Privacy, done honestly

BreakOff is available on iPhone and iPad (App Store) and on Android (Google Play). On iOS, BreakOff uses Apple's Family Controls and Screen Time APIs to block apps. On Android, BreakOff uses Android's Usage Access and “display over other apps” permissions to show a break screen when an app you chose to pause is opened. On both platforms, the list of apps you choose to block, and any information about which apps you use, stays on your device. Everything else on this page describes the much smaller set of account and product data that does leave your device to make features like sync, Friends, shared breaks, and subscriptions work.

Privacy Policy for BreakOff

Last updated: September 24, 2026

1. Introduction

This Privacy Policy describes how BreakOff LLC ("BreakOff," "we," "us," or "our"), based in Salt Lake City, Utah, handles personal information in connection with the BreakOff mobile application for iOS and Android ("the App") and the website at breakoff.io ("the Site"). It applies to users in all regions and is written in plain language.

If you have any questions, email us at [email protected].

2. What Data We Collect

You can use BreakOff without an account. Breaks, app blocking, schedules, and streaks work on your device without signing in. An account is only needed to sync across devices and to use online features such as Friends, shared breaks, and Host.

Data you provide.

• Account information: if you create an account, you sign in with Apple or with Google. From Sign in with Apple we receive an Apple user identifier and, if you choose to share it, your name and email address; Apple also supports a private relay email, which you can use to keep your real email private. From Sign in with Google we receive a Google account identifier and your name and email address. We never receive or store your Apple or Google password.
• Age (birth year): before you create an account, we check your age (see “Children's Privacy” below). Where available we use your platform's age signal (Apple's Declared Age Range on iOS, Google Play Age Signals on Android); otherwise we ask for your birthday. We keep only your birth year, never your full birthdate, and use it only to apply our age rules.
• Profile: a username, display name, and avatar. Your avatar is a simple colored circle with your initial unless you choose to upload a profile photo from your photo library (only the photo you pick is uploaded). If you set up an organization profile for Host, we also store the organization name, logo, and public contact email you enter.
• Preferences: daily break goals, streak settings, and other in-app preferences.
• Earlier onboarding answers: earlier versions of the App asked optional onboarding questions (how you heard about BreakOff, what you want to use it for, and your self-reported screen time). If you answered them, those answers are stored with your account. Current versions no longer ask them.
• Feedback and support: if you send feedback from inside the App or email us, we store your message together with your account ID (if you are signed in) so we can read and respond to it.

Data we collect automatically.

• Break history (signed-in users): timestamps and durations of breaks you've taken, synced to your account so they appear across your devices. This includes every kind of break: ones you start manually, scheduled breaks, QR Code and NFC breaks, and “I'm Done for the Day” breaks. I'm Done ends your day early and stays in effect until midnight; like any other break it is recorded only as a timestamp and duration, it does not collect any additional data. Your app groups and break schedules themselves are stored only on your device.
• Subscription and purchase status: whether you're on the free tier or BreakOff Pro, and your purchase history, managed through the Apple App Store or Google Play Billing and RevenueCat.
• Product analytics: we use PostHog to record in-app events such as screens viewed, the app opening or closing, and actions like starting a break or finishing onboarding, along with basic device information (such as device model, operating system, app version, and approximate location derived from IP address). Events are tied to a random identifier generated on your device and, once you sign in, to your BreakOff account ID (never your email). We do not use session recording, and events never include the names of apps you block, your written feedback, or your email address. Analytics are switched off permanently on a device once we learn its user is under 13.
• Crash and performance data: if the App crashes or performs slowly, diagnostic information (such as the error, device model, operating system, app version, and recent in-app steps leading up to the problem) is sent to our error-reporting tool, Sentry, so we can fix issues. We do not attach your name or email to these reports.
• Push tokens: if you allow notifications, your device registers a push token with us so we can deliver friend-request, invite, and shared-break alerts. The token identifies the device, not you personally.

Friends-feature data (only if you use Friends). The Friends feature is available only to users 16 and older, see “Children's Privacy” below.

