic): to generate coaching responses, your conversation history and supporting context are shared with Anthropic for processing. Anthropic's handling of API data is governed by their own privacy policy and data processing terms.


• Infrastructure providers: Supabase provides our database, authentication, and hosting. Resend provides transactional email delivery. Vercel hosts our server-side API. Your app store (Google Play) handles distribution and subscription billing. Each provider's handling of data is governed by their own terms.


• De-identified data: we may share, license, or commercially provide de-identified data (as described in Section 4) to third parties for research, analysis, the development and training of behavioural-health AI models, and other purposes aimed at improving understanding and treatment of habit-change challenges. This data does not include your personal name, email, or full conversation transcripts, and after account deletion it cannot reasonably be connected to any individual.


• Legal and safety reasons: where required by law, to protect rights and safety, or to respond to legal process.


• Business transfers: if BREQK is acquired or merged, your information may transfer to the successor, subject to this policy.


• We do not share your information for any other purpose except as described in this policy or with your consent.

6. International data transfers

Your data may be processed in countries other than your own. Specifically:

• Our database and authentication are hosted by Supabase in the European Union.


• AI coaching is provided by Anthropic, based in the United States. Your conversation history and coaching context are transmitted to Anthropic's servers for processing.


• Our server-side API is hosted by Vercel, and transactional emails are sent via Resend, both of which may process data internationally.

Where data is transferred outside your jurisdiction, we take steps intended to ensure an appropriate level of protection, including relying on the safeguards provided by our service providers' data processing agreements.

7. How long we keep your information

• While your account is active: we keep your personal information to provide the Service.


• On account deletion: your personal data is deleted as described in Section 9. The exception is de-identified improvement data, which is de-identified, severed from your identity, and retained as described in Section 4.5.


• Limited retention: we may retain limited information as required to comply with legal obligations, resolve disputes, or enforce our agreements.


• Third-party providers: our infrastructure, authentication, and AI providers may retain certain technical logs or processing data subject to their own retention policies. We do not control these third-party retention periods.

8. Your rights

Depending on where you live, you may have the following rights regarding your personal information:

• Access: you can request a copy of your data. You can submit this request from within the app (Profile → Export my data). We verify your identity through your authenticated account and deliver your data to your registered email address, typically within 30 days.


• Correction: you can ask us to correct inaccurate information, or update it yourself through the app (for example, editing habit names or notes).


• Deletion: you can delete your account from within the app. See Section 9 for what deletion does.


• Withdraw consent: you can turn off optional data collection at any time in the app, or withdraw from the Service entirely by deleting your account.


• Object or restrict: you may have the right to object to or limit certain types of processing. For example, you can turn off the optional data collection without affecting your use of the Service.


• Portability: you may request your information in a structured, commonly used, machine-readable format.


• Complain: you have the right to lodge a complaint with your local data protection authority.

To exercise any right, use the in-app controls or contact us at contact@breqk.app. We respond to all requests within 30 days, or sooner where required by law.

9. How account deletion works

You can delete your account at any time from within the app (Profile → Delete account). Deletion is permanent and cannot be undone. Here is what happens:

• Personal data is deleted: your profile, habits, urge logs, daily reflections, coaching conversations, onboarding data, promotional code usage, subscription records, and all related records are permanently removed from our database.


• Authentication account is removed: your email is no longer associated with BREQK.


• Improvement data is de-identified and severed: if you had enabled optional data collection, any retained de-identified data has its timestamps rounded and the link to your identity is permanently and irreversibly severed, as described in Section 4.5.


• Subscription: if you have an active subscription, deleting your account does not automatically cancel your app store subscription. Please cancel your subscription through your app store before deleting your account to avoid further charges.


• Third-party data: our infrastructure and AI providers may retain certain technical or processing data subject to their own retention policies and data processing terms. We do not control these third-party retention periods.

10. Security

We take the security of your information seriously. Our measures include:

• Encrypting data in transit using TLS (HTTPS) and at rest through infrastructure-level encryption provided by our hosting provider.


• Restricting access to your data through row-level security policies, so that only you can access your own records through the app.


• Keeping sensitive API keys and credentials on our servers, never in the client application.


• Relying on reputable infrastructure providers with strong security practices.


• Logging consent changes with timestamps for accountability.

No method of electronic transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at contact@breqk.app.

11. Children

BREQK is strictly for adults. You must be at least 18 years old, or the age of majority in your country if higher, to use the Service. We do not knowingly collect information from anyone under 18. At sign-up, you confirm you meet this age requirement.

Reporting an underage user. If you believe someone under 18 is using BREQK, please report it to contact@breqk.app with any relevant details. We review every report and will delete the account and associated data of anyone confirmed or reasonably believed to be under 18.

12. Notifications and emails

If you enable the daily reflection reminder, we send a local notification in the evening with a general prompt (such as "Close out your day"). Notification content is deliberately generic and does not mention your habits or any sensitive details, so that it is safe if seen on a lock screen or shared device.

We send two types of email. Service emails — such as account verification, password reset, policy updates, and data export delivery — are always sent regardless of your preferences. Optional emails — such as milestone celebrations and engagement reminders — can be turned off in the app (Profile settings) or by contacting us. No emails reveal specific habit names or sensitive details. You can disable local notifications through your device settings.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and notify you within the app and, where appropriate, by email to your registered address. Your continued use of the Service after changes take effect means you accept the updated policy. If you do not agree with the changes, you may delete your account.

14. Contact

If you have questions about this Privacy Policy or your data, contact us at:

Email: contact@breqk.app
Operator: BREQK

This document describes how the Service works as of the date above. It is not legal advice. We recommend having it reviewed by a qualified professional in your jurisdiction.