Privacy Policy for BreakFast
Last updated: June 6, 2026
BreakFast (“the app”, “we”, “us”, or “our”) is an intermittent‑fasting tracker published by BDKM LLC. This Privacy Policy explains what information the app handles, where it is stored, and the choices you have.
The short version: BreakFast is local‑first. Everything you log lives on your device. We do not run analytics, we do not track you, we do not show ads, and we do not sell your data.
1. Who we are
- Provider: BDKM LLC
- App: BreakFast (
com.bdkm.breakfast) - Contact: hello@breakfast.the-bdkm.com
- Website: https://breakfast.the-bdkm.com
2. Information the app handles
All of the following is entered by you and is stored only on your device unless a section below says otherwise.
a. Profile information (all optional)
- Name
- Sex (Male / Female / Prefer not to say)
- Birth year (used to estimate your age on‑device to tailor suggestions)
- Height
- Current weight and goal weight
- Fasting goal (e.g. lose weight, maintain, more energy, better health)
- Preferred fasting protocol (e.g. 16:8) and preferred units (metric/imperial)
b. Activity you record
- Fasting sessions — start time, end time, goal length, protocol, an optional note, and an optional mood rating.
- Weight log — date, weight, and an optional note.
- Challenges and achievements — your active challenge target and which milestones you have earned, computed on your device from the activity above.
- App preferences — notification on/off and text‑size choice.
We do not collect your precise location, contacts, calendar, photos, microphone, camera, or health data from Apple Health / Google Health Connect. The app does not read from or write to those health platforms.
3. Where your data is stored
By default, 100% of the data described in Section 2 is stored locally on your device in the app’s private storage. It is not transmitted to us or to any third party. If you uninstall the app, that data is deleted with it.
We do not operate a server that receives your fasting, weight, profile, or achievement data in this version of the app.
4. Optional account sign‑in
BreakFast can be used fully without an account. If a future or specially configured build offers sign‑in, it uses a passwordless “magic link”: you enter your email address and receive a one‑time sign‑in link via our authentication provider, Supabase.
- We collect only your email address for this purpose, and only if you choose to sign in.
- We do not collect or store a password.
- In this version, signing in does not upload your fasting, weight, or profile data anywhere — that data still lives only on your device.
If you signed in and want your email removed from the authentication provider, contact us at hello@breakfast.the-bdkm.com.
Supabase processes the email solely to send your sign‑in link. See Supabase’s privacy practices at https://supabase.com/privacy.
5. Information that leaves your device
The only times information leaves your device are when you choose to do something, or for the limited technical case noted in (d):
- (a) Sharing a progress card. When you tap share, the app creates an image on your device and hands it to your operating system’s share sheet. You choose where it goes (Messages, social apps, email, etc.). We never receive it.
- (b) Exporting your data. You can export your fasts and weights as CSV/JSON files via the share sheet. You control the destination. We never receive it.
- (c) Opening links. Tapping a support email, our website, or a link to another BDKM app opens your mail client, browser, or an app store. We do not transmit your in‑app data through these links.
- (d) Fonts. The app may load its typeface from the Google Fonts service the first time the interface renders. This is a standard request handled by Google; it does not include your personal or fasting data. See Google’s Privacy Policy.
6. Notifications
If you enable fast‑complete reminders, the app asks your device for permission to send local notifications. These are scheduled and shown entirely on your device. We do not run a push server and do not send remote marketing pushes in this version. You can turn notifications off at any time in Settings or in your device settings.
7. Analytics, tracking, and advertising
BreakFast contains no third‑party analytics, crash‑reporting, advertising, or tracking SDKs. We do not build advertising profiles, and we do not share data with data brokers. We do not “sell” or “share” personal information as those terms are defined under U.S. state privacy laws (including the CCPA/CPRA).
8. Children’s privacy
BreakFast is not directed to children under 13 (or the minimum age required in your country/region). Although the app may ask for a birth year to tailor suggestions, it does not verify age and is intended for general audiences who meet the minimum age. We do not knowingly collect personal information from children under that age. If you believe a child has provided us information (for example, an email at sign‑in), contact us at hello@breakfast.the-bdkm.com and we will delete it.
Intermittent fasting is generally not appropriate for children. The app is intended for adults.
9. Your choices and rights
Because your data is stored on your device, you are in direct control:
- Access / view: Everything is visible within the app.
- Export: Use the in‑app export to obtain your data as CSV/JSON.
- Delete: Clear individual entries in the app, or uninstall the app to delete all locally stored data.
- Email removal: If you used sign‑in, email us to delete your email from the authentication provider.
Depending on where you live (e.g. the EEA/UK under GDPR, or California under CCPA/CPRA), you may have rights to access, correct, delete, or port your personal information, and to be free from discrimination for exercising them. For data on your device you can exercise these directly; for anything we hold (an email from sign‑in), contact us and we will respond within the time required by law.
10. Data retention
We do not retain your fasting, weight, or profile data on our systems — it stays on your device until you delete it. If you used sign‑in, your email is retained by the authentication provider until you ask us to remove it or the account is deleted.
11. Security
Your in‑app data is stored in the app’s private, sandboxed storage provided by your operating system. No method of electronic storage is 100% secure, but because the data stays on your device and is not transmitted to us, the exposure surface is limited. Keep your device protected with a passcode/biometric lock.
12. International users
The app is offered globally. Your in‑app data does not leave your device by default, so it is processed wherever your device is. If you use sign‑in, your email may be processed by our authentication provider on servers that may be located outside your country.
13. Changes to this policy
We may update this Privacy Policy as the app evolves (for example, when optional cloud sync or other features ship). When we do, we will revise the “Last updated” date above and, for material changes, provide a notice in the app or on this page. Continued use after an update means you accept the revised policy.
14. Contact us
Questions about this policy or your data?
BDKM LLC — hello@breakfast.the-bdkm.com