Privacy policy

Last updated 19 October 2026

Draft: have a lawyer review before public launch

Unbroken is a voice-first habit game. This page explains what Unbroken collects, who handles it for us, how long we keep it, and how you can export or delete it. Questions go to support@dontbreakit.app.

What we collect

Account: your email address, which we use to send you a sign-in code, and an account ID.
Profile and settings: your username, display name, avatar choice and profile photo (if you add one), your time zone, coach tone, age band (16–17 or 18+), reminder and recap times, and notification choices. We keep when you accepted the terms and gave AI consent.
Habits and logs: your habit names, targets and schedules, what you logged each day, the scores, runs, ratings and weekly reports built from that, and the excuse category and short quote Unbroken records when you skip a habit.
What you say or type to log: the text of your voice or typed log, and the result of reading it. See “How logging works” below.
Posts: the posts you share (the stats card, caption, photo, and whether it is for friends or public), and the comments and Nice reactions you leave. Emoji reactions you left before Nice replaced them are no longer shown, but stay stored until a block or deleting your account removes them.
Friends: your friend requests, your friends and the people you block.
Reports: the reports you send, with their reason and note.
Your device: a push token and the platform (iOS or Android), so notifications can reach your phone.
How the app runs: which share card you used, and for each AI request the model used, token counts and response time.

We do not collect your location or contacts, and we only get a photo when you add one to a post or as your profile photo. We do not sell your personal data and we do not use it for advertising.

How logging works

When you log by voice, your phone turns your speech into text. It does this on the phone when it can, and otherwise through Apple’s or Google’s speech service, as part of your phone’s own speech recognition. Audio is never stored or uploaded by Unbroken. Only the text reaches Unbroken.

Before your first log, Unbroken asks for your consent to use AI. If you allow it, we send Anthropic’s Claude your transcript text, your habit names and targets, today’s and yesterday’s values, your local time, your weekly stats and the challenges you say or type. Claude reads your log, replies in your coach’s voice, and writes your weekly reports and a one-line note when a run ends. Coach output is always labelled “AI”.

If what you say suggests you are going through something hard, such as bereavement or a crisis, the AI flags it (distress) so the coach can answer gently. That flag is used for that one reply and is never stored.

You can withdraw AI consent in Settings. Without it the mic and the type-it box are hidden, tap logging still works, and your weekly report is stats only.

Posts and photos

You can share a post with your friends: a stats card Unbroken builds from your logs, with an optional caption and one photo. Nothing is posted until you tap Post.

Photos: you can add a photo to a post from your camera or library. The app shrinks it and saves it as a new JPEG, which leaves out location and camera details. We store it privately and show it only to people who can see the post, through links that expire after an hour. Your profile photo is redrawn too: the app redraws every photo, which drops its location data.
The automated photo check: before a post’s photo is posted, we send it to Anthropic’s Claude, which checks it automatically for nudity, sexual content, graphic violence, hate symbols and other people’s private documents or screens. A rejected photo is not posted and is never stored, and we do not keep the result of the check. The app tells you about this the first time you add a photo to a post. It is separate from AI consent for the coach, so it applies even if you have turned the coach’s AI off. Your profile photo is not sent for this check; if one is reported, we review it and can remove it.
Captions and comments: an automatic word filter on our servers checks them before they are posted.

What friends and other people see

Anyone signed in to Unbroken: can find you by username and see your avatar, username and display name, and the posts you mark Public. Public posts appear on your profile only, never in a feed for strangers.
Your friends also see: your posts in their feed; your public habits and their current runs on your profile; and your week’s Perfect days, whether you finished everything today, your days in a row and best run (from your public habits), and your Perfect-day count. A Perfect day counts every habit, private ones included, but never shows which.
Your profile photo, if you add one: anyone who can see your profile in the app sees it, except that if you are under 18 only your friends do. It never appears on web links.
Private and sensitive habits: never appear in posts or on your profile. A day card counts only your public, non-sensitive habits.
Comments and Nice reactions: anyone who can see a post sees the comments and Nice reactions on it, and who left them.
Blocking: when you block someone, you are both hidden from each other everywhere in Unbroken, any friendship between you ends, and the comments and Nice reactions either of you left on the other’s posts are deleted. Unblocking does not bring them back.
Challenges: when someone sets up a challenge with you, they see how much of the last 4 weeks you did of a public habit that matches it.

