Privacy Policy

Who we are

Brekkie is a macro tracker for iPhone and Android, made by TBS Labs LTD. For data protection law we are the controller of your personal data. UK GDPR applies to us, and EU GDPR applies where you use Brekkie from the EU.

Questions about any of this go to info@brekk.ie.

The short version

• We collect what you put into Brekkie, and little else.
• We use it to run the app for you.
• We don’t show ads and we don’t sell your personal data.
• If you join a gym’s programme, the gym sees what you log while you are on it. That happens only if you choose it, and you can stop it at any time. See Programmes and gyms.
• You can delete your account, and nearly everything in it, from inside the app. A short record of any programme agreement is kept, as explained below.

What we collect

Your account

Your email address. You sign in with a one-time code we email you, so there is no password for us to store.

What you tell us to set your goals

Your sex, age, height, weight, how active you are, and whether you want to lose, maintain or gain weight. We use these to work out calorie, protein, carb and fat goals.

What you log

• Your food log: the foods, the amounts and the day and meal you logged them to.
• Custom foods, saved meals and favourites.
• Check-ins: your weight, and your body fat and waist if you choose to add them.
• Photos, if you choose to add them to a log. They are stored privately. Your account can open them. If you are on a programme, so can the gym that runs it, and so can the people on the programme if you post that meal to the programme feed. See Programmes and gyms.

What you ask Brekkie

The messages you type to Ask Brekkie, and its replies, are saved to your account so you can read them back. If you speak instead of typing, the recording is turned into text. We keep the text, not the recording.

Your subscription

Whether you have an active subscription and when it runs out. Payment is taken by Apple or Google. We never see your card details.

Technical information

If the app crashes or hits an error, it sends us a report: what went wrong, how the app was performing, the app version, and your device model and operating system. The app also stores a little on your phone itself, such as your sign-in session and your settings, so you stay signed in.

If you join a programme

The name you give for the programme, a record of what you were shown and agreed to when you asked to join, and when you were confirmed, extended or left. Anything you post to the programme feed. Your date of birth, which we ask for before you can join, so that we can check you are 18 or over.

If you run a gym

Your email address and the name you give, your gym’s trading name, its legal name, address and contact email, the time we recorded that you accepted the gym agreement, the programmes you set up, who is on your team, and whether your plan is active. Payment is taken by a payment provider on a page we send you to. We never see your card details. See For gyms below.

Why we use it

• To run Brekkie for you. Signing you in, working out your goals, saving your log and showing your totals and history. The legal basis is our contract with you, the Terms of Use.
• To answer you in Ask Brekkie. Only when you ask. The legal basis is our contract with you.
• To manage subscriptions. Checking whether your subscription is active. The legal basis is our contract with you.
• To run programmes, if you join one. Showing the gym what you log, running the programme feed and keeping a record of your agreement. This happens only because you chose to join and agreed on the join screen.
• To fix faults and keep the app secure. Crash and error reports, and limits that stop the service being abused. The legal basis is our legitimate interest in a working, safe app.
• To meet legal duties. For example, answering a request you make about your data.

Information about your health

Your weight, body measurements and what you eat can say something about your health. The law gives that kind of information extra protection. We only have it because you choose to enter it, and we use it only to give you the app. We rely on your consent for this. You can withdraw it at any time by deleting the information or deleting your account.

The details you give to set your goals (sex, age, height and weight), your goals and your food log are health information too, and we treat them in the same way.

Who helps us run Brekkie

We use a small number of other companies to run Brekkie. They handle your data only to provide their service to us.

• Supabase, with its servers in Ireland. Our database, sign-in and private file storage, and the server functions that run the app. Almost everything above is kept here.
• Amazon Web Services, in Ireland. Sends the email with your sign-in code, through its email service.
• OpenAI, a company based in the United States. Works out a reply when you use Ask Brekkie, and turns speech into text when you use your voice. More on this below.
• Sentry, with its servers in Germany. Receives crash and error reports.
• Open Food Facts, a public food database. When you search for a food or scan a barcode, the app sends the search words or the barcode number to Open Food Facts to find the food. It does not send your email address or anything from your account. As with any internet request, Open Food Facts can see the IP address it came from.
• Stripe, for gyms. Takes payment from gyms for their plan. It does not receive anything about members.
• RevenueCat, a company based in the United States, with the app stores. Handle subscriptions and tell us whether yours is active.
• Expo, a company based in the United States. Delivers app updates. The app checks its servers for a newer version.
• Netlify, a company based in the United States. Hosts this website.

We may also share information if the law requires it, or if Brekkie is ever taken over by another company, in which case this policy would continue to apply to your data.

Ask Brekkie and artificial intelligence

Nothing is sent to our artificial intelligence provider unless you use Ask Brekkie or voice input. When you do, we send:

• Your message, and the earlier messages in the same conversation.
• If you spoke, the recording, so it can be turned into text.
• The parts of your Brekkie data needed to answer you. Depending on the question, that can include your goals, your sex, the food you’ve logged, your daily totals, recent check-in weights, and your saved meals and favourites.

We do not send your email address. Ask Brekkie can suggest things to log, but nothing is added to your diary until you confirm it.

Programmes and gyms

A gym or coach can run a programme on Brekkie and invite people to it. Joining is your choice. Opening an invite shows you exactly what the gym would see before you decide, and nothing is sent to the gym until you ask to join. If you choose “Not now”, nothing happens and the gym is not told.

What the gym sees

The people at the gym who run the programme can see:

• Everything you log: each food and drink, the meal, the time and the amount.
• Which days you logged and which you didn’t.
• Your daily and weekly totals, and your goals.
• Your check-ins: your weight, and your body fat and waist if you add them.
• Every photo you add to a log.
• Whether you can use Brekkie at the moment, as a yes or a no.
• The name you gave for the programme.

