Privacy Policy for BreathApplyser

Last Updated: December 2025

Introduction

BreathApplyser ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App" or "Service").

Please read this Privacy Policy carefully. By using BreathApplyser, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our App.

Information We Collect

Personal Information

• Account Information: When you create an account or sign in using Google Sign-In or Apple Sign-In, we collect:
  • Email address
  • Display name
  • Unique user identifier
  • Friend code (a unique identifier you can share with others for social features)
  • Account creation and last login timestamps
• User Profile Data: To provide accurate BAC calculations and personalized features, we collect information you voluntarily provide, including:
  • Weight (in your preferred unit)
  • Gender
  • Age
  • Theme preferences (light/dark mode)
  • Notification preferences and settings

Usage Data

• Drink Logs: Information about alcoholic beverages you voluntarily log, including:
  • Beverage type
  • Volume consumed
  • Alcohol percentage (ABV)
  • Timestamps of consumption
  • Custom drink entries you create
• BAC Calculations: Calculated Blood Alcohol Content values and related metrics based on your inputs, including:
  • Current estimated BAC
  • Historical BAC charts and graphs
  • Time until sober estimates
• App Activity: General usage patterns, feature utilization, and interaction data to improve app performance and user experience. This data is anonymized and aggregated where possible.

Automatically Collected Information

• Device Information: We may automatically collect certain information about your device, including:
  • Device type and model
  • Operating system version
  • Unique device identifiers
  • Mobile network information
• Log Data: Technical information that may include:
  • App crashes and errors
  • Performance metrics
  • API request logs (for debugging and improving service reliability)

This information is collected to ensure the App functions correctly and to help us diagnose and fix issues.

How We Use Your Information

We use the collected information for the following purposes:

1. Core Functionality: To calculate BAC, track drinking history, and provide personalized insights.
2. Account Management: To create and manage your user account.
3. Data Synchronization: To sync your data across devices when you're signed in.
4. Notifications: To send you reminders and summaries based on your preferences.
5. App Improvement: To analyze usage patterns and improve app performance.
6. Support: To respond to your inquiries and provide customer support.

Data Storage and Security

Local Storage

• Your data is stored locally on your device using SQLite database technology.
• Sensitive information, including authentication tokens and credentials, is stored using platform-specific secure storage mechanisms (Flutter Secure Storage) that utilize:
  • Keychain Services (iOS)
  • Encrypted SharedPreferences (Android)
  • Encrypted storage with platform-native encryption
• Email addresses and other sensitive user data stored locally are encrypted using AES-256 encryption before storage in the local database.

Cloud Storage

• When you sign in with a cloud account, your data is automatically synchronized with our secure PostgreSQL database hosted on Neon.
• All data transmitted between the App and our servers is encrypted in transit using SSL/TLS protocols.
• Data stored in our cloud database is encrypted at rest using industry-standard encryption methods.
• We implement multiple layers of security, including:
  • Access controls and authentication
  • Regular security audits
  • Secure data centers
  • Network security measures

Offline Functionality

• BreathApplyser is designed to work offline. Your data is stored locally first, ensuring functionality even without internet connectivity.
• When you reconnect to the internet, data is synchronized securely with our cloud database if you have signed in.

Data Retention

• Your data is retained as long as your account is active or as needed to provide our services.
• If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal purposes.
• You can request deletion of your account and all associated data at any time through the app settings or by contacting us directly.
• Local data on your device is deleted immediately when you uninstall the App or clear app data through your device settings.

Data Sharing and Disclosure

We do NOT sell, trade, rent, or otherwise monetize your personal information to third parties. We respect your privacy and are committed to keeping your data secure.

We may share your information only in the following limited circumstances:

1. Service Providers: We may share data with trusted third-party service providers who assist us in operating the App, conducting our business, or serving our users. These service providers are contractually obligated to:
   • Use your information only for the purposes we specify
   • Maintain the confidentiality of your information
   • Implement appropriate security measures
   Our current service providers include:
   • Firebase (Google): For user authentication services
   • Neon: For cloud database hosting and storage
   • Google Play Services: For Android app functionality
2. Legal Requirements: We may disclose your information if required to do so by law or in response to:
   • Valid legal requests (subpoenas, court orders, etc.)
   • Government investigations
   • Protection of our rights, property, or safety
   • Protection of the rights, property, or safety of our users or others
3. Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.
4. With Your Consent: We may share your information with your explicit consent or at your direction.

