Privacy Policy
Your Data — How We Take Care of It
Last updated: 19 October 2026 · Governed by Thailand’s Personal Data Protection Act B.E. 2562 (2019) (“PDPA”)
This policy covers the breadai.app website and the BreadAI app on iOS and Android.
English translation for convenience. The Thai version is the governing text in case of conflict.
The short version, in 6 lines
- ✓ We collect only what is needed for your financial planning — we never sell your data, show ads, or track you across other apps or websites
- ✓ Data sent to AI providers is covered by agreements that prohibit retention and prohibit training on your data
- ✓ Chatting with Tony, voice input, and slip scanning each require a separate, optional consent — decline any of them and the rest of the app still works
- ✓ Face ID / fingerprint is processed only on your device by the operating system — we never receive your biometric data
- ✓ Delete your account inside the app (Profile → “Delete your account permanently”) — data is erased within 30 days
- ✓ Withdraw consent or exercise any PDPA right anytime at contact.breadai@gmail.com — we respond within 30 days
1. Who is the data controller
The operator of BreadAI (the website and app; “we”) is the data controller of the personal data of users (“you”) under Thailand’s Personal Data Protection Act B.E. 2562 (2019).
Contact our data protection officer (DPO): contact.breadai@gmail.com
2. What we collect, and how
We collect only the data necessary to provide personal financial guidance:
| Category | Details | How it is collected |
|---|---|---|
| Account data | Email, display name, password (bcrypt-hashed) | Entered at sign-up, or received from Google / Apple when you choose to sign in with them |
| Basic profile | Date of birth, marital status, dependents, risk tolerance, main concerns | Entered by you during onboarding |
| Financial data | Income, expenses, assets, debts, insurance, taxes, goals, and financial plans | Entered by you in the app/website |
| Conversations with Tony AI | Messages you type or speak, and the responses Tony generates | When you use the chat feature (consent required first) |
| Slip and receipt images | Images you add to a transaction, with details read from them — amount, date/time, counterparty name, and any account number visible on the slip (images may incidentally contain other data, such as a merchant name or line items) | You take a photo, pick from your library, share into the app, or enable auto-scan limited to folders you select (consent required first) |
| Voice | Microphone audio while using voice input, streamed live for transcription — we keep only the transcribed text, never the audio | When you tap the microphone button (consent required first) |
| Goal images | Images you upload for goals / your Vision Board | Uploaded by you |
| Usage logs | IP address, access times, and basic usage events, for security and product improvement — no keystrokes, no content outside forms | Generated automatically as you use the service |
| In-app usage statistics | Screens you open, key actions (sign-up/sign-in, recording an entry, asking Tony a question), app install/open/update, app version, device model and OS, and your user ID — never amounts, account names, merchant names, or what you say to Tony, and no screen recording | Generated automatically as you use the app — you can turn it off anytime (see Section 8) |
| Device data for notifications | Push device token (APNs token on iPhone / Firebase Installation ID on Android) and your notification-permission status | Only if you turn notifications on |
We do not collect: national ID numbers, credit card numbers, biometric data, GPS location, or your contacts. (We never ask for bank account numbers; one is stored only as it appears on a slip you add yourself.)
3. How we use your data
- Core service: computing your Health Score, building your lifelong financial plan, recording income/expenses, and generating Tony’s guidance
- AI processing — chat: when you chat with Tony, we send your message, the last 10 messages of the conversation, and your financial overview (income, expenses, accounts, debts, wallets, net worth, goals, and plan) to Anthropic (Claude) or DeepSeek to compose the reply, and only your question text to OpenAI to retrieve relevant knowledge (see Section 4)
- AI processing — slips and receipts: images you add are uploaded off the device to Slip2Go for reading; if Slip2Go cannot read them, or for general receipts, the image is passed to Anthropic (Claude) instead
- AI processing — voice: microphone audio is streamed live off the device to ElevenLabs for speech-to-text; when you enable spoken replies, Tony’s reply text is sent to ElevenLabs for text-to-speech (if the voice service is unavailable, the app falls back to your device’s own on-device voice)
- Improving the app: analysing in-app usage statistics (Section 2) to see which features are used, where people get stuck, and whether they keep using the app — used inside BreadAI only, never for advertising, and never to track you across other apps or websites
- Communications: account-verification emails, important notices, and (only if you opt in) financial tips and news
- In-app reminders: financial check-up (Audit) reminders are scheduled on your device using the iOS/Android local notification system; notifications Bread sends you (push) go through Apple / Google, only if you turn notifications on (see Section 4)
What we never do: sell your data · share it with advertisers · track you across other apps or websites · use your data to train our own or third-party AI models without additional consent · make automated decisions with legal effect about you — Tony provides educational information and options; every financial decision remains yours.
