privacy

last updated: September 29, 2026

bread is for you and your friends. here’s exactly what it keeps, and what it doesn’t.

the short version

no account, no email, no phone number, no password.
we keep your name, your slices and what’s on them, so your friends can see them and you get them back on a new phone.
only friends on a slice can see it.
photos are cut out on your phone. only the cutout is uploaded, never the original photo.
no ads, no tracking across apps, and we never sell your data.
you can delete all your data in the app, anytime.

what we collect

bread doesn’t ask who you are. the first time you open it, the app makes a random ID on your phone. it works like an invisible sign-in key. it’s backed up in iCloud Keychain on iPhone, or in Android Block Store (Google) on Android, so it survives a reinstall.

to make bread work, we store this on our servers:

your name: the name you type (1 to 30 characters) and the bread you pick.
your slices: slices you make or join, and what’s on them: photo cutouts, text you write, and handwriting or scribbles.
who is on each shared slice.
notification settings: your settings for each phone, and that phone’s push token (an address that lets us send it notifications).
widget snapshots: small images of shared slices, used to update your friends’ widgets.

slices you keep to yourself are stored too, so they come back when you move to a new phone. only you can see them.

we use this information only to run bread: to show your slices to you and to the friends on them, update widgets, send the notifications you’ve turned on, and keep the service working and safe.

what we don’t collect

no email address, phone number or password.
no contacts or address book.
no original photos, only the cutouts you add to a slice.
no ads, and no ad or analytics tools in the app.
no tracking across other apps or websites.
we never sell your data or share it for advertising.

photos and cutouts

bread only reads the photos you pick or take. when you add one, your phone cuts out the subject on the device itself (Apple Vision on iPhone, Google ML Kit on Android). only the cutout image is uploaded to your slice. the original photo stays on your phone.

a shared slice is visible to the friends on it, and to no one else. everything on it (cutouts, text, handwriting) can be seen by every friend on that slice.

you invite friends with a link that looks like breadwidget.com/j/CODE. anyone who has the link can see two things on the link preview and the join page: the first name of the slice’s owner, and which bread the slice is. nothing else from the slice is shown there. joining needs no account. only share a link with friends you want on the slice.

notifications

if you turn them on, bread sends notifications through Apple Push Notification service (iPhone) or Firebase Cloud Messaging (Android), using Expo’s push service. a notification can include a friend’s name and the slice’s name. it never includes the photos or text on the slice. you can change notification settings in the app or in your phone’s settings.

where it’s stored and who processes it

we use a few service providers to run bread. they process data for us, only to provide their service:

Supabase: our database and file storage. your name, slices, cutouts, snapshots and settings live here.
Apple and Google: deliver push notifications (Apple Push Notification service, Firebase Cloud Messaging). iCloud Keychain and Android Block Store keep the backup of your sign-in key.
Expo: passes notifications on to Apple and Google.
Vercel: hosts this website and invite links. Vercel Web Analytics counts page views in aggregate, without cookies.
Google Fonts: serves the fonts on this website, so Google sees your IP address when a page loads.

these providers may process data in countries other than yours, including the United States.

this website sets no cookies.

how long we keep it

we keep your data while you use bread. when you delete something, or delete all your data, it becomes unreachable right away and is permanently deleted from storage within 30 days.

when you move to a new phone, the app encrypts your key on your phone first. the encrypted package sits on our server for at most 3 minutes, and we can’t read it. there’s also a recovery word list you can keep.

deleting your data

delete all my data: in the app, go to You → Delete all my data. this removes everything you added, including on shared slices, and your name. slices you own that friends are on pass to the friend who joined first.
leaving a shared slice: you can take off what you added when you leave.
when someone is removed from a slice, what they added stays on the bread.

deleting the app alone doesn’t delete your data, because your key is backed up so you can come back. use Delete all my data in the app, or email us.

your rights

wherever you live, you can ask us to:

access the data we hold about you, and get a copy;
correct it if it’s wrong;
delete it;
move it: get it in a portable format;
object to or restrict how we use it.

email hello@breadwidget.com from any address. because bread has no accounts, we may ask for a few details (like your name in bread and a slice you’re on) so we know the data is yours. we aim to reply within 30 days. we won’t treat you differently for using these rights.

if you’re in the EU or UK, we use your data because it’s needed to provide bread to you, and for our legitimate interest in keeping it safe and working. you can also complain to your local data protection authority. if you’re in California, we don’t sell or share your personal information as those terms are defined in California law.

children

bread is not for children under 13 (or older, where local law sets a higher age). if you think a child under that age is using bread, email us and we’ll delete their data.

changes

if we change this policy, we’ll update the date at the top of this page. if the change is important, we’ll also let you know in the app.

contact

questions or privacy requests: hello@breadwidget.com. see also the terms and support.