Third-Party Services

Our App integrates with the following third-party services to provide functionality:

• Firebase Authentication (Google): Provides secure user authentication services, including Google Sign-In and Apple Sign-In capabilities.
  Privacy Policy: Google Privacy Policy
• Neon PostgreSQL: Hosts our cloud database infrastructure for data synchronization.
  Privacy Policy: Neon Privacy Policy
• Google Play Services: Provides essential functionality for Android devices, including app updates and device services.
  Privacy Policy: Google Privacy Policy

These third-party services have their own privacy policies that govern how they collect, use, and protect your information. We encourage you to review their privacy policies to understand their practices. We are not responsible for the privacy practices of these third-party services.

Your Rights and Choices

You have the following rights regarding your personal information:

Access and Portability

• Access Your Data: You can view and access all your personal data directly within the App at any time.
• Data Export: You can export your data in a portable format using the "Export Data" feature in the app settings. This includes your drink logs, profile information, and other data you have created.

Deletion

• Account Deletion: You can delete your account and all associated data at any time through the app settings. This will:
  • Delete your account from our systems
  • Remove all your personal data from our cloud database (within 30 days)
  • Delete all local data stored on your device (immediately upon deletion)
• Partial Deletion: You can delete individual drink entries or modify your profile information at any time through the App.

Preferences and Controls

• Notification Preferences: You can enable or disable notifications, including reminders and summaries, through the app settings.
• Data Synchronization: You can control cloud synchronization. If you disable sync, your data will only be stored locally on your device.
• Offline Mode: You can use the App entirely offline if you choose not to create a cloud account.

Additional Rights (GDPR/CCPA)

If you are located in the European Economic Area (EEA), United Kingdom, or California, you have additional rights under applicable data protection laws:

• Right to Rectification: You can correct inaccurate or incomplete personal information.
• Right to Object: You can object to our processing of your personal information.
• Right to Restrict Processing: You can request that we restrict the processing of your personal information.
• Right to Data Portability: You can receive your data in a structured, commonly used format.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw consent at any time.

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below.

Children's Privacy

BreathApplyser is NOT intended for, nor designed to be used by, individuals under the age of 21 (or the legal drinking age in your jurisdiction).

We do not knowingly collect, use, or disclose personal information from anyone under the age of 21. If we become aware that we have collected personal information from a child under the legal drinking age without verifiable parental consent, we will take steps to delete that information as quickly as possible.

If you are a parent or guardian and believe that your child under the legal drinking age has provided us with personal information, please contact us immediately using the information provided in the "Contact Us" section. We will promptly investigate and take appropriate action.

International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

Specifically:

• Our cloud database infrastructure is hosted on Neon, which operates data centers that may be located outside your country of residence.
• Firebase services are provided by Google and may process data in various locations globally.

When we transfer your personal information internationally, we take appropriate safeguards to ensure your data is protected in accordance with this Privacy Policy and applicable data protection laws. This includes:

• Ensuring transfers are made to countries with adequate data protection laws, or
• Implementing appropriate contractual safeguards with our service providers

If you are located in the EEA, UK, or other regions with data protection laws, your data may be transferred outside these regions. By using our App, you consent to such transfers.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Updating the "Last Updated" date at the top of this Privacy Policy
• Posting the updated Privacy Policy in the App
• Notifying you through the App or via email (for significant changes)
• Requiring you to acknowledge the updated policy when you next use the App (for substantial changes)

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information. Your continued use of the App after any changes to this Privacy Policy constitutes your acceptance of those changes.

If you do not agree with the updated Privacy Policy, you may stop using the App and delete your account at any time.

Compliance

This Privacy Policy is designed to comply with applicable data protection and privacy laws, including:

• General Data Protection Regulation (GDPR): For users in the European Economic Area (EEA) and United Kingdom
• California Consumer Privacy Act (CCPA): For users in California, United States
• Google Play Store Policies: Requirements for apps distributed through Google Play
• Apple App Store Guidelines: Requirements for apps distributed through the Apple App Store
• Other applicable local, state, and national data protection laws

We are committed to protecting your privacy rights and will update this policy as needed to maintain compliance with evolving legal requirements.

---

Your Consent

By downloading, installing, using, or accessing BreathApplyser, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy and our data practices as described herein.

If you do not agree with this Privacy Policy, please do not use our App. Your use of the App constitutes your acceptance of this Privacy Policy and your consent to the collection, use, and disclosure of your information as described in this document.

---

Effective Date

This Privacy Policy is effective as of the "Last Updated" date shown at the top of this document and applies to all information collected by BreathApplyser from that date forward.