Privacy — Briques

1. Overview

Briques ("we", "us") is an AI-powered tool for building small, single-user mobile apps from natural-language descriptions. This policy explains what we collect when you use Briques on iOS or on this website, what we do with it, what we send to AI providers, and what choices you have. We aim to collect only what's needed to deliver a reliable, secure service.

Briques apps are single-user and private to you. Generated apps and the data inside them are not shared with other users, indexed publicly, or made available to anyone else without your action.

2. What we collect

Information you provide

Account information. Name and email when you sign in with Google or, on iOS, Sign in with Apple.
Prompts. The natural-language descriptions you submit to generate or modify mini apps.
App content. The mini apps you create (their structure and logic) and the data you store inside those apps (records you add, files you upload, edits you make).
Communications. Anything you send us through support, feedback, or email.

Information collected automatically

Usage data. Pages and features used, actions taken, approximate session duration.
Device & log data. Device model, operating system, app version, IP address, crash reports.
Cookies and identifiers. Essential cookies for sign-in and session persistence on the website. We do not use third-party advertising cookies. The iOS app does not present an App Tracking Transparency prompt because it does not track you across other apps or websites.

Information from Apple's App Store

Purchase confirmations. When you purchase a subscription or credit pack, Apple shares the transaction with us so we can grant access. We do not see your full payment information; Apple handles billing.
Subscription status changes. Apple notifies us when subscriptions renew, lapse, are refunded, or are cancelled, so we can update your account.

3. How we use it

We use the information we collect to:

Provide, operate, and maintain Briques.
Generate and modify mini apps using AI models (see §4).
Validate purchases, grant entitlements, and reconcile subscription state with Apple.
Improve product quality, debug issues, and measure feature performance using aggregated, de-identified data only.
Send service-related emails: account notices, security alerts, and important updates.
Detect, prevent, and respond to abuse, fraud, and security incidents.
Comply with legal obligations.

We do not sell your personal information. We do not use the content of your prompts or apps to train our own models. We do not permit third-party AI providers to train their models on your prompts or app content; we send requests through API endpoints whose terms exclude training, as confirmed by each provider's published policy at the time of integration.

4. AI processing

Briques uses AI models from third-party providers to interpret prompts, generate app structure (pages, data, fields), and write the JSX rendered by the in-app runtime. Today's providers:

OpenAI — used for fast generation and embeddings.
Anthropic — used for higher-quality reasoning passes.

We may add or change providers over time. The current set is listed here, and any change affecting how your data flows will update this date in the "Last updated" line above.

What we send to providers

Your prompt text.
The current app's structure (schema, page layout, field names) when relevant to the request.
Short context excerpts from your data only when you explicitly ask the AI a question about your data (e.g. AI search). Otherwise your records are not sent.

What we don't send

Your name, email, account ID, or any direct identifier.
Files you upload (images, PDFs, attachments).
The bulk contents of your tables outside the relevant excerpt above.

Safety filtering

Prompts are checked against a safety classifier before generation. Prompts requesting clearly disallowed content (sexual content involving minors, instructions for violence, targeted harassment, weapons or drug instructions, regulated advice such as medical or legal direction) are blocked with a message. Generated output is also screened before it's shown to you.

AI-generated content disclosure

Mini apps and their structure are AI-generated. Generated output may be incorrect, incomplete, or unsuitable for a given use. Briques does not provide medical, legal, financial, or other regulated advice and you should not rely on Briques for those decisions. See our terms for the full disclaimer.

We share information only in these limited cases:

Service providers we depend on: Supabase (database and file storage), Cloudflare (DNS, email routing, hosting for this site), OpenAI and Anthropic (AI generation), Resend (transactional email), Apple (App Store payments). Each is bound by contractual confidentiality obligations and processes data on our instructions.
Legal & safety. If required by law, court order, or to protect the rights, safety, or property of Briques, our users, or the public.
Business transfers. In connection with a merger, acquisition, or asset sale, subject to the same protections set out here.

6. Storage & retention

Your account data, mini-app definitions, and app records are stored in Supabase Postgres. Files you upload are stored in Supabase Storage. Both live in our primary region; we do not replicate user data across regions today.

We retain account data for as long as your account is active. Plan caps for row data and file storage are listed on the pricing page.

Crash logs and aggregated usage data are retained for up to 24 months. Server-side request logs (no prompt content) are retained for up to 90 days for security and abuse detection. AI-provider request logs are subject to each provider's retention policy; today, OpenAI and Anthropic API requests are not used for training and have provider-side retention windows documented in their public policies.

7. Your rights

Depending on where you live (GDPR in the EEA / UK, CCPA in California, similar laws elsewhere) you may have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Delete your personal data and account.
Export your data in a portable format (machine-readable JSON).
Object to or restrict certain processing.
Withdraw consent where processing is based on consent.
Lodge a complaint with a supervisory authority.

To exercise any of these rights, email privacy@briques.app. We respond within 30 days.

8. Account & data deletion

You can delete your Briques account at any time:

From the iOS app: Account → Delete account. Tap, confirm, done.
By email: send a request from the address on your account to privacy@briques.app.

On deletion, we permanently delete your account, mini apps, app records, and uploaded files within 30 days from production systems. Backup copies are purged within a further 60 days. Some records (aggregated billing reconciliation, fraud-prevention logs) may be retained longer where required by law; these are scoped, minimised, and not used for any other purpose.

If you have an active subscription, deleting your Briques account does not automatically cancel an Apple-managed subscription. To stop renewals, also cancel via your Apple ID subscription settings. Active subscriptions can also be managed from the App Store at any time.

9. Apple App Store

On iOS, in-app purchases (Pro subscription, credit packs) are processed by Apple through the App Store. Your payment method, billing address, and Apple ID are managed by Apple under Apple's privacy policy; we do not receive or store these.

Apple shares with us a transaction identifier, the product purchased, and subscription state changes (renewal, lapse, refund, cancellation) so we can correctly grant access and update your entitlement. We use this only to administer your account.

Refunds for App Store purchases are handled by Apple. Visit reportaproblem.apple.com to request one. Briques does not have direct authority over Apple-managed refunds.

10. Children & age rating

Briques is rated 17+ on the App Store because the product generates content using AI, and AI output can be unpredictable. We do not direct Briques to children under 13 (or 16 in the EEA / UK), and we do not knowingly collect personal information from them. If you believe a child has provided us personal data, contact us and we will delete it promptly.

11. Changes

We may update this policy from time to time. If we make material changes (e.g. adding a new AI provider, changing what we share), we'll notify you by email or a prominent in-product notice before the changes take effect. The "Last updated" date above always reflects the most recent revision. Older versions are available on request.

12. Contact

Questions about this policy or your data? Email privacy@briques.app or visit our contact page.