Privacy Policy

BREACHAID LLC · Last updated: June 9, 2026

The short version

You come to BreachAid because your data was mishandled by someone else. We take that seriously.

We don't require an account. We don't sell your data. We don't show ads. Your recovery plan and your answers stay on your device. We make money one way: you buy the app once.

1. Who we are

BreachAid is made by BREACHAID LLC, a company registered in the United States. BreachAid provides data breach recovery help: a guided, step-by-step recovery plan for people affected by data breaches. You can reach us at support.breachaid@gmail.com.

2. What we collect — and what we don't

No account, no profile. BreachAid does not require you to create an account, and we do not collect your name, address, or government identifiers.

Your answers stay on your device. When you tell BreachAid what was exposed in a breach, those answers and your recovery plan progress are stored locally on your iPhone. They are not uploaded to our servers.

Breach lookup. If you use the breach exposure check, the email address you enter is sent to a breach-data service solely to check whether it appears in known breaches. It is not stored by us or used for marketing.

Anonymous usage analytics. We collect anonymized, aggregated usage signals (for example, which screens are used and whether steps are completed) so we can improve the app. These signals are not tied to your identity, and we cannot use them to identify you.

3. Purchases

All purchases are processed by Apple through the App Store. We never see or store your payment information. Refunds are handled by Apple — see our Support page for how to request one.

4. What we never do

5. Data retention and deletion

Because your recovery data lives on your device, deleting the app deletes your data. Anonymized analytics cannot be linked back to you and are retained only in aggregate form.

6. Your rights

Depending on where you live — including the United States, United Kingdom, European Union, Canada, and Australia — you may have rights to access, correct, or delete personal information, and to lodge a complaint with your data protection authority (such as the ICO in the UK or the DPC in Ireland). Because we hold almost no personal information about you, most requests can be satisfied by deleting the app. For anything else, email us and we will respond within 30 days.

7. Children

BreachAid is not directed at children under 13 (or the equivalent minimum age in your region), and we do not knowingly collect personal information from children.

8. Security

We follow platform security best practices, including iOS data protection for on-device storage and encrypted connections (HTTPS/TLS) for any network requests the app makes.

9. Changes to this policy

If we make material changes, we will update this page and the "Last updated" date above. We will never weaken the core commitments in "What we never do" without telling you clearly inside the app.

10. Contact

Questions about privacy: support.breachaid@gmail.com