Privacy policy

Brume supports you in quitting smoking. To spot your risky moments and send the right message at the right time, the app needs to know when you smoke, what triggers the craving and how you are doing. That is health data, and it is treated as such.

Data controller

AZOT (SAS), 78 avenue de Paris, 92320 Châtillon, France.

Hosting

European Union (Railway, Netherlands region) for the API, the database and the job queues.

No advertising

Your data is never sold, rented or shared for advertising purposes. No advertising tracker ships in the app.

No surveillance

No location, no access to contacts, microphone, camera or photos.

You stay in control

Full data export and account deletion straight from the app, without having to contact us.

The data controller is AZOT, a French simplified joint-stock company registered with the Nanterre Trade and Companies Register under number 894 762 657, with its registered office at 78 avenue de Paris, 92320 Châtillon, France.

For any question or request about your data: hello@contact.brume.life. No data protection officer has been appointed at this stage; requests are handled directly by management.

This policy covers the Brume mobile app (iOS and Android) and the brume.life website. Where a rule applies to only one of them, it is stated.

Everything is collected from you, inside the app. Nothing is bought from a third party and nothing is inferred from external sources.

Account

The identifier Apple or Google sends at sign-in, your email address (Apple's private relay is accepted), language and time zone. Brume stores no password.

Profile (onboarding)

First name, date of birth, quit date, cigarettes per day, time to first cigarette of the day, years smoking, past attempts, triggers, difficult time slots, social context, link with alcohol, pack price, quit strategy and motivation level.

Check-ins

At each check-in: craving intensity, stress, alcohol, smokers around you, cigarette within reach, motivation and number of cigarettes smoked.

Usage

Timestamped in-app events: app opened, SOS started or completed, urge surfed, exercise done, lapse reported, notification opened, subscription screen viewed.

Coach

The content of your conversations with the coach, a rolling summary of the thread, and safety markers set automatically (for instance detecting a crisis message).

Notifications

Push token, platform, app version, log of notifications decided, sent and opened, and your "helpful / not helpful" feedback.

Subscription

Subscriber identifier, product, status and dates. No payment details go through Brume: billing is handled by the App Store or Google Play.

Technical

Server logs (account identifier, never the content of your check-ins or messages) and error reports when something crashes.

No location, no address book, no microphone, no camera, no photos, and no reading from Apple Health or Google Fit. No advertising tracker is embedded in the app, and no data is passed to a data broker.

Notifications never mention smoking or cigarettes in their title or body: someone glancing at your lock screen learns nothing about you.

Running the app

Account, check-ins, risk-window radar, daily plan, weekly recaps. Legal basis: performance of the contract (art. 6.1.b GDPR).

Processing health data

Smoking, how you feel, conversations with the coach. Legal basis: your explicit consent, collected during onboarding (art. 9.2.a GDPR). You can withdraw it at any time; withdrawal does not affect processing carried out beforehand.

Sending notifications at the right moment

Legal basis: performance of the contract. Delivery still depends on the permission you grant your phone, revocable in system or app settings.

Managing subscriptions

Legal basis: performance of the contract and legal obligations (accounting).

Securing the service and improving the product

Abuse prevention, technical diagnostics, aggregated usage statistics. Legal basis: legitimate interest (art. 6.1.f GDPR) — understanding whether the product helps, without identifying you individually.

Brume's coach runs on a language model provided by Anthropic (Claude). When you write to it, the following is sent: your message, recent messages in the thread, the thread summary, your first name if you provided one, and non-identifying context (day of your quit, latest reported craving, current risk window).

Anthropic processes these exchanges to generate the reply, under a data processing agreement with the European Commission's standard contractual clauses. They are not used to train models.

The coach provides behavioral support: it makes no diagnosis, gives no dosage advice and does not replace a healthcare professional. If a message mentions suicidal thoughts, a fixed response is shown (in France 3114, or 15 / 112 in immediate danger) without calling the model, and the conversation is flagged for human review.

No decision producing legal effects or similarly significantly affecting you is made automatically.

Brume sells nothing and shares nothing for advertising. Only the providers required to run the service are involved, each bound by a data processing agreement and limited to the data they need:

Railway — hosting (European Union)

API, database and job queues, Netherlands region.

Anthropic — coach model (United States)

Content of your conversations with the coach, for as long as it takes to generate the reply.

Expo — push notifications (United States)

Push token and the content of the notification sent.

RevenueCat — subscriptions (United States)

Subscriber identifier and subscription status.

Apple, Google — sign-in, payment, distribution

Sign-in identifier and purchase transactions, under their own privacy policies.

Sentry — technical diagnostics

Error reports, with no check-in or coach message content.

Transfers outside the European Union rely on the European Commission's standard contractual clauses. Any new category of recipient will be reflected in an update to this page.

Your data may also be disclosed to a judicial or administrative authority upon a lawful request — in that case only.

Check-ins and usage events

24 months, then aggregated into statistics that no longer identify you.

Coach conversations

12 months. You can clear the history at any time from the app: deletion is real, not hidden.

Notification log

12 months.

Technical logs

30 days, with no check-in or message content.

Deleted account

Access cut and notifications stopped immediately, permanent purge from the database within 30 days, subscriber deleted at our subscription provider.

Accounting records

Kept for the period required by law (10 years) for billed subscriptions.

You have the right to access, rectify, erase, port, restrict and object to the processing of your data, the right to withdraw your consent at any time, and the right to give instructions on what happens to your data after your death.

Two of them are exercised directly in the app, without contacting us: Settings → Export my data produces a complete JSON file (profile, check-ins, events, risk windows, notifications, coach conversations); Settings → Delete my account triggers the deletion described above.

For everything else: hello@contact.brume.life. We reply within one month.

If our answer does not satisfy you, you can lodge a complaint with the French data protection authority (CNIL) — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, cnil.fr — or with the supervisory authority of your country of residence.

Data travels over TLS and is encrypted at rest by our host. Access tokens are signed and short-lived, database access is restricted to the people who need it, and the content of check-ins and coach messages is excluded from application logs.

No system is infallible. In the event of a data breach likely to result in a high risk to your rights, you will be informed and the CNIL notified within 72 hours.

Brume is aimed at people who smoke, and therefore at adults. We do not knowingly collect data about anyone under 15, the age of digital consent in France. An account reported as such is deleted.

The website, which is separate from the app, measures its audience with PostHog (hosted in the European Union, form fields never recorded) and uses the Meta pixel to measure advertising campaign performance. You can opt out by blocking trackers in your browser.

Waitlist sign-up (email address and optional questionnaire answers) is used only to notify you at launch and to prepare the first cohort. One-click unsubscribe from any email received.

This policy evolves with the product. The update date at the top of the page is authoritative, and any significant change — new purpose, new recipient, new retention period — is announced in the app before it takes effect.