• Username and stats: your username, display name, avatar, and break stats (current streak, longest streak, total hours, daily goal, last break time) are visible to users you have accepted as friends, and another user who searches for your exact username can find you and send a friend request. These same stats are used to rank you on the friends leaderboard, which is visible only to people you have accepted as friends, there is no global or public leaderboard.
• Friend connections: pairs of users who have accepted a friend request. We do not expose your friend list to anyone outside that pair.
• Break invites: when you send or receive a phone-free break invite, we store the sender, recipient, break name, start and end times, and status (pending, accepted, declined, etc.) until the invite is acted on or you delete your account.
• Block and report records: if you block or report another user, we record that action so we can keep the two of you separated and follow up on what was reported.

Shared breaks and Host (only if you use them). When you create or join a shared break or a shared schedule through an invite link, share code, or QR poster, we store the share's details (name, times, suggested apps as plain text labels, and, for Host, your organization name and logo) and the list of accounts that joined, so everyone in the break can see it. Joining requires an account and the same age check described below.

Data that stays on your device.

• Your blocked-app selections (iOS): the specific apps you choose to block are represented on your device by an opaque token from Apple's FamilyActivitySelection API. This token is never transmitted to our servers, never shared with RevenueCat, PostHog, or Sentry, and never used for advertising or profiling. Apple's Family Controls Distribution Agreement requires this, and our code strips these identifiers before any cloud sync.
• Your blocked-app selections and app usage (Android): the apps you choose to pause are stored only on your device. To know when to show the break screen, BreakOff checks on your device which app is in the foreground while a break or schedule you set up is active. This app-usage information is used only for that on-device check: it is not stored as a history, not uploaded to our servers or anyone else's, and not used for advertising, analytics, or profiling.
• Camera (QR Code breaks): the QR Code break lets you scan a QR or barcode of your choosing as a physical “unlock anchor,” and the camera is also used to scan BreakOff friend and invite QR codes. Your camera is used only to read the code on your device. BreakOff does not take photos, record video, or transmit any camera data to our servers or to anyone else. For an unlock anchor, only the decoded text of the code is stored on your device, so the app can recognize the same anchor when you scan it again to end the break.
• NFC (NFC tag breaks): if you use an NFC tag to start and end breaks, the tag is read on your device only; nothing from the tag is sent to our servers.

3. Android Permissions

On Android, BreakOff asks for the following permissions. Each is used only for the purpose described, and you can revoke any of them in your device settings at any time (some features will stop working if you do).

• Usage Access (PACKAGE_USAGE_STATS): lets BreakOff detect, on your device, when one of the apps you chose to pause comes to the foreground during a break you started or a schedule you set. Usage information never leaves your device, is not stored historically, and is not used for advertising, analytics, or profiling.
• Display over other apps (SYSTEM_ALERT_WINDOW): shows the full-screen “You're on a break” screen over an app you chose to pause. The screen contains no ads or third-party content.
• Foreground service (FOREGROUND_SERVICE, FOREGROUND_SERVICE_SPECIAL_USE): keeps blocking working while a break or schedule is active, with an ongoing notification so you always know it's running. The service runs only during active breaks and schedules and stops itself otherwise.
• Run at startup (RECEIVE_BOOT_COMPLETED) and, optionally, battery optimization exemption: lets your scheduled breaks resume after your phone restarts and keeps them from being stopped by battery managers.
• Notifications (POST_NOTIFICATIONS): break reminders, schedule alerts, friend requests, and invites. Optional.
• Camera (CAMERA): scanning QR codes for QR Code breaks and BreakOff friend and invite codes, as described above. Optional.
• NFC (NFC): tapping an NFC tag to start or end a break. Optional.
• Internet: to sync your account and use online features.

On iOS, the equivalent features use Apple's Screen Time (Family Controls) permission, notifications, camera, and NFC, under the same rules.

