Breadkin Privacy Policy

Breadkin is an app for keeping track of a sourdough starter: what you have fed, what you have baked, and where your starter came from. It is made by one person.

This policy explains what the app collects, why, and what happens to it.

The short version

We store your name, a handle, your starter, and what you do with it.
We never store your phone number or your contacts. We store a scrambled form of your number that cannot be turned back into it, and contacts that don't match anybody here are discarded within the request.
We do not store your email address at all.
No ads, no analytics services, no trackers. Nothing is sold or shared for advertising.
You can delete your account and everything in it from inside the app, at any time.

What we collect

When you sign in

Breadkin uses Sign in with Apple. Apple gives us:

A stable identifier for your Apple account. This is what ties you to your starter. It is specific to this app and can't be used to identify you elsewhere.
Your name, once, on the first authorisation — and only if you choose to share it. You can change it or clear it later in the app.
A one-time code, which we exchange with Apple for a token used for exactly one purpose: telling Apple to unlink the app if you delete your account.

Apple also sends your email address. We discard it. It is never written to our database.

What you create

Your starter — its name, when it was born, and who you linked it to.
Your activity — feedings, bakes and things you ate, with their timestamps and any note you wrote.
Photos you attach to a bake, a feeding or your starter.
Who you follow, and reactions you leave on other people's bakes.
Cosmetics you've earned for your starter's avatar.

Your phone number, if you give us one

Adding your phone number is optional and lets friends who already have it in their contacts find you.

We do not store your phone number. Your phone converts it to a standard format and scrambles it before it leaves the device, using a one-way function. Our server scrambles that result a second time with a secret it keeps separately from the database. The stored value can't be reversed into your number — not by us, and not by anybody who obtained a copy of our database.

You can remove your number at any time in the app.

Your contacts, if you let us check them

If you tap Connect my contacts, the app reads the phone numbers on your device, scrambles each one on the phone, and sends only the scrambled values.

Your contacts' actual numbers never leave your device.
We compare the scrambled values against people who have added their own number, and return only the matches.
Everything that doesn't match is discarded as soon as the request finishes. It is never written down, and we never build a record of people who aren't users.
We read only phone numbers. Not names, not email addresses, not photos.

Notifications

If you turn notifications on, we store a device token from Apple so we can send you a feeding reminder or tell you when someone you follow bakes. Turning notifications off in iOS Settings stops this.

What we don't collect

No advertising identifiers. No location. No analytics or crash-reporting services. No third-party trackers of any kind. We don't collect your email address, your contacts' names, or anything about people who aren't users.

Who else is involved

Breadkin runs on services that necessarily process some of this data:

Who	What for
Apple	Sign in with Apple, and delivering notifications
Render	Hosting the app's server and database
Cloudflare R2	Storing the photos you upload

These are infrastructure providers acting on our behalf. Nobody is paid for your data, and nobody is given it for advertising.

What other people can see

Breadkin is partly social, so some of what you create is visible to others:

Your name or handle, your starter's name, and where it sits in its family tree — including to people you haven't followed, since a family tree spans everyone in it.
Your bakes, to people who follow you.
Whether you follow somebody, on that person's profile.

Your phone number, your contacts, your feeding times and your email are never shown to anyone.

How long we keep it

Until you delete it. There is no automatic expiry.

Deleting your account

Home → Profile → Delete account, inside the app. It takes effect immediately and it is permanent. It removes your account, your starters, your feedings, bakes, photos, follows, reactions and cosmetics, and tells Apple to unlink the app from your Apple ID.

One thing survives, and you should know before you do it. If somebody linked their starter to yours, their starter stays — it's theirs. What it loses is the record of where it came from: it becomes a starter with no recorded parent. We can't keep that link without keeping your starter, which is the data you asked us to delete.

Children

Breadkin isn't directed at children and we don't knowingly collect anything from anyone under 13.

Security

We use HTTPS everywhere. Phone numbers are stored only in an irreversible, separately-keyed form. Photos are stored under keys scoped to your account. No system is perfect, and we won't claim otherwise.

Changes

If this policy changes we'll update the date at the top. Changes that affect what we collect will be described in the app before they take effect.