Last updated: May 2026
BreakFreeStudio operates both a desktop application ("App") and a web platform at breakfreestudio.ai ("Platform"). This policy covers both.
This policy applies to all users worldwide, including users in the European Union (where GDPR applies) and India (where the Digital Personal Data Protection Act 2023 applies).
We use consistent persona names throughout this policy to make it clear whose data is being described:
When you opt in to analytics in the App, Break Free Studio, Inc. collects:
| Data | Purpose | Lawful basis (GDPR) |
| Anonymous device ID (random hash, not tied to your name or email) | Distinguish unique installs | Consent |
| App version, OS platform, CPU architecture | Debug platform-specific issues | Consent |
| Feature usage events (e.g. "generate tab opened", "stitch completed") | Understand which features matter most | Consent |
| Crash reports and stack traces with file paths anonymised | Fix bugs faster | Consent |
Prompts that creators voluntarily upload to the Platform as part of a Production Blueprint are an entirely separate matter. Those prompts are the product being sold — creators upload them deliberately, with full knowledge and consent, to share with buyers. They are stored on our servers as described in the "Creator Blueprint Content" section below. This does not conflict with the above: we never silently capture what you type in the App; we only store content you explicitly choose to publish.
When you create an account on the Platform (to like Blueprints, apply as a creator, or sign in to your creator dashboard), we collect:
| Data | Purpose | Lawful basis (GDPR) |
| Email address | Authentication; transactional emails (e.g. application updates) | Contract |
| Display name / username | Shown on your public creator profile | Contract |
| Password (hashed) | Authentication — never stored in plaintext | Contract |
| Data | Purpose | Lawful basis (GDPR) |
| Blueprint and creator likes | Display like counts; personalise your liked content | Legitimate interest |
| Blueprint purchase records (blueprint ID, purchase date, purchase price) | Grant permanent Blueprint access; deliver artist session booking links | Contract |
| Blueprint view history (anonymous view count increment) | Help Creators understand audience reach | Legitimate interest |
| Data | Purpose | Lawful basis (GDPR) |
| Creator application details (channel URL, bio, reason for applying) | Review and approve creator applications | Legitimate interest |
| Creator profile (display name, username, bio, creative statement, social links, avatar) | Display on your public creator profile page | Contract |
| Uploaded Blueprint content (prompts, reference images, output images, video clips) | Store and deliver your published Blueprints to Buyers | Contract |
| Blueprint metadata (title, description, price, status, publish/update timestamps) | List and sell your Blueprints on the Platform | Contract |
| Creator earnings records (sales, amounts, payout status) | Track and process creator payouts | Contract |
If you are an approved creator and publish Production Blueprints, the images and videos you upload as Blueprint content are stored in Cloudflare R2 cloud storage in two forms:
No uploaded content is used for training AI models. Files are retained for as long as your creator account and the associated Blueprint remain active. Deleted assets are removed from storage promptly.
| Data | Retention period |
| App analytics (anonymous device ID, events) | Per PostHog and Sentry default retention settings (typically 1–2 years); no personal data attached |
| Platform account (email, display name) | Until you request deletion or your account is closed |
| Likes | Until you remove them or your account is deleted |
| Creator application data | Until the application is decided; retained for 12 months thereafter for audit purposes |
| Creator profile data | Until the creator account is closed |
| Creator Blueprint files (R2) | Until the Blueprint is deleted and the creator account is closed |
| Subscription records | Retained for 7 years for financial and tax compliance, even after cancellation |
| Blueprint purchase records | Retained permanently to honour permanent access entitlements |
| Subscriber sequence unlock selections | Retained while your account exists; deleted on account closure |
| Stripe customer ID | Retained while your account exists to enable billing management; deleted on account closure |
Break Free Studio, Inc. is based in the United States. Your data is processed by our service providers — Supabase and Cloudflare — who may store and process data in the United States or other countries.
For users in the European Union: transfers to these providers are made under their respective Standard Contractual Clauses (SCCs) approved by the European Commission, which provide equivalent data protection safeguards. Both Supabase and Cloudflare maintain GDPR-compliant infrastructure and offer EU data residency options.
For users in India: transfers outside India are permitted under the DPDP Act 2023 to countries not notified as restricted by the Indian Government. The United States and the EU are not currently on any such restricted list.
| Service | Purpose | Privacy policy |
| Supabase | Account authentication and user data | https://supabase.com/privacy |
| Cloudflare | Platform hosting, database (D1), and file storage (R2) | https://www.cloudflare.com/privacypolicy/ |
| Stripe, Inc. | Payment processing for subscriptions and per-blueprint purchases | https://stripe.com/privacy |
| Resend | Transactional email delivery (receipts, booking links, notifications) | https://resend.com/privacy |
| Sentry | App crash reporting | https://sentry.io/privacy/ |
| PostHog | App usage analytics (opt-in only) | https://posthog.com/privacy |
All services are configured to receive only the data described above.
Depending on where you are located, you may have the following rights regarding your personal data. We will respond to all requests within 30 days.
| Right | Description |
| Access | Request a copy of the personal data we hold about you |
| Correction | Request that inaccurate or incomplete data be corrected |
| Erasure | Request deletion of your personal data ("right to be forgotten") |
| Portability | Request your account data in a portable, machine-readable format |
| Restriction | Request that we limit how we use your data while a dispute is resolved |
| Objection | Object to processing based on legitimate interest |
| Withdraw consent | Withdraw analytics consent at any time via Settings → Privacy & Analytics (App) |
These rights apply to EU users under GDPR and to Indian users under the DPDP Act 2023. Users in other regions may have similar rights under their local laws and we will honour reasonable requests regardless of location.
To exercise any right, email: support@breakfreestudio.ai
Please include your account email address and a description of your request. We may ask for identity verification before acting on sensitive requests (e.g. data deletion or portability).
The App and Platform are intended for users 13 years of age or older. Users aged 13–17 should have parental or guardian consent where required by their local law (e.g. GDPR requires parental consent for users under 16 in most EU countries).
We do not knowingly collect personal data from children under 13. If you believe a user under 13 has created an account, please contact support@breakfreestudio.ai and we will delete the account and associated data promptly.
We take reasonable technical and organisational measures to protect your data, including encrypted storage, access controls, and HTTPS-only data transmission. However, no system is completely secure and we cannot guarantee absolute security.
In the event of a data breach that affects your personal data, we will notify affected users and, where required by applicable law (including GDPR's 72-hour supervisory authority notification requirement), the relevant data protection authority.
If we make material changes to this policy — particularly changes that affect what data we collect or how we use it — we will update the "Last updated" date above and, where required, seek fresh consent or notify you by email.
For privacy questions, data requests, or complaints:
Break Free Studio, Inc.
support@breakfreestudio.ai
If you are an EU resident and are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority (e.g. the ICO in the UK, CNIL in France, or the relevant supervisory authority in your EU member state).
If you are an Indian resident and are unsatisfied, you may contact the Data Protection Board of India once it is operational.