Privacy notice
Breemaia is in an early beta. This notice explains what the website and the app collect today, what they never collect, and how sign-up, feedback and inquiries are handled.
Last updated: 15 October 2026
Private journal entries and reflections stay in the browser or app installation you use. Local controls include PIN, export and deletion.
Your writing → local app storageNot a cloud backup. An unlocked device or exported file needs care.
Sign-up, inquiry and feedback forms send what you enter to the relevant online services. While you're signed in, the app also sends a random device ID, browser information and simple usage events.
Your submission → the relevant sign-up, feedback or contact serviceThese are separate from private app content. Do not include journal entries or urgent health details.
Who we are
Breemaia is operated by Johnny Maalouf, an individual in Canada. In this notice, “Breemaia”, “we” and “us” mean Breemaia. For privacy questions, email privacy@breemaia.com.
Breemaia is built with teens and young adults in mind. This early version is for adults 18+. Please don't create an account for anyone under 18.
The breemaia.com website, sign-up, the feedback and contact forms, and the Breemaia app beta at app.breemaia.com.
Breemaia does not sell your information or use it for advertising.
The app beta
We count how the beta is used. Never what you write.
These are linked to your sign-in, so that we can improve the beta and keep access secure.
Never sent: your journal, drawings, mood choices, notes, Tiny Plan text, Safety Plan, trusted contacts, app-lock PIN, or anything you type or choose in an activity. Opening Help, Safety, Calm with Bree or the ideas form, and anything you choose there, isn't recorded either.
Ideas you send from the app reach the Breemaia team without your name or email.
Like any website, the services that run Breemaia see your IP address when your device connects, and may keep it in their logs for security.
The website
App sign-up collects your email, an adult age band and your consent, plus the information above. The separate website contact form collects contact details and a short message.
Your name, email, topic and message. It is sent by email to the Breemaia team, separately from app sign-up, and is not stored in a database.
Cloudflare processes verification and technical request information to protect sign-up and forms. While you're signed in, the app sends a random device ID, browser information and simple usage events (see What the app sends). It never sends your private journal or anything you type.
The website counts visits with Cloudflare Web Analytics. It doesn't use cookies. It shows us totals such as page views, referring sites, browser type and country.
What not to send
Please do not submit journal content, crisis details, diagnosis details, other private health information, or anything urgent through the website forms. If someone may be in immediate danger, call 911 or a crisis line.
Feedback
The feedback form asks for an email, a broad role and age group, the device you used, how much time you spent, the areas you tried and your answers. It does not ask for a birth date, diagnosis, journal content, mood history, safety-plan content or crisis details. It asks for the email you use for Breemaia so we can follow up. Tell us if you'd rather we didn't.
Your answers are stored in Breemaia's protected review queue (Supabase). For adult submissions we also store your browser's user agent and the country Cloudflare reports, to spot problems and misuse. We may email you a confirmation and mark your beta feedback reminder as done.
Under 13: a parent or guardian should fill in the form. They can give their own email, or send it with no email. 13 to 17: you need a parent or guardian's OK, and email is optional. For anyone under 18 we don't store browser details or country.
Do not include private health information, another person's information, journal entries, crisis stories, or anything urgent.
Service providers
Service providers: Cloudflare (website hosting, security and privacy-friendly, cookie-free visit counts), Vercel (app hosting), Supabase (sign-in and data, stored in Canada) and Resend (email).
Some of these services may process information outside Canada. Clinical-grade privacy certification is not established.
Retention
We keep sign-in records until you delete your account, and usage events for the length of the beta plus 12 months, then delete them.
If you delete your account, we delete your sign-in records within 30 days.
Your choices
For privacy questions, or access or correction requests, email privacy@breemaia.com.
Private journal entries and reflections are stored in the browser or app installation you use. A local PIN can protect access on that device. Clearing site data can remove local content; this is not a cloud backup.
There is no dashboard or sharing feature that lets anyone else see your private journal entries. Any proposed sharing feature would need its own clear description and your consent before use.
If this notice changes, we'll update it here and change the “Last updated” date at the top.