Privacy

Who is responsible

UnbreakFast is operated by Yiu Wing Yip, an individual in Hong Kong. For privacy questions or requests to access, correct or delete your personal data, contact support@unbreakfast.chaperon.dev.

What stays on your phone

Your Free timer setup and schedules, local fasting history, optional weight and body-fat entries, safety answers, selected apps or Screen Time items, blocked-app attempt counts, Frenchie progress and crash-reporting preference are stored on your device.

These health entries and selected-app details are not intentionally sent to the UnbreakFast backend. Local records do not sync between devices. They may not return after you reinstall the app or clear its data. When you sign into a different account, Keep fasting records shares the current local record set, including future fasts. Start fresh creates a separate set without deleting the previous one. Returning accounts can reopen their linked records on the same installation. Kudos and Frenchie’s wardrobe stay with the phone.

What the service needs

If you sign in, Supabase handles your account ID, email or sign-in-provider identity, optional name supplied by your sign-in provider, and session information. Buying or restoring creates a private billing session with a random identifier, even if you do not sign in. The service stores your verified Pro access, Key balance and ledger, app-blocking activation and recovery records, and hashed purchase links separately from your optional login. For protected commitments, it also stores the agreed mode, start time, fasting and eating durations, selected fasting weekdays, timezone, recurrence setting, and activation and cancellation records.

This information supports sign-in, purchase verification, protected commitments, recovery and account deletion. The protected schedule lets the service count eligible completed windows toward your stake reset when you reconnect. Your phone runs the schedule and applies app restrictions; the server does not trigger blocking. Purchase links prevent duplicate credit. A verified store purchase can restore its wallet without signing into the original UnbreakFast account. This does not grant access to that account’s profile or local records. UnbreakFast does not use this information for advertising.

If you use Sign in with Apple, the service can store an encrypted Apple authorization token and a hashed Apple account reference. These let it ask Apple to revoke UnbreakFast’s access when you delete your account. They are removed with your account. If revocation cannot be completed, the app provides steps to remove access in your Apple Account settings.

You can use Free timers and buy or restore Pro without signing in. An optional account can provide another way to recover access to purchases.

Purchases

Apple or Google processes your payments. UnbreakFast receives the purchase status and identifiers needed to verify ownership, provide Pro and Keys, and handle renewals, cancellations and refunds. It does not receive your full payment-card details.

The stores keep their own account and transaction records under their policies.

Optional crash reports

Crash reporting is off by default. If you turn on Share crash reports in Records and accept the confirmation, technical error reports can be sent to Sentry to help investigate crashes.

The reporting code is designed to exclude your account details, fasting and safety answers, measurements, selected apps, general analytics, performance traces, logs and screen recordings. The Sentry project is configured not to store source IP addresses for new events and has server-side scrubbing enabled. Sentry still processes a network IP while receiving a report. Native minidump attachments are disabled.

The current Sentry project stores event data in the European Union. Sentry is a US provider and may process data internationally through its service providers. Event retention follows the active Sentry plan; the free Developer plan has a 30-day event-retention window. Plan changes can affect retention, so this is not a promise that every report is deleted at an exact deadline.

You can change the setting in Records. Turning it off clears unsent reports on the device. Reports already sent cannot be recalled through the app. Contact support@unbreakfast.chaperon.dev with a privacy request; do not send health details to help identify a report.

App restrictions and permissions

On iOS, UnbreakFast uses Family Controls, Screen Time and Managed Settings for the system picker and restrictions you choose. On Android, Accessibility permission lets the app respond when a selected app opens during a protected window. These permissions are not used for advertising or general activity profiling.

Keeping and deleting data

Local records remain until you erase them, clear app data or remove the app, subject to your device's backup and storage behaviour. When server account deletion completes, your login, profile, stored Apple authorization credentials and account-to-wallet association are removed. Schedules and activation records for wallets linked to that account and its signed-in billing sessions are removed; purchase balances and billing records remain separately as explained below.

Purchase balances, Key transactions, store purchase links and transaction fingerprints remain separately from your optional login. This lets the same verified store purchase recover its remaining Keys and prevents duplicate rewards. These billing records use a wallet identifier and have no automatic deletion deadline. They do not retain your email, name or local fasting history.

Store notification records also remain for renewals, refunds and purchase reconciliation. A hashed deletion receipt, without an account ID, can confirm a completed deletion for up to 30 days. Expired receipt rows are cleaned during later deletion activity. Contact support@unbreakfast.chaperon.dev to request deletion of retained billing data; we will explain any records needed to resolve purchases or prevent duplicate grants.

See Delete account for the steps. Account deletion does not cancel a store subscription.

Providers and this website

Supabase provides account and backend services; the current backend is hosted in the United States. Apple and Google provide store services and device capabilities. Sentry handles optional crash reports as described above.

Resend delivers account emails, including password-reset links. It processes your email address, email contents and delivery information. We do not enable email open or click tracking.

Cloudflare hosts this website and forwards support email to the operator's Gmail inbox. These providers process technical connection information, and email providers process the messages you send. Information may be processed outside Hong Kong.

This site has no advertising analytics, tracking scripts or embedded media. The password-reset page sends your new password directly to Supabase over an encrypted connection. Reset credentials stay in page memory and are not saved in browser storage. Sending an email opens your own email app. Support messages are used to handle your request; please include only what is needed. There is currently no automatic deletion schedule for support correspondence.

UnbreakFast uses access controls, secure session storage and hashed purchase and deletion references. No system can guarantee absolute security.

Your choices

• Use Free timers and purchase Pro without an account.
• Choose whether to grant app-restriction permissions.
• Leave crash reporting off, or change it in Records.
• Manage subscriptions through your store.
• Request access, correction or deletion through support@unbreakfast.chaperon.dev.

Changes and questions

This page will be updated when the app's data practices change. The date at the top shows the latest revision. For help with your information, email support@unbreakfast.chaperon.dev.