Who can use Breezful
Breezful is for people aged 18 and over. We ask for a date of birth during email registration or at the start of onboarding after Google sign-in. A Google sign-in can create a limited account record before a date of birth is supplied, but product features stay unavailable until eligibility is confirmed. If an account has a date of birth showing its user is under 18, access to product features is restricted while account controls remain available.
Information we handle
Account information includes your name, email address, password verifier, date of birth, sign-in provider, and account and session records. We store an uppercase two-letter country code estimated from the IP-country header supplied by our hosting platform. It is an estimate and is not proof of residence.
Profile information can include body measurements, goals, nutrition preferences, allergies, training preferences, injuries, cycle-related preferences, and period logs. Activity information can include meal and workout plans, workout logs, favorites, meal-scan results, images you upload, and reports you submit to us. Some of this information may be considered health or sensitive information under local law.
We also handle technical information needed to operate and protect the service, such as session identifiers, browser and device details, IP-related security data, request timestamps, and your browser time zone. We do not ask for precise GPS location.
Your browser may keep a small questionnaire navigation hint and a meal-planner recovery copy in local storage so you can resume after an interruption. The planner copy is scoped to your account and date. The in-app account deletion control clears Breezful recovery copies from the browser where you delete the account; other browsers or devices may need their local site data cleared separately.
How we use information
We use account information to create and secure your account, confirm age eligibility, provide sign-in and recovery, and respond to account requests. We use profile and activity information to provide the meal, workout, nutrition, and cycle-related features you choose to use.
We use technical information to prevent abuse, rate-limit requests, troubleshoot failures, maintain security, and keep date-based features working in your local time zone. We do not sell personal information or use health information for advertising.
If you request a meal scan, we retain its image and scan results after account deletion to help train and improve our meal-scanning model. Images and results may still contain personal or health information. Account deletion removes the direct account association from retained scan records.
Service providers and sharing
Breezful uses service providers to run the product: Vercel for application hosting and request infrastructure; Neon for the PostgreSQL database; Cloudflare R2 for profile and meal-scan images; Resend to deliver account and security emails; Google for Google sign-in; and Hugging Face-hosted inference for meal-scan image classification. A meal-scan image is sent to the inference service when you request a scan.
These providers process information to provide services to Breezful. Their systems may process data in countries other than the one where you live. The exact processing regions and transfer terms depend on our provider accounts and deployment settings; we do not infer those details from your stored country code.
We may also disclose information if required by law, to protect users or the service, or as part of a business transfer. We do not currently use advertising or analytics trackers.
Legal grounds and sensitive information
Depending on your location and the purpose, we rely on the legal grounds available for providing a requested service, protecting and maintaining it, meeting legal duties, or obtaining consent where consent is required. Local law can give you additional rights or require additional conditions for particular information.
Nutrition, injury, symptom, and cycle information may receive special protection in some regions. The legal condition for processing those categories must be assessed for each launch region. The current product does not store a separate cycle-tracking consent record.
Your rights and controls
In Profile → Account, you can download a JSON export or delete your account. You can correct your date of birth and other editable profile information in the profile controls. The export contains account, profile, plans, logs, saved items, and scan results; it provides authenticated links for stored images.
Depending on where you live, you may also have rights to object, restrict processing, withdraw consent, or complain to a data protection authority. If you cannot access your account, use the Breezful support channel to request help.
Retention and deletion
We keep account and activity information while the account is active and as needed to provide the service, protect it, resolve disputes, or meet legal obligations. Unverified email accounts are eligible for cleanup after 72 hours under our current retention rule.
When you delete an account, Breezful deletes the account and its other associated database records and queues profile-image cleanup for retry if storage is temporarily unavailable. Meal-scan images and results are the exception: we retain them for model training and remove their direct account association. The in-app deletion flow also clears Breezful recovery data from that browser. Provider logs and backup copies may remain for the provider's configured retention period or where retention is required by law.
Security and policy changes
We use technical and organizational safeguards intended to protect information. No online service can guarantee absolute security. We may update this policy as Breezful changes; when a change is material, we will update the effective date and provide notice where appropriate.
Questions or requests can be sent through the Breezful support channel. Please do not email sensitive health details unless needed to resolve your request.
