Privacy Policy

1. Controller

The controller responsible for the processing described in this policy is:

2. Data we process

Depending on the features you use, ReelBreaker may process:

• Account data: email address, account identifier and authentication information.
• Third-party sign-in data: identifiers and profile information supplied by Apple or Google, such as your name or email address, subject to your provider settings.
• Habit settings: selected modes, personal goals, usual nicotine consumption and selected nicotine product.
• Progress data: dates on which goals were achieved, streak statistics, estimated savings and nicotine-free timer information.
• Optional Screen Time on iPhone: measured app usage and Screen Time report contents are processed on your device and are not uploaded. To save and restore your configuration on the same installation, private account backups in Supabase contain your selected apps’ opaque Apple selection tokens, chosen app names, exact total and individual limits, blocking preferences, goal revisions and time zone. A separate private backup stores your group-app assignments to these Apple selections. Account access controls restrict these backups to your account; they are not shared with group members. Apple permissions and selections are not automatically transferable to another phone.
• Background goal synchronization: we store a randomly generated identifier for each account and app installation, goal revisions and a hash of a restricted upload credential. Your device sends derived calendar-day results, including the date, captured goal, success or failure, and applicable group points and result status. These results synchronize your counter, history and group rankings; they can be corrected when a later limit violation is detected. Raw usage measurements and Screen Time report contents are not included in these uploads.
• Optional Network groups: creating a competition profile stores your username, display name and optional profile photo. Joining or creating a group requires your explicit app-selection and sharing confirmation. We then store group memberships, invitations, join requests, required-app declarations and completed calendar days with earned points. These points are derived from automatic goal checks; a day’s goal may be inferred from its points. Group members can see shared names, approved photos, points and ranks. The public community is open to anyone who chooses to join. Private goal and app-assignment backups are not shared with group members.
• Community safety: reports, blocks and profile-photo moderation status are stored to address inappropriate content. Reports are available only to the service operator. Blocked members are hidden from each other and new invitations or joins involving a blocked group owner are prevented. Existing group history is retained until you leave the group.
• User content: gratitude notes, reflections and a custom background photograph if you choose to upload one.
• Purchase information: product and entitlement information required to provide or restore Lifetime Access. Payment details are processed by Apple and are not received by us.
• Local app data: app preferences, introduction status, cached progress and purchase entitlement stored on your device.
• Technical information: limited connection, security and diagnostic information that may be processed by our infrastructure and authentication providers, such as IP address, timestamps and error information.

3. Why we process data

We process data to:

• create and secure your account;
• synchronize your goals, progress, notes and settings;
• check your selected apps against your daily goal on your iPhone, back up your configuration and synchronize derived daily results, if you enable Screen Time access;
• provide optional group competitions, invitation links and in-app activity notifications;
• review shared profile photos and reports, enforce blocks and remove inappropriate content;
• provide Apple and Google sign-in;
• provide, verify and restore Lifetime Access;
• display user-selected photographs as app backgrounds;
• respond to support requests, prevent misuse and maintain app security; and
• comply with applicable legal obligations.

Where the GDPR applies, processing is based as appropriate on performance of our agreement with you, your consent, compliance with legal obligations and our legitimate interests in operating and securing ReelBreaker.

4. Service providers and disclosures

We use the following providers where necessary to operate ReelBreaker:

• Supabase: authentication, database, private goal and app-assignment backups, derived daily results, file storage and account-deletion infrastructure.
• Apple: Sign in with Apple, App Store distribution, in-app purchase processing and purchase restoration.
• Google: Google sign-in when you select that option.

These providers may process data in other countries under their own terms and privacy policies. We do not sell personal data. ReelBreaker does not include third-party advertising or behavioral advertising trackers.

5. Photographs

ReelBreaker only accesses a photograph when you actively choose one through the system photo picker. A chosen background photograph is uploaded to private cloud storage so it can be displayed across sessions. An optional profile photograph is stored with your private account and competition profile. New or changed competition photos appear to other members only after review; until then, initials are shown. Your own preview remains available. You can replace or remove your photographs in the app.

6. Retention and account deletion

We retain account data while your account is active or as needed to provide the service and meet legal obligations. You can permanently delete your account from Settings in ReelBreaker. This removes the account and associated cloud progress, settings, notes, private goal and app-assignment backups, derived daily results, device enrollments, competition memberships, shared results and uploaded background files. Removing the device enrollment invalidates its restricted upload credential. Leaving a group removes your membership and results from that group. Reports may be retained as needed to investigate abuse; the reporter identity is removed when the account is deleted. Some information may remain temporarily in secure backups or where retention is required by law. Data stored locally can also be removed by deleting the app from your device.

Ordinary sign-out preserves your local goals, app assignments, history and pending synchronization. The existing device monitor can continue checking goals and sending derived results while you are signed out, using its restricted upload credential. This credential cannot read your account data or change your goals. Signing in to another account retires the previous account’s personal monitor before that account’s monitoring starts. Account deletion removes the cloud enrollment and prevents further uploads with the deleted account’s credential.

7. Your rights

Depending on applicable law, you may have rights to access, correct, delete, restrict or receive a copy of your personal data, and to object to or withdraw consent for certain processing. Contact morris.gaube@gmx.ch to exercise a right. You may also lodge a complaint with the competent data protection authority, including the Swiss Federal Data Protection and Information Commissioner.

8. Security

We use reasonable technical and organizational safeguards, including authenticated access and database access controls. No method of electronic storage or transmission can be guaranteed to be completely secure.

9. Children

ReelBreaker is not directed to children. If you believe that a child has provided personal data without the required authorization, contact us so that we can review and delete it where appropriate.

10. Changes to this policy

We may update this policy when ReelBreaker or applicable requirements change. The current version and its update date will remain available on this page.