Legal
Last updated: 2026
This policy explains what Break It Thru collects, why, and the choices you have. We follow India's Digital Personal Data Protection Act, 2023 (DPDP).
Break It Thru, operated by Yash Goyal from Gurgaon, Haryana, India, is the data fiduciary responsible for your personal data under this policy.
Account details: your name or display name, email, and password (stored only as a secure hash).
Programme data: your onboarding answers, daily task progress, reflections, and mood check-ins.
Usage data: basic technical information such as device and app interactions, used to keep the Service working.
Payment data: handled by our payment gateway. We receive a record that a payment succeeded or failed, not your full card number.
To provide and personalise the programme, track your progress and streak, run points and rewards, keep the Service secure, and respond to support requests.
We do not sell your personal data, and we do not use your private reflections for advertising or to train advertising models.
Your reflections, notes, and chat content are treated as sensitive. Staff administering the Service can see whether you have written entries and your progress, but do not read the contents of your reflections in the normal course of running the Service.
We process your data based on the consent you give when you sign up and use the Service, and to perform our agreement with you. You can withdraw consent by deleting your account, which stops further processing.
We share data only with service providers that help us run the Service — such as cloud hosting, our database provider, and the payment gateway — under agreements that require them to protect it. We may disclose data if required by law.
We use essential cookies to keep you signed in. Optional analytics cookies are off by default and are only set if you opt in via Cookie Preferences.
We keep your data while your account is active. When you delete your account, we anonymise or erase your personal data and reflections. We may retain limited records, such as payment and tax records, where the law requires it.
Under the DPDP Act you can ask to access, correct, or erase your personal data, and to withdraw consent. You can delete your account and data from within the app, or contact us to exercise these rights.
We use reasonable technical and organisational measures to protect your data, including encryption in transit and hashed passwords. No system is perfectly secure, but we work to keep your data safe.
The Service is for adults (18+) and is not directed at children.
For privacy questions or to exercise your rights, contact our Grievance Officer at breakitthru@gmail.com. For general help, write to breakitthru@gmail.com.