Privacy, done honestly

BreakOff uses Apple's Family Controls and Screen Time APIs to block apps on your device. Apple's rules — and our own product design — require that the list of apps you choose to block never leaves your device. We take this seriously. Everything else on this page describes the much smaller set of account and product data that does sync to our servers to make features like cross-device sync and subscriptions work.

Privacy Policy for BreakOff

Last updated: April 23, 2026

1. Introduction

This Privacy Policy describes how BreakOff LLC ("BreakOff," "we," "us," or "our") handles personal information in connection with the BreakOff mobile application ("the App") and the website at breakoff.io ("the Site"). It applies to users in all regions and is written in plain language.

If you have any questions, email us at support@breakoff.io.

2. What Data We Collect

Data you provide.

• Account information — when you sign in with Apple, we receive an Apple user identifier and, if you choose to share it, your name and email address. Apple also supports a private relay email, which you can use to keep your real email private.
• Profile preferences — your display name, daily break goals, streak settings, and other in-app preferences.
• Onboarding responses (optional) — during onboarding we ask how you heard about BreakOff, what you want to use it for, and your self-reported screen time. You can skip these questions and still use the App.

Data we collect automatically.

• Break history — timestamps and durations of breaks you've taken, synced to your account so they appear across your devices.
• Subscription status — whether you're on the free tier or BreakOff Pro, managed through Apple's App Store and RevenueCat.
• Crash and performance data — if the App crashes or performs slowly, diagnostic information is sent to our error-reporting tool (Sentry) so we can fix issues.

Data that stays on your device.

• Your Family Controls / Screen Time app selections — the specific apps you choose to block are represented on your device by an opaque token from Apple's FamilyActivitySelection API. This token is never transmitted to our servers, never shared with RevenueCat, never sent to Sentry, and never used for advertising or profiling. Apple's Family Controls Distribution Agreement requires this, and our code strips these identifiers before any cloud sync.

3. How We Use Your Data

• To operate the App — authenticate you, sync your breaks and settings across your devices, and manage your subscription.
• To improve the App — aggregated, de-identified analytics on how features are used, which onboarding paths convert, and which features crash.
• To support you — if you email us, we use your email to reply.

We do not sell your personal information. We do not use your data for third-party advertising or ad measurement. We do not use the App Tracking Transparency framework because we don't track you across other companies' apps or websites.

4. Legal Basis for Processing (EU/UK/EEA users)

If you're in the European Union, United Kingdom, or European Economic Area, we rely on the following legal bases under the GDPR and UK GDPR:

• Contract (Article 6(1)(b)) — to provide the App you've asked for, including account creation, sync, and subscription management.
• Legitimate interests (Article 6(1)(f)) — for crash diagnostics, security, and de-identified analytics that improve the App. You can object at any time.
• Consent (Article 6(1)(a)) — for the optional onboarding survey questions. You can decline them.

5. Who We Share Data With (Subprocessors)

We use a small number of trusted service providers to run BreakOff. Each is bound by a data-processing agreement and only processes data on our instructions.

• Apple Inc. — Sign in with Apple identity, App Store subscription billing, push notification delivery.
• Supabase Inc. (United States) — authenticated database and serverless functions for your account, profile, and break history.
• RevenueCat, Inc. (United States) — subscription entitlement management for BreakOff Pro.
• Sentry (Functional Software, Inc.) (United States) — crash reporting and performance monitoring.
• Our website host — serves breakoff.io. May collect standard server logs (IP address, request URL, timestamp, user agent) for security and uptime.

We do not share your data with advertisers, data brokers, or analytics companies outside this list.

6. International Data Transfers

Our subprocessors are based in the United States. If you're accessing BreakOff from outside the US, your information will be transferred to and processed in the US. Where required (EU/UK/EEA), transfers are covered by Standard Contractual Clauses under each subprocessor's Data Processing Agreement.

7. Data Retention

• Account data — kept until you delete your account, then removed from our primary database immediately. Encrypted database backups are overwritten within 30 days.
• Break history — kept while your account is active; deleted with your account.
• Crash and performance data — retained by Sentry for up to 90 days (their default), then automatically purged.
• Support emails — retained for up to 2 years for quality and training, then deleted.

8. Data Security

All data is encrypted in transit using TLS and at rest using industry-standard encryption provided by our database host. Supabase row-level security ensures that only you can read or modify your own account data; our own service-role credentials are restricted to server-side functions (such as the account-deletion endpoint) and are never present in the mobile App. No security measure is perfect, but these are the controls we've implemented and continue to improve.

9. Your Rights

Everywhere. You can delete your account at any time from Settings → Delete Account inside the App. This removes your profile row, break history, and authentication record. You can also email us at support@breakoff.io and we'll do it for you.

EU, UK, EEA (GDPR / UK GDPR). You have the right to access, rectify, erase, restrict processing of, and port your personal data. You may also object to processing based on legitimate interests and withdraw any consent you've given. You can exercise any of these rights by emailing support@breakoff.io. If you believe we've mishandled your data, you have the right to complain to your local supervisory authority.

California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah, and similar laws. You have the right to know what personal information we collect, to request a copy, to request deletion, to correct inaccurate information, and to opt out of sale or sharing for cross-context behavioral advertising. We do not sell or share personal information in the way those laws define "sale" or "sharing." To exercise any of these rights, email support@breakoff.io. We don't discriminate against users who exercise their rights.

We verify requests by confirming control of the account email or Sign-in-with-Apple identity on file. We respond within the timeframes required by applicable law (typically 30–45 days).

10. Children's Privacy

BreakOff is rated 4+ on the App Store because it contains no objectionable content, but the App requires an account. We do not knowingly collect personal information from children under 13 in the United States, under 16 in most EU/EEA countries, or under the applicable minimum age in other jurisdictions. If you believe a child has created an account, please email support@breakoff.io and we will delete the account and associated data promptly.

11. Website Privacy (breakoff.io)

The marketing site at breakoff.io does not set analytics or advertising cookies and does not embed third-party tracking scripts. Our hosting provider may record standard server logs (IP address, request URL, timestamp, user agent) for security and uptime monitoring. Links from the Site to third-party sites (such as the App Store) are governed by those sites' own privacy policies.

12. Changes to This Policy

We may update this policy from time to time. When we make material changes, we'll update the "Last updated" date at the top of this page and, for changes that meaningfully expand how we use your data, give you at least 30 days' notice in the App or by email before they take effect. Your continued use of BreakOff after the effective date means you accept the updated policy.

13. Contact

BreakOff LLC
Email: support@breakoff.io

For EU/EEA users: please include "GDPR request" in the subject line. For California/US state residents: please include "Privacy Rights Request" in the subject line. This helps us route your message correctly.