Privacy Policy

1. Introduction

BetterBreaks is a break-reminder application for macOS and Windows, developed and operated by NYRA Tech Corporation (“NYRA Tech Corporation,” “we,” “us,” or “our”). This Privacy Policy explains how we collect, use, disclose and safeguard your information when you use the BetterBreaks desktop application, betterbreaks.app and related services (collectively, the “Services”). For the purposes of the General Data Protection Regulation, we are the data controller.

We are committed to protecting your privacy. We collect the minimum information the Services need in order to work. We do not sell your personal information and we do not disclose it to third parties for their own purposes. You may request deletion of your data at any time under Section 6.

By using our Services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: your email address when you create an account. Sign in with Google provides your name, email address and profile picture. Sign in with Apple provides your email address and, if you choose to share it, your name; Apple may provide a private relay address in place of your email address.
• Sign-In Codes: if you sign in with an emailed code, the code is stored in irreversible form only and expires ten minutes after it is issued.
• Redemption Codes: any code you redeem, and the account it was redeemed on.
• Contact Information: your email address and the contents of your message when you contact support.
• Payment Information: handled by Paddle.com Market Limited, our merchant of record. We do not receive or store card details.

2.2 Information Collected Automatically

• Session Records: when you start a timer session, the application reports the event to us, linked to your account, so that free-plan limits can be applied.
• Authentication Cookie: one cookie maintains your signed-in state for up to 90 days. It is strictly necessary for the Services. We set no other cookies.
• Sign-In Attempts: a short-lived count of recent attempts for each email address and IP address, to prevent credential guessing.
• Log Data: our servers receive your IP address and the technical details of each request. We keep no server logs of our own. Cloudflare, our hosting provider, retains request records briefly under its own policy.
• Crash and Diagnostics Data: if the application fails, it sends an error description, the application version and your operating system version. These reports contain no email address, account identifier or file names. You can disable them in the application under Settings, Diagnostics.

2.3 Information From Third Parties

• Google LLC: your name, email address and profile picture, if you use Sign in with Google. We do not receive your password. Google's privacy policy also applies.
• Apple Inc.: your email address or private relay address, and your name if you share it, if you use Sign in with Apple.
• Paddle.com: confirmation that a payment was made, the plan purchased, the account and email address used at checkout, and your country. Paddle's privacy notice explains how Paddle handles your data.

2.4 What We Do Not Collect

Your break settings and break history are stored on your computer only. They are not transmitted to us and do not sync between computers. We collect no location data and do not access your camera or microphone. We use no analytics and no advertising technologies, and we do not track you across websites or applications.

3. How We Use Your Information

We use your information to:

• create and maintain your account and authenticate you;
• operate the Services, including free-plan limits, Pro and Forever entitlements and redemption codes;
• process purchases and issue receipts through Paddle;
• detect, investigate and prevent fraudulent, abusive or unauthorized activity;
• diagnose and fix faults in the application;
• respond to your support requests;
• send service messages about your account, including sign-in codes, receipts, renewal notices and material changes to the Services or these policies; and
• comply with legal, tax and accounting obligations.

We keep no marketing list. We do not use your information for advertising or profiling, and we make no automated decisions producing legal or similarly significant effects.

4. Sharing Your Information

We share information only with the service providers below, each of which receives only the data its function requires and is bound by contract to protect it.

• Cloudflare, Inc. (United States): hosting of the website, the sign-in service, account records, error reports and application downloads.
• Google LLC (United States): Sign in with Google, and delivery of sign-in code email.
• Apple Inc. (United States): Sign in with Apple.
• Paddle.com Market Limited (United Kingdom): payment processing, sales tax and VAT, receipts and refunds.

We may also disclose information where the law requires it, or where it is necessary to protect the rights, property or safety of our users, the public or us. In connection with a merger, acquisition or sale of assets, information may transfer as part of that transaction; this policy will continue to apply to it and we will give notice before any change.

We do not sell your personal information to third parties.

5. Data Retention

• Account records: retained while your account is active. A Free account not signed in to for 24 months is deleted 30 days after we notify you, unless you sign in. Accounts with active Pro or Forever are retained.
• Authentication cookie: 90 days.
• Sign-in codes and attempt counts: deleted automatically within 24 hours.
• Error reports: 30 days.
• Payment records: up to seven years, as tax and accounting law requires.
• Support correspondence: up to two years after your last message.

