Privacy Policy

1. Introduction

BetterBreaks is a break-reminder application for macOS and Windows, developed and operated by NYRA Tech Corporation (“NYRA Tech Corporation,” “we,” “us,” or “our”). This Privacy Policy explains how we collect, use, disclose and safeguard your information when you use the BetterBreaks desktop application, betterbreaks.app and related services (collectively, the “Services”). Under the General Data Protection Regulation (GDPR), the European privacy law, we are the data controller. This means we decide how your data is used, and we are responsible for it.

We collect only the information the Services need to work. We do not sell your personal information and we do not disclose it to third parties for their own purposes. You may request deletion of your data at any time under Section 6.

By using our Services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: your email address when you create an account. Sign in with Google provides your name, email address and profile picture. Sign in with Apple provides your email address and, if you choose to share it, your name; Apple may provide a private relay address in place of your email address.
• Sign-In Codes: if you sign in with an emailed code, the code is stored in irreversible form only and expires ten minutes after it is issued.
• Redemption Codes: any code you redeem, and the account it was redeemed on.
• Contact Information: your email address and the contents of your message when you contact support.
• Payment Information: handled by Paddle.com Market Limited, our merchant of record. Paddle sells the app for us and takes your payment. We do not receive or store card details.

2.2 Information Collected Automatically

• Session Records: when you start a timer session, the application reports the event to us, linked to your account, so that free-plan limits can be applied.
• Authentication Cookie: one cookie maintains your signed-in state for up to 90 days. It is strictly necessary for the Services. We set no other cookies.
• Sign-In Attempts: a short-lived count of recent attempts for each email address and IP address, to prevent credential guessing.
• Log Data: our servers receive your IP address and the technical details of each request. We keep no server logs of our own. Cloudflare, our hosting provider, retains request records briefly under its own policy.
• Crash and Diagnostics Data: if the application fails, it sends an error description, the application version and your operating system version. These reports contain no email address, account identifier or file names. You can disable them in the application under Settings, Diagnostics.

2.3 Information From Third Parties

• Google LLC: your name, email address and profile picture, if you use Sign in with Google. We do not receive your password. Google's privacy policy also applies.
• Apple Inc.: your email address or private relay address, and your name if you share it, if you use Sign in with Apple.
• Paddle.com: confirmation that a payment was made, the plan purchased, the account and email address used at checkout, and your country. Paddle's privacy notice explains how Paddle handles your data.

2.4 What We Do Not Collect

Your break settings and break history are stored on your computer only. They are not transmitted to us and do not sync between computers. We collect no location data and do not access your camera or microphone. We use Cloudflare Web Analytics to count visits to our website. It uses no cookies. We use no advertising technologies, and we do not track you across websites or applications.

3. How We Use Your Information

We use your information to:

• create and maintain your account and authenticate you;
• operate the Services, including free-plan limits, Pro and Forever entitlements and redemption codes;
• process purchases and issue receipts through Paddle;
• detect, investigate and prevent fraudulent, abusive or unauthorized activity;
• diagnose and fix faults in the application;
• respond to your support requests;
• send service messages about your account, including sign-in codes, receipts, renewal notices and material changes to the Services or these policies; and
• comply with legal, tax and accounting obligations.

We keep no marketing list. We do not use your information for advertising or profiling, and we make no automated decisions producing legal or similarly significant effects.

4. Sharing Your Information

We share information only with the service providers below, each of which receives only the data its function requires and is bound by contract to protect it.

• Cloudflare, Inc. (United States): hosting of the website, website analytics, the sign-in service, account records, error reports and application downloads.
• Google LLC (United States): Sign in with Google, and delivery of sign-in code email.
• Apple Inc. (United States): Sign in with Apple.
• Paddle.com Market Limited (United Kingdom): payment processing, sales tax and VAT, receipts and refunds.

We may also disclose information where the law requires it, or where it is necessary to protect the rights, property or safety of our users, the public or us. If we merge with another company, are bought, or sell assets, your information may move as part of that deal. This policy will still apply to it. We will tell you before anything changes.

We do not sell your personal information to third parties.

5. Data Retention

• Account records: retained while your account is active. A Free account not signed in to for 24 months is deleted 30 days after we notify you, unless you sign in. Accounts with active Pro or Forever are retained.
• Authentication cookie: 90 days.
• Sign-in codes and attempt counts: deleted automatically within 24 hours.
• Error reports: 30 days.
• Payment records: up to seven years, as tax and accounting law requires.
• Support correspondence: up to two years after your last message.

Following a deletion request we remove your information within 30 days, other than records the law requires us to keep.

