Privacy Policy

Last Updated: February 27, 2026

Our Privacy Principles

What Data We Collect

Here's exactly what we collect and why it matters:

Automatic Collection (Anonymous)

Device Identifier

When you install BreakAway, we automatically generate an anonymous device hash to identify your installation. On Android, this is a SHA-256 hash of your Android ID. On iOS, an equivalent anonymous identifier is generated from your device. This hash:

• Cannot be used to identify you personally
• Allows us to track your streaks and earned Free Days
• Is required for the subscription and rewards system to work

Analytics & Product Improvement Data

We collect analytics data to understand how the app is used and to improve it. This data is sent to two places:

PostHog (Session Replay & Product Analytics)

We use PostHog to record session replays and capture product analytics. On every app launch, a feature snapshot is sent that includes your daily limit status, number of active time blocks, whether scroll guard is enabled, and your current streak count. Session replays record your in-app interactions (screens visited, taps, scrolls). PostHog is configured with maskAllTexts=false and maskAllImages=false, meaning screen content visible during a replay is not automatically obscured.

Supabase Analytics Events

Structured events are logged to our own servers (Supabase) and include:

• Screen views: Which screens you navigate to
• App blocking events: When an app is blocked (aggregate stats only — no app names stored)
• Time block creation and completion
• Settings changes
• Errors and crash signals
• Onboarding step completion

Optional Collection (Your Choice)

Google Sign-In

You can optionally sign in with Google. The app labels this "Back up streaks and rewards." Google Sign-In serves four purposes:

• Cross-device backup & restore: Your streaks, rewards, milestones, free days, daily success history, voice coach preference, and subscription status are all synced to the cloud under a Google-derived identity. If you reinstall or switch devices, you can sign in with Google to restore everything.
• Subscription continuity: When you connect Google, your purchase token is re-assigned to your Google-linked identity. This ensures your subscription survives device changes without re-purchasing.
• Referral fraud prevention: When you redeem a referral invite code, the app performs a silent Google sign-in (even if you haven't formally connected Google in settings) to obtain your Google account ID. This ID is sent to our servers to verify that the referrer and referred user are not the same person. The raw Google user ID is stored in our database for this purpose.
• Analytics re-identification: When you connect or disconnect Google, our analytics provider (PostHog) is notified to re-link your session to the updated identity.

We receive your Google display name, email address, and profile photo URL — these are stored locally on your device for display purposes only and are not uploaded to our servers. Your Google user ID is used server-side for referral fraud detection as described above.

Data We Sync to Our Servers

The following data is stored on our servers (Supabase) to enable core functionality:

• Streak and rewards data: Your current streak, total days, and earned Free Days
• Referral tracking: Both the referrer's and referred user's device identifiers are stored. When a referral code is redeemed, the Google account ID of both parties is collected (via silent sign-in if needed) and stored server-side to prevent fraud — specifically to ensure the same person cannot refer themselves.
• Subscription status: Whether you have an active subscription or Free Days balance
• Support and feedback: If you report a problem or contact support (see "Support & Feedback" below for details)

Data Retention: We retain your anonymous device hash and associated progress data to maintain your streaks and Free Days balance. If you connect Google, your progress data is migrated to a Google-derived identity and retained for cross-device access and subscription continuity. Your Google account ID is also retained in our referral fraud detection records.

Friend Sharing Feature

When you choose to share your streak count with friends, BreakAway generates a shareable message that you can send through any messaging platform of your choice (text, WhatsApp, social media, etc.). We do not store or access your contacts, messages, or social media accounts. The sharing happens entirely through your chosen platform.

Support & Feedback

When you report a problem, suggest a feature, or contact support through the app, you choose what information to share with us. Here's what gets collected:

Information You Provide:

• Feedback type: Bug report, feature request, improvement suggestion, or general feedback
• Title and description: Your written explanation of the issue or suggestion
• Screenshots or videos: Optional attachments you choose to include (up to 5 images, max 10MB each)
• Email address: Optional — only if you want us to respond directly

Automatic Diagnostic Information (Bug Reports Only):

To help us fix issues, bug reports automatically include technical context:

• Device info: Android version, device model, and manufacturer
• App info: BreakAway version and build number
• Permission statuses: Which permissions are enabled (accessibility, usage stats, etc.)
• Blocking settings: Active time blocks and blocking modes (not which specific apps you block)
• Streak data: Current streak count and milestone progress

Support Conversations:

If you start a support conversation, your messages and any media you send are stored so our team can help you. Conversations include:

• Text messages between you and our support team
• Images or videos you choose to share
• Conversation status and timestamps

Support data is stored on our servers (Supabase) and is only accessible to our support team.

AI Features

BreakAway includes AI-powered features that process your input to provide assistance:

AI Task Manager

You can talk to our AI assistant to create and manage tasks. When you use this feature:

• Your voice input is streamed in real-time to AssemblyAI's cloud servers (wss://streaming.assemblyai.com) for speech-to-text transcription — audio is not processed on-device
• Your text messages are sent to Google's Gemini AI (primary) or Anthropic's Claude AI (fallback) to understand your intent and create tasks
• Conversation context is temporarily maintained during your session to provide relevant responses
• We do not permanently store your AI conversations on our servers
• Tasks you create are stored locally on your device

Reality Check AI (Break Reflection)

When you want to access a blocked app, you can chat with the AI to reflect on why you need access. This conversation:

• Is processed by Google's Gemini AI (primary) or Anthropic's Claude AI (fallback) to help you reflect on your decision
• Is not stored permanently or used to train AI models
• Remains private between you and the AI assistant

iOS & Android Permissions Explained

BreakAway needs these permissions to help you stay focused. Some permissions are platform-specific.

