Privacy Policy

This Privacy Policy describes the policies and procedures of Breezi ("the App", "we", "us", or "our") on the collection, use, and disclosure of your information when you use the Breezi service. It also describes your privacy rights and how the law protects you.

By using Breezi, you agree to the collection and use of information in accordance with this Privacy Policy.

Application and Developer Identification

The application covered by this Privacy Policy is Breezi (the "Application" or "App"). The developer and legal entity offering this Application is the same as the one listed on the Apple App Store and Google Play Store listings for Breezi.

Interpretation and Definitions

Interpretation

The words whose initial letters are capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

Account means a unique account created for you to access our Service or parts of our Service.

Affiliate means an entity that controls, is controlled by, or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.

Application refers to Breezi, the software program provided by the Company.

Company (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) refers to the developer or legal entity that operates Breezi, as shown on the Apple App Store and Google Play Store listings for Breezi.

Country refers to: Ontario, Canada.

Device means any device that can access the Service such as a computer, a cell phone, or a digital tablet.

Personal Data is any information that relates to an identified or identifiable individual.

Service refers to the Application (Breezi).

Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service, or to assist the Company in analyzing how the Service is used.

Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).

You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Health and Fitness Data

Breezi accesses and collects health and fitness data to provide its core fitness and calorie-tracking features. This section describes what health data we access, where it comes from, and how we use it.

What Health Data We Access and Collect

When you connect Breezi to your device's health platform (Apple HealthKit on iOS or Google Health Connect on Android), we may read the following types of health data. This data may be recorded by your phone, smartwatch, or other wearable devices and stored in HealthKit or Health Connect:

Workouts: Exercise sessions, including activity type, duration, and calories burned.
Active energy burned: Calories (active energy) expended during activities.
Distance: Walking, running, and cycling distance.
Heart rate: Heart rate measurements, including during workouts.
Steps: Step count (e.g., for walking and running).

How We Use Health Data

We use this health data only to:

Display your activity, calories burned, and fitness metrics within the App.
Sync and show data from your watch or wearable in Breezi.
Help you track calories in vs. calories out and support your fitness goals.

Apple HealthKit Disclosure

Data obtained through Apple HealthKit is used solely to provide health and fitness functionality within the App. In compliance with Apple's requirements:

We do not sell data obtained from HealthKit to third parties, including advertising platforms, data brokers, or information resellers.
We do not use data obtained from HealthKit for advertising, marketing, or any data-mining purpose other than providing health and fitness services to you.
We do not disclose data obtained from HealthKit to a third party without your explicit consent, except as necessary for a Service Provider to provide a service on our behalf and only if that provider is bound by at least as restrictive privacy requirements as those set forth herein.
HealthKit data is not stored on our servers. It is read from HealthKit at the time of use and displayed within the App.

You can revoke Breezi's access to HealthKit data at any time through your device's Health app settings.

Google Health Connect Disclosure

If you use Breezi on Android, we access your Health Connect data with your permission. We use this data solely for the fitness-tracking purposes described above. You can revoke Breezi's access at any time through the Health Connect app settings on your device.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. We collect the following personal information:

Email address
First name and last name
Date of birth (used for age-based fitness calculations)
Gender (used for fitness and calorie calculations)
Physical attributes: Height and weight (used for calorie and macro calculations)
Fitness preferences: Activity level, fitness goals, goal weight, dietary preferences, and related onboarding selections
Profile photo (optional, uploaded to provide a profile image)
Apple Sign-In profile information: If you sign in with Apple ("Sign In With Apple"), we receive your name and email address as permitted by your Apple account settings. If you choose to hide your email, Apple provides a private relay email address. We do not receive your Apple ID password.
Google Sign-In profile information: If you sign in with Google ("Sign In With Google"), we receive profile information from Google (such as your name and email address) as permitted by your Google account settings. We do not receive your Google account password.

We do not collect: phone number, physical address, state, province, ZIP/postal code, or city.

Usage Data

Usage Data is collected automatically when using the Service.

Usage Data may include information such as your Device's Internet Protocol address (e.g. IP address), the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, unique device identifiers, and other diagnostic data.

Information Collected While Using the Application

We collect the following from your device only with your permission:

Camera and Photo Library – AI calorie and food recognition. We may access your device's camera and photo library to provide AI-powered food and calorie estimation. When you take or select a photo of food, the image is uploaded to our secure servers, processed by our AI service provider (OpenAI) for food item identification and calorie estimation, and then deleted from our servers after analysis is complete. We use the resulting nutritional data solely to provide calorie and nutrition tracking within Breezi. You can enable or disable camera and photo library access at any time through your device settings.

Microphone – Voice food logging. Breezi may use your device's microphone to allow you to describe food items by voice. Speech is processed on your device using the operating system's built-in speech recognition; the resulting text transcription may then be sent to our AI service provider for food analysis. You can enable or disable microphone access at any time through your device settings.

Barcode scanning. Breezi can scan product barcodes using your device's camera. The barcode number is sent to the Open Food Facts database to retrieve product and nutritional information. No personal data is sent with barcode lookups.