6. Your Rights and Choices

• Access, Correction and Portability: request a copy of your data, its correction, or its delivery in a portable format.
• Deletion: request deletion of your account and the information held with it.
• Diagnostics: disable error reporting in the application under Settings, Diagnostics.
• Third-Party Access: revoke access in your Google account or your Apple account.
• Do Not Track: no industry standard exists for responding to “Do Not Track” or Global Privacy Control signals. We do not track you, so our practices do not change in response to them.

To exercise any right, write to support@betterbreaks.app from the address on your account. We may need to verify your identity. We respond within 30 days and charge no fee. You may use an authorized agent on written proof of authorization. If you live outside the regions named in Sections 12 and 13, you have the rights your local law gives you.

7. Data Security

We protect your data with technical and organizational measures that fit the risk. We encrypt all data in transit. Only staff who need account data can see it. Sign-in codes expire after ten minutes, and we block repeated failed sign-ins. No method of transmission or storage is completely secure and we cannot guarantee absolute security.

8. Children's Privacy

The Services are not directed to children under 13. You must be at least 13 to create an account, or older where local law sets a higher age for consent to data processing. We do not knowingly collect information from children below that age, and we delete it if we learn that we hold it.

Schools that wish students to use BetterBreaks must contact us first. We agree separate written terms covering student data before any student accounts are created.

9. International Data Transfers

We are established in the United States and your information may be processed outside your country of residence. Some transfers come from the European Economic Area, the United Kingdom or Switzerland. For these, we use the EU-U.S. Data Privacy Framework when the recipient is certified. Otherwise we use Standard Contractual Clauses approved by the European Commission, with the UK Addendum where it applies. A copy of the relevant safeguards is available on request.

10. Changes to This Policy

We may update this policy from time to time. We will post the updated policy at betterbreaks.app/privacy and revise the “Last Updated” date. Where a change is material, we notify account holders by email before it takes effect.

11. Data Breach Notification

If a personal data breach is likely to put your rights and freedoms at risk, we will tell the people affected. Where the law requires it, we will also tell the authorities. We will do this within the time the law sets. Under the GDPR that is 72 hours where feasible; under United States state breach notification laws it is without undue delay. Notification will describe the nature of the breach, the categories of data affected, the likely consequences and the measures taken or proposed.

12. Rights of EU, EEA and UK Users (GDPR)

If you are located in the European Union, the European Economic Area, the United Kingdom or Switzerland, we use your personal data on these legal bases. (a) To perform our contract with you, for your account, sign-in, plan and purchases. (b) Our legitimate interests, for security, fraud prevention, fixing faults and customer support. (c) Your consent, where you have given it. (d) To meet legal duties, for tax and accounting records.

Subject to the conditions and limitations of the GDPR, you have the right to see your personal data and to correct it (rectification). You can ask us to delete it (erasure) or to limit how we use it (restriction of processing). You can get a copy to take elsewhere (data portability). You can object to our use of it based on our legitimate interests or for direct marketing. You can also withdraw your consent at any time. This does not change what we did with your data before. You may lodge a complaint with your local Data Protection Authority; in the United Kingdom this is the Information Commissioner's Office. We ask that you raise the matter with us first.

To exercise any of these rights, contact support@betterbreaks.app. We respond within 30 days, extendable by two further months for complex requests, and we may need to verify your identity.

13. Rights of California and Other U.S. State Residents (CCPA / CPRA)

If you are a resident of California or of another state with a comprehensive privacy law, you have the following rights, subject to statutory conditions and limitations:

• Know and Access: the categories and specific items of personal information we have collected, their sources, the purpose of collection, and the categories of third parties to whom we disclose them.
• Delete: deletion of personal information we have collected, subject to statutory exceptions.
• Correct: correction of inaccurate personal information we maintain about you.
• Non-Discrimination: we will not treat you differently for exercising these rights.

We do not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising, and we do not collect sensitive personal information. If that changes, we will provide a “Do Not Sell or Share My Personal Information” link and honor opt-out requests.

Submit a verifiable consumer request to support@betterbreaks.app. We acknowledge receipt within 10 business days and respond within 45 days, extendable by a further 45 days with notice. You may appeal a decision by replying to it, and we will respond within 45 days. An authorized agent may act for you on written proof of authorization and verification of your identity.

14. Contact Us

BetterBreaks
NYRA Tech Corporation, a Texas corporation
Email: support@betterbreaks.app
Website: https://betterbreaks.app

By using the Services you acknowledge that you have read and understood this Privacy Policy.