Reports and moderation

You can report any profile, post or comment, and block anyone, from the ⋯ menu. A report holds what you reported, a reason and an optional note. The person you report is not told who reported them.

A post or comment that two different people report is hidden straight away until we look at it. We review every report and act on it within 24 hours: we remove content that breaks our terms and ban the accounts behind it.

How long we keep it

Transcripts and parse results: deleted after 30 days. The log entries made from them stay.
Reports: kept as a record of our moderation. If you delete your account, the reports you made and the reports about you stay, but are no longer linked to your account.
Emoji reactions from before Nice: no longer shown, and kept until the post is deleted, or a block or deleting your account removes them.
Your profile photo: kept until you remove it. Removing your photo, replacing it or deleting your account deletes it from storage.
Everything else: kept until you delete it or delete your account.

Who processes your data

These companies handle data for us. We sign data processing agreements with each of them before launch, and where data leaves the UK or EEA we put Standard Contractual Clauses in place.

Supabase: Hosts our database, sign-in, server functions, and post and profile photos. Holds everything in your account.
Anthropic: Runs Claude, which reads your logs, writes coach replies, weekly reports and the notes on ended runs, and checks every post photo before it is posted. For the coach it receives what is listed under “How logging works”, and only after you consent. For the photo check it receives only the photo.
Expo: Delivers push notifications. Receives your push token and the notification text.
Apple and Google push: Apple Push Notification service and Google Firebase Cloud Messaging carry notifications to your phone. They receive your push token and the notification text.
Cloudflare: Hosts this website. Sees the IP address and request details of anyone who visits it.
Our email provider: Sends your sign-in code, which means it receives your email address and the message. It also emails us each new report, with what was reported, the reason and the note.

Consumer Health Data

You decide what to track. Habits such as exercise, sleep, eating, medication, sobriety or mood can reveal information about your health, and laws such as Washington’s My Health My Data Act and Nevada’s SB 370 call this consumer health data.

What and why: only what you enter, and only to run Unbroken: tracking, runs, coach replies and weekly reports.
Who sees it: our processors above, and the people who can see your posts and profile (see “What friends and other people see”). Anthropic receives it only for AI features after your consent, and the photos you post, after the photo notice, for the automated photo check. Habits marked sensitive are always private and left out of sharing, except that they count toward the Perfect days your friends see, never by name.
No sale, no ads: we do not sell consumer health data, use it for advertising, or build location fences around it.
Your choices: withdraw AI consent in Settings, export your data, or delete your account (below). We act on a request within 30 days.

Export and delete

Export: in the app, go to Settings and choose Export my data. You get your data as a JSON file. Until you have the app, email us and we will answer within 30 days.
Delete in the app: Settings, then Delete account.
Delete without the app: use the account deletion page. We email you a code to confirm it is you.

Deleting your account permanently removes your profile, settings, habits, logs, runs, weekly reports and push tokens, your posts and their photos, the comments and Nice reactions you left on anyone’s posts, and your friendships and blocks. It cannot be undone.

Your rights

Depending on where you live, you can ask to see, correct, export or delete your data, object to how we use it, and withdraw consent you gave. In the EEA and UK you can also complain to your data protection authority. Write to support@dontbreakit.app.

Who can use Unbroken

You must be at least 16. The app checks this at sign-up: it asks for your birth year, stops anyone under 16 and does not keep the year. We keep only your age band.

Security

Data travels over HTTPS. The database only lets you read your own data, plus the posts, profiles and habits the sharing rules above allow. Our API keys stay on our servers, never in the app.

Changes

If we change this policy in a way that matters, we will tell you in the app before it applies.