Android Permissions

• Usage Stats Access: Monitors your app usage to provide effective blocking. All analysis happens on your device.
• Accessibility Services: Detects when blocked apps are opened and displays helpful blocking screens. No data is transmitted.
• Screen Overlay Permission: Creates blocking screens over restricted apps when you need that extra support.
• Phone Permission: Prevents BreakAway from interfering with important calls by pausing blocking notifications during conversations.
• Battery Optimization Exemption: Ensures accessibility services work consistently without interruptions, keeping your focus protection reliable.
• Notification Access: Manages distracting notifications from blocked apps during your focus sessions.

iOS Permissions

• Screen Time / Family Controls (FamilyControls entitlement): Required to use Apple's Screen Time API for app blocking. This is a restricted entitlement explicitly approved by Apple. It allows BreakAway to shield selected apps and monitor device activity through Apple's DeviceActivity framework. No activity data leaves your device.
• Microphone: Used for voice input in the AI Task Manager. Audio is streamed to AssemblyAI for transcription and is not stored locally or on our servers.
• Camera: Used to take a profile photo within the app. Photos are not uploaded to our servers unless you explicitly set them as your profile picture.
• Photo Library: Used to select a profile picture from your existing photos.
• Face ID: Used to quickly and securely unlock the app.
• Notifications: Used to deliver focus reminders, streak alerts, and task notifications.

Both Platforms

• Location (Foreground & Background): Used exclusively for geofence-based task reminders. When you set a location reminder (e.g., "remind me to do a focus session when I arrive at work"), BreakAway monitors your location in the background so it can trigger the reminder at the right place even when the app is closed. Location data is never stored on our servers, never shared with third parties, and is only used to evaluate geofence conditions locally on your device.

Your App Usage Data

All your app usage data, screen time information, and blocking sessions are stored locally on your device. We don't see this data, don't store it on our servers, and don't analyze it. Your digital wellness journey stays private.

Location Data

BreakAway requests access to your precise location (foreground and background) for one purpose only: geofence-based task reminders. When you create a location reminder in the app, BreakAway monitors your location in the background to fire a notification when you arrive at or leave a place you have defined.

• What we access: Your precise GPS coordinates, evaluated on-device against geofences you have set.
• What we do NOT do: We do not store your location history, transmit coordinates to our servers, or share location data with any third party.
• Your control: You can revoke location permission at any time. On Android: Settings → Apps → BreakAway → Permissions → Location. On iOS: Settings → Privacy & Security → Location Services → BreakAway. This disables location-based reminders but does not affect any other app functionality.

Data Security

We use industry-standard encryption and security measures to protect any data we do handle. Since most of your data stays on your device, you maintain complete control over your information and your progress.

Your Rights Under New Jersey Law

Under the New Jersey Data Privacy Act, you have the following rights regarding your personal data:

• Access: Request to see what personal data we hold about you
• Correct: Request correction of inaccurate personal data
• Delete: Request deletion of your personal data
• Opt-out: Opt out of data processing for certain purposes

To exercise these rights, contact us at support@breakaway-app.com or use the app settings.

Appeals Process: If we deny your request, you have the right to appeal. We'll provide information on how to appeal and contact the New Jersey Division of Consumer Affairs if needed.

How to Delete Your Data

You have complete control over your data and can delete it at any time. Here's how to delete your account and all associated data from BreakAway:

Step-by-Step Deletion Process:

1. Open BreakAway: Launch the BreakAway app on your device
2. Go to Settings: Tap the Settings (gear) icon in the bottom navigation
3. Access Data Management: Tap on "Privacy & Security"
4. Choose Delete Option: In the Data Management section, you'll see three options:
   • Export Your Data — Download a copy of your data
   • Delete Usage History — Remove only your app usage history
   • Delete Account — Permanently delete your account and ALL data
5. Confirm Deletion: Tap "Delete Account" (red button with person icon)
6. Final Confirmation: Confirm in the dialog that appears. This action cannot be undone.

Partial Data Deletion:

If you only want to delete your usage history while keeping your account, use the "Delete Usage History" option instead. This removes your app usage data but preserves your account settings.

Data Export Before Deletion:

Before deleting your account, you can export your data using the "Export Your Data" option. This creates a JSON file with all your information that you can save or share.

Account Recovery:

Once you delete your account, it cannot be recovered. If you had linked Google sign-in, that connection will be permanently removed. You can create a new account, but all previous local data will be gone. To ensure complete deletion of server-stored data, contact support@breakaway-app.com.

Third-Party Services

BreakAway uses the following third-party services to provide core functionality:

• Google Play Billing (Android): Handles subscription payments on Android securely. We receive confirmation of your subscription status but not your payment details.
• Apple In-App Purchases (iOS): Handles subscription payments on iOS securely via StoreKit. We receive confirmation of your subscription status but not your payment details.
• Supabase: Our backend database for storing streaks, rewards, account data, and analytics events. Data is encrypted in transit and at rest.
• Google Gemini AI: Primary AI provider powering the AI Task Manager and Reality Check AI features. Conversations are processed but not permanently stored. Subject to Google's Privacy Policy.
• Anthropic Claude AI: Fallback AI provider used when Gemini is unavailable. Subject to Anthropic's Privacy Policy.
• PostHog: Session replay and product analytics. PostHog records your in-app interactions and receives feature snapshot data on every app launch. Subject to PostHog's Privacy Policy.
• AssemblyAI: Cloud speech-to-text for voice input features. Your audio is streamed to AssemblyAI's servers for transcription. Subject to AssemblyAI's Privacy Policy.

Policy Updates

We may update this privacy policy as BreakAway evolves to serve committed users better. We'll notify you of any changes through the app and update the date above.