We do not collect: location (GPS) or contacts.

Tracking and Analytics

We do not use tracking or analytics tools such as Google Analytics, Firebase Analytics, or similar third-party analytics services. Firebase Analytics is explicitly disabled in the App.

Emails

We may send emails to users for account-related purposes (e.g. email verification, password reset). We do not send marketing or promotional emails.

Advertising

We do not show ads in the App. We do not use advertising SDKs, remarketing services, or behavioral tracking for advertising purposes.

Subscriptions and In-App Purchases

Breezi offers subscription-based access to premium features. Subscriptions are processed through the Apple App Store (on iOS) and Google Play Store (on Android). We use RevenueCat as our subscription management service provider.

What Subscription Data Is Collected

Purchase information: When you subscribe, your purchase is processed by the Apple App Store or Google Play Store. We do not collect or store your payment details (e.g. credit card number). Apple and Google handle all payment processing.
Subscription status: We receive information about your subscription status (active, expired, cancelled) through RevenueCat to determine which features to unlock.
User identifier: Your Breezi user ID is shared with RevenueCat to associate your subscription with your account.

RevenueCat

RevenueCat, Inc. acts as a Service Provider for subscription management. RevenueCat receives your anonymized user identifier, purchase receipts, and device-level information necessary to validate and manage subscriptions. For more information, see RevenueCat's Privacy Policy.

Subscription Terms

All subscriptions are subject to the terms and conditions of the Apple App Store or Google Play Store, as applicable. You can manage or cancel your subscription at any time through your device's subscription settings.

AI-Powered Features and Third-Party Data Processing

Breezi uses artificial intelligence to provide food analysis, calorie estimation, recipe generation, and personalized fitness goal recommendations. These features are powered by OpenAI through our secure server-side infrastructure (Firebase Cloud Functions).

What Data Is Sent to OpenAI

Food analysis (text): When you describe a food item or meal, the text description is sent to OpenAI for nutritional analysis.
Food analysis (image): When you photograph food for analysis, the image is uploaded to our servers and then sent to OpenAI for identification and calorie estimation. Images are deleted from our servers after analysis is complete.
Recipe generation: When you request AI-generated recipes, recipe-related information (name, ingredients, meal type) is sent to OpenAI.
Onboarding goals: During onboarding, your profile information (name, gender, date of birth, weight, height, activity level, fitness goal, goal weight, timeline) is sent to OpenAI to generate personalized calorie and macro recommendations.

How OpenAI Processes Your Data

Data sent to OpenAI is processed via their API for the sole purpose of generating responses for Breezi's features. According to OpenAI's API data usage policy, data submitted through the API is not used to train OpenAI's models. For more information, see OpenAI's Privacy Policy.

Open Food Facts

When you scan a product barcode, the barcode number is sent to the Open Food Facts open database to retrieve nutritional information. No personal data is transmitted with these requests. For more information, see Open Food Facts' Privacy Policy.

Social Features and Shared Data

Breezi includes social features that allow you to connect with other users. When you use these features, certain information may be visible to other users.

Friends

You can send and accept friend requests. When you are friends with another user, the following data may be visible to them:

Your display name, username, first name, last name, and profile photo
Your daily calorie and macro totals
Emoji reactions you send or receive on calorie logs

Leaderboards

If you participate in exercise leaderboards, the following information is visible to other Breezi users:

Your username, exercise data (exercise type, weight lifted), and gender
Proof videos or images you upload for leaderboard verification, along with any comments you post
Votes (upvotes and downvotes) on proof submissions

Leaderboard data is publicly visible to all authenticated Breezi users. Proof videos and images you upload are stored in our servers and are accessible to other users. Please do not upload content you do not want to be publicly viewable.

Reporting

Users can report inappropriate leaderboard content. Reports include the reporter's user ID, the reason for the report, and a timestamp. Reports are reviewed by us and are not shared with other users.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

To provide and maintain our Service, including to monitor the usage of our Service.
To manage your Account: to manage your registration as a user of the Service. The Personal Data you provide can give you access to different functionalities of the Service that are available to you as a registered user.
For the performance of a contract: the development, compliance and undertaking of the subscription contract or any other contract with us through the Service.
To contact you: by email or push notifications regarding updates or communications related to the functionalities or contracted services, including security updates, when necessary or reasonable for their implementation.
To manage your requests: to attend and manage your requests to us.
For business transfers: we may use your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, in which Personal Data held by us about our Service users is among the assets transferred.
For other purposes: we may use your information for other purposes, such as data analysis, identifying usage trends, and to evaluate and improve our Service, products, services, and your experience.

We may share your personal information in the following situations:

With Service Providers: we may share your personal information with Service Providers to monitor and analyze the use of our Service, to contact you, or to process data (e.g., AI food analysis via OpenAI, subscription management via RevenueCat).
For business transfers: we may share or transfer your personal information in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of our business to another company.
With Affiliates: we may share your information with our affiliates, in which case we will require those affiliates to honor this Privacy Policy.
With other users: when you share personal information or otherwise interact in public areas with other users (such as leaderboards or friend features), such information may be viewed by those users as described in the "Social Features and Shared Data" section.
With your consent: we may disclose your personal information for any other purpose with your consent.