This is information about your health. The gym has agreed with us to use it only to coach you on the programme and not to pass it on. The people who can see your diary are listed in the app, on the page for your programme. We keep a record of when gym staff open a member’s diary.

What the gym doesn’t see

• Your conversations with Ask Brekkie.
• Anything from before you joined the programme.
• Your saved meals and favourites, and your account details such as your email address.

From when, and for how long

From the day the gym confirms you, or the day the programme starts if that is later. The gym sees what you log up to your end date on the programme. After the programme ends it can look back over the programme for 14 days, then it can no longer open your diary. Anything you log after your last day is not shown.

If the gym moves the end of the programme later, your sharing does not move with it. The app asks you whether you want to carry on, and if you don’t answer, your sharing ends on the original date.

What this rests on, and taking it back

The gym sees your diary because you agree to it, by ticking the box on the join screen. You can take that agreement back at any time by leaving the programme, from the My gym tab. The gym can then no longer open your diary, including the days it could see before. It can’t undo what it has already seen. Your diary stays yours.

Who is responsible

Brekkie and your gym are each responsible, separately, for the information they handle. Your gym does not act on our behalf, and we do not act on its. Its legal name, address and contact details, and ours, are shown in the app before you agree, on the “Who’s responsible and your rights” page for each programme. If you are unhappy with how a gym has handled your information, tell the gym, tell us at info@brekk.ie, or contact the regulator named in Your rights.

The programme feed

Some programmes have a feed where the gym and the members share meals and messages. What you post is seen by the gym and by everyone on the programme, with your programme name. You choose each post, and you can delete yours at any time. If you leave the programme, your posts go with you. Other members never see your diary, only what you post. If you post a meal with a photo, the photo goes with it. You can report a post or block someone from the post’s menu. Reports go to your gym and to us, and we can remove posts and people that break the feed rules. The rules are on our programme feed rules page.

The record of your agreement

When you ask to join we keep a record of what you were shown, the version of the wording, when you agreed, and later when you were confirmed, agreed to an extension or left. We keep it so that we can show what was agreed if a complaint is ever made. It doesn’t hold your diary. It carries an internal identifier, not your name or email address. We keep it for up to six years after you leave or the programme ends, even if you delete your account, and then delete it.

Under 18

Programmes are for people aged 18 or over, like the rest of Brekkie. We ask for your date of birth before you can join a programme and we refuse anyone who tells us they are under 18. We rely on the date you give us.

For gyms

If you run a gym or coach people on Brekkie:

• You agree with us to use what you see about members only to coach them on your programme, not to pass it on and not to use it for marketing. The same applies to everyone on your team. See the gym agreement.
• You see only what a member has agreed to share, and only while they are on your programme and for 14 days after.
• When a member leaves, you can no longer open their diary.
• We record when your team opens a member’s diary.
• We hold your details as described under “If you run a gym” above. If you delete your account, see how deletion works for gym owners.

Where your data is kept

Some of the companies above are based outside the UK and the European Economic Area, including in the United States. Where your data is sent to a country without an equivalent data protection law, we rely on safeguards the law recognises, such as approved standard contract terms.

How long we keep it

We keep your data for as long as you have an account. When you delete your account, your account and what you logged are deleted with it, and so are your programme enrolments, your posts, comments and likes in programme feeds, and the blocks and reports you made. The gym stops seeing you at once. Photo files are removed from storage by an automatic clean-up shortly afterwards. The one thing kept is the record of any programme agreement, for up to six years, as described above. See how to delete your account.

If you join a programme, the gym can see your diary while you are on it and for 14 days after it ends. After that we no longer show it to the gym, but we can’t undo what the gym has already seen.

You can also delete single things as you go, such as a food entry, a saved meal or an Ask Brekkie conversation.

Crash and error reports are kept separately from your account and are removed on our provider’s normal schedule. The app stores and our subscription provider keep their own records of purchases.

Your rights

You have the right to:

• ask for a copy of the data we hold about you,
• have anything that is wrong corrected,
• have your data deleted,
• receive your data in a form you can take elsewhere,
• object to how we use your data, or ask us to restrict it,
• withdraw consent where we rely on it. For a programme, you do that by leaving it.

To use any of these, email info@brekk.ie from the address on your account. We will reply within one month.

If you are unhappy with how we have handled your data, please tell us first so we can try to put it right. You also have the right to complain to the regulator: the Information Commissioner’s Office in the UK, or the Data Protection Commission in Ireland.

Children

Brekkie helps set calorie goals, so it is for adults only. It is not for anyone under 18, and we do not knowingly collect data from anyone under 18. This includes programmes: we ask for a date of birth before anyone can join one. If you think a child has made an account, email info@brekk.ie and we will delete it.

Keeping it safe

Your data is sent over an encrypted connection. Our database is set up so that each account can read and change only its own data. The exceptions are what you have agreed to share with a gym on a programme, and what members of a programme see in its feed. Photos are kept in private storage, and a photo can be opened only by you, by the gym on a programme you joined if it is on a log the gym can see, or by the people on a programme if you posted it to the feed. No system is perfectly secure, but we work to keep yours protected.

This website

brekk.ie sets no cookies and has no analytics or tracking. If you sign in to the gym portal, your browser stores a sign-in token so you stay signed in, and your choice of light or dark. They are needed for the portal to work. The token is removed when you sign out. Our hosting provider, Netlify, may keep standard server logs, such as IP addresses, to run and protect the site.

Changes to this policy

If we change how we handle your data, we will update this page and change the date at the top. If the change is a significant one, we will tell you in the app or by email before it takes effect.

Contact

TBS Labs LTD
info@brekk.ie