Privacy Policy

Brrrup · Last updated: November 1, 2026

Brrrup is built to collect as little data as possible. Almost everything stays on your iPhone.

The short version

• No account, no sign-in, no ads, no cross-app tracking.
• Your alarms, missions, history and the photos for the place scan stay on your iPhone only.
• Camera and motion data are only analyzed on your device during a mission and are never transferred.
• Purchase data is shared with Apple and our payment service provider only when you buy something.
• Anonymous usage statistics via Aptabase (servers in the EU) show us which parts of the app are used; you can opt out in Settings.
• An error log without personal information stays on your device; you can send it to us by email yourself.

1. Controller

Sunay Yetim
Martin-Luther-Str. 7
95615 Marktredwitz
Germany
Email: hello@brrrup.com

2. Data stored only on your iPhone

To work, the app stores the following locally on your iPhone:

• your alarms (time, days, sound, missions, difficulty, follow-up alarms),
• your history: when an alarm rang, when you opened and finished the mission, and whether you used the emergency exit,
• for the place scan, a small photo of your spot and image features calculated from it,
• settings and the last known status of your purchase.

This data is not transferred to us or to third parties; we have no access to it. You can delete your history in Settings, single alarms in the editor, and everything by deleting the app. If device backups (e.g. iCloud Backup) are turned on, this data may be part of your backup at Apple; we have no influence on that.

3. Alarms through iOS

The app sets alarms through the iOS alarm system (AlarmKit), so they ring even in silent mode and when the app is closed. The app only passes the time, sound and title of each alarm to iOS. The data stays on your iPhone.

4. Camera and motion

• Camera (only for the "Place scan" and "Photo hunt" missions, only with your permission): the camera image is analyzed on your iPhone during the mission using Apple's image recognition. For the place scan, we store a small photo of your spot locally when you set it up (see section 2). Photo hunt images are not stored. None of it is transferred.
• Motion & Fitness (only for the "Walk" mission, only with your permission): during the mission the app reads your iPhone's step counter. The step count is not stored or transferred.

You can withdraw these permissions at any time in the iOS Settings; the affected missions can then no longer be used.

5. Purchases and subscriptions

Purchases and subscriptions are processed through Apple's App Store. We never receive payment details. Apple's privacy policy applies to the payment process.

To check whether a purchase or subscription is active, we use RevenueCat (RevenueCat, Inc., USA) as a processor. The following is processed:

• a randomly generated, anonymous ID of the app installation (no device or advertising ID),
• purchase receipts from Apple (product, purchase date, price, currency, country, transaction ID, subscription status),
• technical information required for the connection (e.g. app version, operating system, language setting, IP address).

Alarms, history or any other content of the app are not transferred. The legal basis is the performance of the purchase contract (Art. 6(1)(b) GDPR). We have a data processing agreement with RevenueCat. Transfers to the USA are based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR), which are part of RevenueCat's data processing agreement. The data is kept as long as needed to manage the purchase and then deleted, unless statutory retention periods apply.

6. Error log on the device

To help us fix bugs, the app keeps a short log of technical errors only on your iPhone (up to 200 entries, older ones are overwritten): time, app version, area and type of error, and for crashes also the technical details provided by iOS (crash type, code location). It contains no content of your alarms and no photos. The log is never transferred automatically. Under "Report a problem" in Settings you can add it to a prepared email – you see everything in your mail app before sending. The legal basis for storing it on the device is Section 25(2) no. 2 TDDDG (strictly necessary for the secure operation of the app); for sending it, your decision to send the email (Art. 6(1)(a) GDPR).

In addition, Apple provides us with crash reports if you have turned on "Analytics & Improvements → Share With App Developers" in the iOS Settings. These reports contain no information that identifies you; Apple's privacy policy applies.

7. Anonymous usage statistics

To see which parts of the app are used and where it is still unclear, the app anonymously records certain events – for example "onboarding page 3 viewed", "alarm set with the math mission", "mission completed", "purchase page viewed" or "purchase cancelled". For this we use Aptabase by Technov Solutions SRL, Str. Fabricii Nr. 47, Bucharest, Romania, as a processor (agreement under Art. 28 GDPR). The data is processed and stored exclusively within the European Union; sub-processors are Amazon Web Services EMEA SARL (hosting) and Tinybird Data S.L., Spain (database).

What is sent: the event and its time, a few fixed values (e.g. name of the mission, difficulty, chosen plan), the app version, the iOS version, the device language and a random session ID that is only kept in memory and renewed after an hour of inactivity. On receipt, Aptabase briefly uses your IP address in memory to derive the country and region and to form a daily ID that changes every day; the IP address itself is not stored. What is not sent: times or content of your alarms, photos, names, the device model, device or advertising IDs. We cannot link the data to any person, nor connect different days with each other.

The legal basis is our legitimate interest in improving the app (Art. 6(1)(f) GDPR). You can object at any time: Settings → turn off "Anonymous statistics". The app then sends no more events. Aptabase stores the events for at most five years; if we delete the app there, they are removed immediately.

8. Emailing us

If you write to us, we receive your email address and the content of your message. We only use them to reply and delete them once your request is resolved, at the latest after 12 months. The legal basis is Art. 6(1)(a) and (b) GDPR.

9. No other services

Apart from Aptabase (section 7), we use no advertising networks, no other analytics or tracking services, no social media integrations and no artificial intelligence that receives data from the app. Alarms and missions work without an internet connection; a connection is only needed for purchases. If you share your streak image, you decide where it goes; the app does not send anything to us.

10. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). Since we receive no data other than purchase data and anonymous statistics, and it is not linked to you as a person, we can only match a request if you give us the transaction ID of your purchase. Write to us at hello@brrrup.com.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country or state where you live.

11. Changes

We update this privacy policy when the app or the legal requirements change. The version shown in the app applies.