4. How We Use Your Data

• To operate the App: authenticate you, sync your breaks and settings across your devices, and manage your subscription.
• To run Friends, shared breaks, and Host (if you use them): let other users find you by username, deliver friend requests and break invites, show streak and stats data (including the friends leaderboard) to your accepted friends, show who joined a shared break, and enforce age and abuse-prevention rules (block, report).
• To apply our age rules: decide whether you can create an account and whether Friends is available to you.
• To improve the App: product analytics on how features are used and where people get stuck, and crash reports to find and fix bugs.
• To support you: if you email us or send feedback, we use it to reply and to improve BreakOff.

No ads, no selling. BreakOff contains no ads. We do not sell your personal information. We do not use your data for third-party advertising or ad measurement, and we do not share it with advertisers or data brokers. We do not use Apple's App Tracking Transparency framework or Android's advertising ID, because we don't track you across other companies' apps or websites.

5. Legal Basis for Processing (EU/UK/EEA users)

If you're in the European Union, United Kingdom, or European Economic Area, we rely on the following legal bases under the GDPR and UK GDPR:

• Contract (Article 6(1)(b)), to provide the App you've asked for, including account creation, sync, shared features, and subscription management.
• Legal obligation and legitimate interests (Articles 6(1)(c) and 6(1)(f)), for age checks, crash diagnostics, security, abuse prevention, and product analytics that improve the App. You can object to processing based on legitimate interests at any time.
• Consent (Article 6(1)(a)), for optional features such as notifications and uploading a profile photo, and for any optional onboarding answers you gave. You can withdraw consent at any time.

6. Who We Share Data With (Service Providers)

We use a small number of service providers to run BreakOff. Each processes data only to provide its service to us.

• Supabase, Inc. (United States): our database, authentication, file storage (profile photos and organization logos), and server functions for your account, profile, break history, and shared features.
• Apple Inc.: Sign in with Apple identity, App Store purchases and subscription billing, the Declared Age Range age signal, and push notification delivery on iOS.
• Google LLC: Sign in with Google identity, Google Play purchases and subscription billing (Google Play Billing), the Play Age Signals age signal, and push notification delivery on Android (Firebase Cloud Messaging).
• RevenueCat, Inc. (United States): subscription entitlement and purchase-history management for BreakOff Pro, linked to your BreakOff account ID.
• PostHog, Inc. (United States): product analytics, as described above. No session recording.
• Sentry (Functional Software, Inc.) (United States): crash reporting and performance monitoring.
• Expo (650 Industries, Inc.) (United States): relays push notifications to Apple and Google, and delivers app updates.
• Telegram: an internal notification channel that alerts our team when in-app feedback arrives (the message and your account ID).
• Cloudflare, Inc. (United States): hosts breakoff.io and may record standard server logs (IP address, request URL, timestamp, user agent) for security and uptime.

We may also disclose information if required by law, or to protect the safety of our users, in connection with a legal claim, or as part of a merger or acquisition (in which case this policy would continue to apply). We do not share your data with advertisers, data brokers, or any analytics companies other than those listed here.

7. International Data Transfers

Our service providers are based in, or process data in, the United States. If you're accessing BreakOff from outside the US, your information will be transferred to and processed in the US. Where required (EU/UK/EEA), transfers are covered by Standard Contractual Clauses under each provider's data processing terms.

8. Data Retention

• Account data (account, profile, birth year, preferences, synced data, break history, friend connections, invites, and uploaded images): kept until you delete your account, then removed from our primary database immediately. Encrypted database backups are overwritten within 30 days.
• Crash and performance data: retained by Sentry for up to 90 days (their default), then automatically purged.
• Product analytics: kept in PostHog for product analysis. After you delete your account, those events are no longer linked to an active account; email us if you'd like us to delete the analytics records tied to your account ID as well.
• Purchase records: Apple, Google, and RevenueCat keep transaction records under their own retention policies and as required for tax, accounting, and fraud-prevention purposes, even after you delete your BreakOff account.
• Support emails: retained for up to 2 years for quality and training, then deleted.

9. Deleting Your Account

You can delete your account at any time:

• In the App: tap your profile picture on the Home screen to open Profile, then go to Personal Information → Delete Account, and confirm.
• Without the App: follow the steps on our account deletion page, or email [email protected] from the email address linked to your account with the subject “Delete my BreakOff account.”