Third-Party Service Providers

We use the following third-party service providers to operate and improve Breezi:

Firebase (Google): Authentication, cloud database (Firestore), file storage (Firebase Storage), serverless functions (Cloud Functions), and App Check for security. See Firebase Privacy.
OpenAI: AI-powered food analysis, recipe generation, and personalized goal recommendations. See OpenAI Privacy Policy.
RevenueCat: Subscription management and purchase validation. See RevenueCat Privacy Policy.
Open Food Facts: Open-source food product database for barcode lookups. See Open Food Facts Privacy Policy.
Apple App Store / Google Play Store: App distribution, subscription billing, and payment processing.

We do not use Google Analytics, Firebase Analytics, Crashlytics, Facebook SDK, or any advertising or remarketing services.

Retention of Your Personal Data

The Company will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer periods.

Food images submitted for AI analysis are deleted from our servers after the analysis is complete and are not retained.

Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

The Company will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.

Delete Your Personal Data

You have the right to delete or request that we assist in deleting the Personal Data that we have collected about you.

You may delete your account and all associated data at any time from within the App by navigating to Account > Delete Account. When you delete your account, we will delete your profile information, food logs, workout data, recipes, friend connections, leaderboard entries, and all other personal data stored in our systems.

You may also contact us at skeletonxtrme@gmail.com to request access to, correct, or delete any personal information that you have provided to us.

Please note that we may need to retain certain information when we have a legal obligation or lawful basis to do so. Additionally, data that has been shared with third-party service providers (e.g., RevenueCat for subscription records) may be subject to those providers' own retention policies.

Disclosure of Your Personal Data

Business Transactions

If the Company is involved in a merger, acquisition or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.

Law Enforcement

Under certain circumstances, the Company may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Other Legal Requirements

The Company may disclose your Personal Data in the good faith belief that such action is necessary to:

Comply with a legal obligation
Protect and defend the rights or property of the Company
Prevent or investigate possible wrongdoing in connection with the Service
Protect the personal safety of users of the Service or the public
Protect against legal liability

Security of Your Personal Data

The security of your Personal Data is important to us. We use commercially reasonable security measures to protect your data, including:

Firebase App Check to verify that requests to our backend come from authentic instances of the App
Encrypted data transmission (HTTPS/TLS) for all network communication
Firebase Authentication for secure account management
Firestore security rules to ensure users can only access their own data (except where shared via social features)

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially reasonable means to protect your Personal Data, we cannot guarantee its absolute security.

Children's Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us at skeletonxtrme@gmail.com. If we become aware that we have collected Personal Data from anyone under the age of 13 without verification of parental consent, we will take steps to remove that information from our servers.

If we need to rely on consent as a legal basis for processing your information and your country requires consent from a parent, we may require your parent's consent before we collect and use that information.

Your California Privacy Rights (CCPA/CPRA and CalOPPA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, and the California Online Privacy Protection Act (CalOPPA) may afford you additional rights.

Disclosure: We have disclosed in this Privacy Policy the categories of personal information we collect (e.g. identifiers such as name and email; internet/device information; health-related information where applicable) and the purposes for which we use them.
Sale and sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
Rights: You may have the right to know what personal information we hold about you, to delete it, to correct it, to limit use of sensitive personal information, and to non-discrimination for exercising these rights. To exercise these rights, contact us at skeletonxtrme@gmail.com.
Do Not Track: CalOPPA requires disclosure of how we respond to Do Not Track (DNT) signals. We do not currently respond to DNT signals; our practices are as described in this Privacy Policy.

Your European and UK Privacy Rights (GDPR)

If you are in the European Economic Area or the United Kingdom, you may have rights under the General Data Protection Regulation (GDPR) and UK data protection laws, including: the right of access to your personal data; the right to rectification; the right to erasure ("right to be forgotten"); the right to restrict processing; the right to data portability; the right to object to processing; and rights related to automated decision-making and profiling. You also have the right to lodge a complaint with a supervisory authority.

Our legal basis for processing includes your consent (e.g. granting access to HealthKit or Health Connect), performance of a contract (e.g. providing the Service), and our legitimate interests (e.g. improving the Service and ensuring security).

To exercise your rights, contact us at skeletonxtrme@gmail.com.

Canadian Privacy Rights (PIPEDA)

If you are a Canadian resident, the Personal Information Protection and Electronic Documents Act (PIPEDA) may afford you additional rights regarding your personal information. You have the right to access, correct, and request deletion of your personal data. You may withdraw consent for the collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions. To exercise these rights, contact us at skeletonxtrme@gmail.com.

Links to Other Websites

Our Service may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top.

For significant changes, we will notify you via a prominent notice within the App prior to the change becoming effective.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, your personal data, or wish to exercise any of your privacy rights, you can contact us:

By email: skeletonxtrme@gmail.com