Privacy Policy

1. What we collect

Account

• Your email address and the name you choose.
• An optional profile photo.
• Sign-in details from Apple, Google or email. Passwords are stored only as a secure hash by our database provider. We never see them.

What you write and add in the app

• Morning gratitudes and intentions, your habits and which ones you completed.
• Evening moments and the photo you choose to add to them.
• Weekly check-ins: your highlight of the week and your 1–10 happiness score.
• Your streak, stars and jokers.

Settings

• Your daily time limit, reminder times, time zone, whether notifications are allowed, and the average daily social media time you entered during onboarding.

Screen Time summaries

• The app uses Apple's Screen Time framework to block the apps you choose. The list of apps you select, their names and your detailed activity stay on your device. Apple doesn't give us access to them and we never see them.
• To show your progress across devices, we store daily totals only: how many minutes you spent in your blocked apps, how many times you opened them, and how many of those opens were “with a purpose”. These are numbers, not app names.

Invites

• Your invite code, who you invited or who invited you, and whether an invited friend became a subscriber, so we can apply invite rewards.

Subscriptions

• Your subscription status, product, renewal dates and transaction identifiers, provided by Apple through RevenueCat. Payments are handled entirely by Apple. We never receive your card or bank details.

Analytics and diagnostics

• Anonymous usage events, such as a check-in completed or a screen viewed, plus device model, iOS version and app version. We use this to understand which features work and to fix problems.
• Crash reports, so we can find and fix bugs.
• Analytics and crash reports never include your gratitudes, intentions, moments, highlights or photos.

2. How we use it

• To run the app: your account, check-ins, streaks, blocking limits, reminders, invites and subscription.
• To keep your data in sync and restore it when you sign in on a new device.
• To improve the app and fix bugs.
• To answer you when you contact us.

We don't sell your data. We don't use it for advertising. We don't use your content to train AI models.

3. Who processes it for us

• Supabase Inc.: database, file storage and sign-in (servers in the United States).
• RevenueCat Inc.: subscription management (United States).
• PostHog (EU cloud): product analytics.
• Sentry (Functional Software, Inc.): crash reporting.
• Apple Inc.: Sign in with Apple, payments, notifications and Screen Time.
• Google LLC: Sign in with Google, if you choose it.

Each processor may only use your data to provide its service to us.

4. Where your data is stored

Your data is stored in the United States. If you use the app from outside the United States, your data is transferred there. Where the law requires it, we rely on the processors' standard contractual clauses.

5. How long we keep it

• Your account and content: until you delete your account.
• Analytics events: up to 12 months, then only in aggregated form.
• Subscription and transaction records: up to 7 years, where tax and accounting law requires it.
• Backups: deleted data can remain in backups for up to 30 days.

6. Deleting your account

In the app, go to Settings → Delete account. This immediately deletes your account, your content, your photos and your login. If you signed in with Apple, we also revoke the app's access to your Apple ID.

Deleting your account doesn't cancel an App Store subscription. Cancel it in iOS Settings → your name → Subscriptions.

You can also ask us to delete your data by emailing privacy@breakthepattern.app from the address on your account.

7. Your rights

Depending on where you live, you can ask to access, correct, export or delete your data, or object to how we use it. Email privacy@breakthepattern.app and we'll reply within 30 days. If you're in the EEA, the UK or Switzerland, you can also complain to your local data protection authority.

8. Children

The app is for people aged 13 and over. We don't knowingly collect data from children under 13. If you believe a child has given us data, email privacy@breakthepattern.app and we'll delete it.

9. Security

Your data is encrypted in transit, and access is limited to what each service needs to work. Your photos are stored privately and are only visible to you.

10. Changes

If we change this policy, we'll update the date at the top. For important changes, we'll also tell you in the app.

Contact: privacy@breakthepattern.app