Deleting your account permanently removes your account and sign-in record, profile (username, display name, birth year, uploaded profile photo and organization logo), synced settings, break history, friend connections, break invites, shared-break memberships, and in-app feedback. Data stored only on your device stays there until you delete the App. Deleting your account does not cancel a subscription: cancel it separately in the App Store or Google Play. See the account deletion page for details on what may be kept and for how long.

10. Data Security

All data is encrypted in transit using TLS and at rest using industry-standard encryption provided by our database host. Supabase row-level security ensures that only you can read or modify your own account data; our own service-role credentials are restricted to server-side functions (such as the account-deletion endpoint) and are never present in the mobile App. No security measure is perfect, but these are the controls we've implemented and continue to improve.

11. Your Rights

Everywhere. You can delete your account at any time, as described in “Deleting Your Account” above. You can also email us at [email protected] to ask for a copy of your data or to correct it.

EU, UK, EEA (GDPR / UK GDPR). You have the right to access, rectify, erase, restrict processing of, and port your personal data. You may also object to processing based on legitimate interests and withdraw any consent you've given. You can exercise any of these rights by emailing [email protected]. If you believe we've mishandled your data, you have the right to complain to your local supervisory authority.

California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah, and similar laws. You have the right to know what personal information we collect, to request a copy, to request deletion, to correct inaccurate information, and to opt out of sale or sharing for cross-context behavioral advertising. We do not sell or share personal information in the way those laws define "sale" or "sharing." To exercise any of these rights, email [email protected]. We don't discriminate against users who exercise their rights.

We verify requests by confirming control of the account email or the Apple or Google sign-in identity on file. We respond within the timeframes required by applicable law (typically 30–45 days).

12. Children's Privacy

BreakOff is a general-audience app. It is not directed to young children, and we do not knowingly collect personal information from children under 13. You can use BreakOff without an account, and first-time setup does not ask your age. The first time you try to create an account (sign in with Apple or Google), we check your age using your platform's age signal where available, or by asking for your birthday; we keep only the birth year.

• Under 13: no account is created and nothing about you is stored on our servers. If an account already exists (for example, one created in an earlier version of the App), it is deleted, along with its profile, break history, and sign-in record. BreakOff then runs entirely on your device: breaks, app blocking, and streaks keep working locally. Product analytics are also switched off permanently on that device.
• 13 and older: you can create an account and use the App's online features, except Friends as described below.

Friends feature minimum age. The Friends feature, searching for and adding friends, friend connections, break invites, the leaderboard, and the related notifications, is restricted to users 16 years of age or older. We use the birth year from the age check above, and only for this eligibility check; your age is never shown to other users. Users under 16 see a message explaining that Friends is unavailable to them; no friend connections, break invites, or leaderboard entries are created for them, and the rest of BreakOff continues to work normally.

In some countries the age of digital consent is higher than 13 (up to 16 in parts of the EU/EEA). If you are a parent or guardian and believe a child under the applicable age has created an account or is using Friends, please email [email protected] and we will delete the account and associated data promptly.

13. Website Privacy (breakoff.io)

The marketing site at breakoff.io does not use advertising cookies. Our invite and share-link pages (breakoff.io/invite/… and breakoff.io/s/…) and our “page not found” page use PostHog to count page views and link opens, which stores a random identifier in your browser; session recording is disabled. Our host, Cloudflare, may record standard server logs (IP address, request URL, timestamp, user agent) for security and uptime monitoring. Links from the Site to third-party sites (such as the App Store or Google Play) are governed by those sites' own privacy policies.

14. Changes to This Policy

We may update this policy from time to time. When we make material changes, we'll update the "Last updated" date at the top of this page and, for changes that meaningfully expand how we use your data, give you at least 30 days' notice in the App or by email before they take effect. Your continued use of BreakOff after the effective date means you accept the updated policy.

15. Contact

BreakOff LLC
Salt Lake City, Utah, USA
Email: [email protected]

For EU/EEA users: please include "GDPR request" in the subject line. For California/US state residents: please include "Privacy Rights Request" in the subject line. This helps us route your message correctly.