4. Third-party service providers
We use the following providers. Data sent to each is limited to what is necessary, and every provider is bound by a Data Processing Agreement requiring it to protect your data to the same standard as this policy, prohibiting use for its own purposes, and prohibiting AI model training on your data.
| Provider | Country | What it receives | Purpose |
|---|---|---|---|
| Supabase | USA / Singapore (servers) | All of your data | Database, authentication, file storage |
| Anthropic (Claude) | USA | Chat messages + financial overview · slip/receipt images when Slip2Go cannot read them | Generates Tony’s replies and plan summaries, under zero-retention (no storage, no training) |
| DeepSeek | China | The same data as Anthropic, when selected as the responder | Certain tasks for cost efficiency, under a no-data-retention agreement |
| OpenAI | USA | Only the question text you type to Tony — never your financial overview | Embedding vectors for knowledge retrieval |
| ElevenLabs | USA | Live microphone audio stream and Tony’s reply text | Speech-to-text and text-to-speech |
| Slip2Go | Thailand | Slip/receipt images you add | Reads transfer details and returns the amount, date/time, counterparty name, and account number appearing on the slip |
| PostHog | USA | In-app usage statistics (Section 2) — no financial data, chat messages, email, or name | Usage analytics to improve the app |
| Apple Push Notification service / Google Firebase Cloud Messaging | USA | Your device token and the title and text of that notification — only if you turn notifications on | Delivering notifications to your device |
| Vercel | USA | Website visit data (no financial data) | Website hosting |
| Railway | USA | Data passing through our API server during processing | API server hosting |
| Google / Apple | USA | Used only if you choose to sign in with them — we receive only your email and name | OAuth login |
Sharing you initiate yourself: your data is disclosed to other people only when you choose to: inviting members to a shared Workspace (members see the financial data in that Workspace) · connecting with a financial advisor in the app (the advisor sees what you make visible) · sharing a summary card or plan via your device’s share sheet. You can revoke sharing anytime from the Workspace / advisor management screens.
5. Legal bases for processing
| Processing | PDPA legal basis |
|---|---|
| Creating and maintaining your account; providing core features you request | Performance of a contract (Section 24(3)) |
| Collecting and processing your financial data to build your plan | Consent — accepted at sign-up on both web and app |
| Sending data to AI providers for Tony chat and voice input | Separate, optional consent — requested at sign-up or on first use, with a list of what is sent to whom shown at that moment; declining leaves the rest of BreadAI fully usable |
| Reading slips and receipts (Slip2Go / Anthropic) | Separate, optional consent — requested in context, before gallery scanning starts and again as an image uploads, naming the recipients; auto-scan can be turned off in settings |
| Security logs and fraud prevention | Legitimate interests (Section 24(5)) |
| In-app usage statistics, to improve the app | Legitimate interests (Section 24(5)) — on by default; you can object anytime by turning off “Send usage statistics to improve Bread” in the app (Settings → Data and privacy), and the app stops sending immediately |
| Responding to rights requests and other legal obligations | Legal obligation (Section 24(6)) |
You may withdraw consent at any time, as easily as it was given — in the app’s settings or by email. Withdrawal does not affect processing already carried out; features that depend on that consent simply stop working.
6. International data transfers
Some providers in Section 4 host data outside Thailand (USA, Singapore, China). For transfers to countries not recognized as providing adequate protection, we rely on Standard Contractual Clauses consistent with the PDPC’s notifications on cross-border transfers under PDPA Sections 28–29, ensuring your data receives protection equivalent to that in Thailand.
