Privacy Policy

The short version

• Your check-ins, journal entries and Apple Health data are yours. We never sell them.
• We never use health or wellness information for advertising.
• There's no Brevé account. Your entries stay on your iPhone and, if you turn on sync, in your own iCloud, encrypted so that only you can read them.
• Apple Health access is optional, and you choose exactly what to share.
• Journal insights are worked out on your iPhone. They never leave it.
• You can see, correct, export or delete your information at any time.
• Questions go to a real person at privacy@mybreve.com.

1. Who we are

Brevé (“Brevé”, “we”, “us”) makes the Brevé app for iPhone and runs mybreve.com. We're based in Ontario, Canada and are responsible for the personal information described in this policy. The legal entity is Brevé.

This policy explains what we collect, why, and the choices you have. It's written to meet Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for people in Quebec, the Act respecting the protection of personal information in the private sector.

2. What we collect, and why

We collect only what we need to run Brevé. Each item below says where it comes from and what it's used for.

We don't use advertising identifiers, and the app doesn't track you across other companies' apps or websites.

3. Health and wellness information

Check-ins, journal entries and Apple Health data can reveal how you're feeling, how you sleep and how you're doing. We treat all of it as sensitive information, which means:

• We ask for your express consent before collecting it, and you can withdraw that consent at any time.
• We use it only to provide Brevé's features to you.
• We never sell it, rent it, or use it for advertising or marketing.
• We never share Apple Health data with third parties, and we don't store it in iCloud.

Apple Health. Connecting Apple Health is optional. If you connect it, Brevé can read your sleep data and save the mindful minutes from your sessions. iOS lets you choose each type of data separately, and you can change your mind any time: open the Health app, tap your profile picture, then Apps under Privacy, then Brevé.

Journal insights. Once a month, your reflection in the Journal can include one insight summing up patterns in that month's entries, for example that you tend to check in lighter on days you breathe in the morning, or how sleep and mood move together. These insights are calculated on your iPhone from your own entries, using Apple's on-device models. They aren't sent to us or anyone else, they describe patterns rather than causes, and they aren't a diagnosis. You can turn insights off in Settings. If your check-ins stay low for a while, the Journal may show a note suggesting you talk to your healthcare provider. That note is also generated on your iPhone and isn't shared with anyone.

Not medical care. Brevé supports everyday wellbeing. It isn't a medical service, and the information you put into it isn't a medical record. If you're struggling, contact your healthcare provider.

4. How we use information

• To provide the app: play sessions in the voice you choose, run your Rituals, save your check-ins and journal, and show your history, trends and monthly reflection.
• To send reminders you've turned on.
• To confirm your subscription and give you access to what you've paid for.
• To find and fix crashes and bugs.
• To reply when you contact us.
• To meet legal obligations, such as keeping records of a security incident.

If we ever want to use your information for a new purpose, we'll ask you first.

To confirm: We don't use personal information for advertising. If that changes, this policy will change first, ads will never use health or wellness information, and we'll ask for your consent.

5. Who we share it with

We don't sell personal information. We share it only in these cases:

• Apple, which stores your synced entries in your iCloud if you turn sync on, delivers notifications, processes App Store purchases and, if you allow it, shares crash reports with us. Apple's own privacy policy covers what Apple does.
• Cloudflare, which hosts mybreve.com and delivers session audio to the app. To do that, it receives your IP address and basic device and request details, the same as any website or download. It doesn't receive your check-ins, journal or Apple Health data, and we don't use its logs to identify you.
• Service providers that help us run Brevé, such as hosting or crash reporting. They may use your information only to do that work for us, under written contracts that require them to protect it. Support emails are answered by our own support team. None of our service providers can see your check-ins or journal.
• When the law requires it, for example a valid court order. We'll tell you unless we're legally prevented from doing so.
• If Brevé is sold or merged, your information would move to the new owner under this policy, and we'd tell you before that happens.

6. Where it's stored

On your iPhone. Your check-ins, journal entries, linked notes, Rituals and insights are stored on your iPhone. Brevé has no servers that hold them and no account system, so we can't see them.

iCloud sync (optional). If you turn on sync in Settings, these entries are also stored in your private iCloud so they come back on a new iPhone. They're encrypted on your device before upload, so neither we nor Apple can read them. They count against your iCloud storage, and you can turn sync off at any time. Apple Health data is never synced or stored in iCloud.

Apple, Cloudflare, and the email service that delivers messages to our support team, may process information outside Canada, mostly in the United States. When that happens, the information is protected by contract, but it may be accessible to courts and authorities in that country under its laws. For people in Quebec, we assess the privacy risks before sending personal information outside the province.

7. How long we keep it

We keep personal information only as long as we need it for the purposes above, then delete or anonymize it.

• Check-ins, journal entries, linked notes and Rituals: until you delete them, or delete the app. If sync is on, deleting them in the app also deletes them from your iCloud.
• Journal insights and monthly reflections: recalculated on your iPhone from your entries, so they're removed when the entries are.
• Downloads: until you remove them in Settings or delete the app.
• Connection logs from Cloudflare: up to 30 days.
• Crash reports: up to 90 days.
• Emails you send us: up to 2 years after the conversation ends.

8. Your choices and rights

You can:

• See the personal information we hold about you, and how it's been used and shared.
• Correct anything that's inaccurate or incomplete.
• Export your check-ins, journal and linked session notes in a common format.
• Delete your information in Settings › Your data.
• Withdraw consent, for example by disconnecting Apple Health or turning off notifications. Some features may stop working.

Because your entries live only on your iPhone and in your own iCloud, you can export or delete them yourself at any time, and we can't do it for you. For anything we do hold, such as emails you've sent us, email privacy@mybreve.com. We'll reply within 30 days and won't charge you. We may need to confirm it's you first.

9. Security

Journal lock. You can lock the Journal with Face ID or your passcode in Settings. When it's on, the Journal is blurred in the app switcher and reminders never show what you wrote. Face ID is handled by iOS; Brevé never receives your face data or passcode.

We protect personal information with safeguards suited to how sensitive it is, including encryption in transit and at rest, and access limited to people who need it. No system is perfectly secure. If a breach creates a real risk of significant harm to you, we'll tell you and the Privacy Commissioner of Canada as soon as we can, and for people in Quebec, the Commission d'accès à l'information.

10. Children

Brevé is for people aged 16 and over. We don't knowingly collect personal information from anyone younger. If you think a child has given us information, email us and we'll delete it.

11. Changes to this policy

When we update this policy, we'll change the date at the top. If a change affects how we use information you've already given us, we'll tell you in the app before it takes effect and ask for your consent where the law requires it.

12. Contact and complaints

Our Data Protection Officer leads our privacy team and is responsible for protecting personal information at Brevé. You can reach them at privacy@mybreve.com.

If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada, or in Quebec, the Commission d'accès à l'information.