Following a deletion request we remove your information within 30 days, other than records the law requires us to keep.

6. Your Rights and Choices

• Access, Correction and Portability: request a copy of your data, its correction, or its delivery in a portable format.
• Deletion: request deletion of your account and the information held with it.
• Diagnostics: disable error reporting in the application under Settings, Diagnostics.
• Third-Party Access: revoke access in your Google account or your Apple account.
• Do Not Track: no industry standard exists for responding to “Do Not Track” or Global Privacy Control signals. We do not track you, so our practices do not change in response to them.

To exercise any right, write to support@betterbreaks.app from the address on your account. We may need to verify your identity. We respond within 30 days and charge no fee. You may use an authorized agent on written proof of authorization. If you live outside the regions named in Sections 12 and 13, you have the rights your local law gives you.

7. Data Security

We apply technical and organizational measures appropriate to the risk, including encryption of all data in transit, restriction of access to account data to personnel who require it, short expiry on sign-in codes, and blocking of repeated failed sign-in attempts. No method of transmission or storage is completely secure and we cannot guarantee absolute security.

8. Children's Privacy

The Services are not directed to children under 13. You must be at least 13 to create an account, or older where local law sets a higher age for consent to data processing. We do not knowingly collect information from children below that age, and we delete it if we learn that we hold it.

Schools that wish students to use BetterBreaks must contact us first. We agree separate written terms covering student data before any student accounts are created.

9. International Data Transfers

We are established in the United States and your information may be processed outside your country of residence. For transfers from the European Economic Area, the United Kingdom or Switzerland, we rely on the EU-U.S. Data Privacy Framework where the recipient is certified, or on Standard Contractual Clauses approved by the European Commission, together with the UK Addendum where applicable. A copy of the relevant safeguards is available on request.

10. Changes to This Policy

We may update this policy from time to time. We will post the updated policy at betterbreaks.app/privacy and revise the “Last Updated” date. Where a change is material, we notify account holders by email before it takes effect.

11. Data Breach Notification

In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify affected individuals and, where the law requires it, the competent authorities, within the periods applicable law sets. Under the GDPR that is 72 hours where feasible; under United States state breach notification laws it is without undue delay. Notification will describe the nature of the breach, the categories of data affected, the likely consequences and the measures taken or proposed.

12. Rights of EU, EEA and UK Users (GDPR)

If you are located in the European Union, the European Economic Area, the United Kingdom or Switzerland, we process your personal data on the following legal bases: (a) performance of our contract with you, for account creation, sign-in, entitlements and purchases; (b) our legitimate interests, for security, fraud prevention, fault diagnosis and customer support; (c) your consent, where you have given it; and (d) compliance with legal obligations, for tax and accounting records.

Subject to the conditions and limitations of the GDPR, you have the right to access your personal data, to rectification, to erasure, to restriction of processing, to data portability, to object to processing based on our legitimate interests or to direct marketing, and to withdraw consent at any time without affecting processing already carried out. You may lodge a complaint with your local Data Protection Authority; in the United Kingdom this is the Information Commissioner's Office. We ask that you raise the matter with us first.

To exercise any of these rights, contact support@betterbreaks.app. We respond within 30 days, extendable by two further months for complex requests, and we may need to verify your identity.

13. Rights of California and Other U.S. State Residents (CCPA / CPRA)

If you are a resident of California or of another state with a comprehensive privacy law, you have the following rights, subject to statutory conditions and limitations:

• Know and Access: the categories and specific items of personal information we have collected, their sources, the purpose of collection, and the categories of third parties to whom we disclose them.
• Delete: deletion of personal information we have collected, subject to statutory exceptions.
• Correct: correction of inaccurate personal information we maintain about you.
• Non-Discrimination: we will not treat you differently for exercising these rights.

We do not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising, and we do not collect sensitive personal information. If that changes, we will provide a “Do Not Sell or Share My Personal Information” link and honor opt-out requests.

Submit a verifiable consumer request to support@betterbreaks.app. We acknowledge receipt within 10 business days and respond within 45 days, extendable by a further 45 days with notice. You may appeal a decision by replying to it, and we will respond within 45 days. An authorized agent may act for you on written proof of authorization and verification of your identity.

14. Contact Us

BetterBreaks
NYRA Tech Corporation, a Texas corporation
Email: support@betterbreaks.app
Website: https://betterbreaks.app

By using the Services you acknowledge that you have read and understood this Privacy Policy.