7. Retention
| Data | How long |
|---|---|
| Account data, financial data, chats, and attached images | For the life of your account, or until you delete the item yourself |
| Microphone audio | Not stored — streamed for transcription and discarded immediately; only the text is kept |
| After account deletion | All data erased within 30 days |
| Security logs | 90 days |
| Backups | Overwritten within 30 days |
| In-app usage statistics | Up to 12 months; the part linked to your account is erased within 30 days of account deletion |
If the law requires us to keep certain data longer (e.g., for statutory audits), we keep only what the law requires and tell you when you request deletion.
8. Your rights under the PDPA
You have the following rights, and we respond within 30 days:
- Access and obtain a copy of your data (Section 30)
- Data portability in a machine-readable format (Section 31)
- Object to processing (Section 32)
- Erasure — the right to be forgotten (Section 33) — see Section 9
- Restriction of use (Section 34)
- Rectification (Sections 35–36)
- Withdraw consent at any time (Section 19)
- Turn off in-app usage statistics yourself at Settings → Data and privacy → “Send usage statistics to improve Bread”, without affecting anything else in the app
- Lodge a complaint with Thailand’s Personal Data Protection Committee (PDPC) — www.pdpc.or.th
Exercise any right at contact.breadai@gmail.com. We may verify your identity first, for your own data’s safety.
9. How to delete your account and data
Deletion is available inside the app — no emails or phone calls required:
- Open Profile
- Tap “Delete your account permanently”
- Confirm — the account is deleted immediately; all data (financial data, chats, slip images) is erased from our systems within 30 days, backups are overwritten within 30 days, and security logs expire within 90 days
Deletion is permanent and cannot be undone. If you only want a break, simply sign out.
10. Security
- Encryption in transit (TLS 1.3) and at rest (AES-256)
- Row-Level Security (RLS) restricts every account to its own data
- Passwords hashed with bcrypt — we cannot see your password
- Optional app lock with Face ID / fingerprint / device passcode — authentication happens on-device, by the operating system only; the app receives a pass/fail result and we never see or store your face or fingerprint data
- Periodic security reviews; in the event of a data breach we notify the PDPC within 72 hours as required by law, and notify you without undue delay if the breach poses a high risk to your rights
11. Device permissions (iOS / Android app)
The app requests the following permissions only when you first use the related feature, and you can revoke each at any time in your device Settings (iOS: Settings → Apps → BreadAI):
| Permission | Used for |
|---|---|
| Camera | Photographing slips/receipts to attach to a transaction |
| Photo library | Picking slip/receipt images and (if you enable it) auto-scanning for new slips only in folders you select — on iOS you can grant Limited Access to selected photos only |
| Microphone | Talking to Tony in real time |
| Face ID / biometrics | Unlocking the app — processed on-device only |
| Notifications | Financial check-up reminders at times you set (scheduled on-device) and notifications from Bread via Apple / Google — only if you allow them |
Slip auto-scan is strictly opt-in and can be turned off anytime at Settings → Slip scan settings.
12. Cookies and on-device storage
On the website we use only cookies and localStorage necessary for the service: a Supabase Auth session cookie (staying signed in) · localStorage for your onboarding draft · temporary sessionStorage for navigation.
In the app some preferences are stored on your device (e.g., language, app-lock state, unfinished drafts) using the app’s own storage, and PostHog keeps a random device ID and a queue of not-yet-sent statistics on your device (regenerated every time you sign out).
We use no advertising cookies or SDKs, no cross-site or cross-app tracking, and no device advertising ID.
13. Minors
The service is designed for adults (20 years and older, the age of majority in Thailand). Users who are minors must obtain consent from a holder of parental responsibility before using the service. We never knowingly collect data from children under 10, and if we learn data was collected without valid consent we delete it immediately.
14. Changes to this policy
We give at least 7 days’ advance notice by email and in the app/website before any change that affects your rights. Continued use after the notice takes effect constitutes acceptance of the new version.
15. Contact us
Privacy questions or complaints: contact.breadai@gmail.com
See also our Terms of Service.
This is an English translation provided for convenience. The Thai version is the governing text.