Privacy Policy

Last updated: July 12, 2026

Overview

bruh. ("we", "our", or "us") is an AI-powered task manager and focus app operated by Elite LOZ Transportation, LLC (d/b/a getBruh.app), based in Missouri, USA. We care about your privacy and keep things simple: you own your data, we don't sell it, and we only collect what we need to run the Service at getbruh.app.

This Privacy Policy explains what we collect, how we use it, who we share it with, and the rights you have over your information. If anything here is unclear, email us at privacy@getbruh.app.

Who This Policy Covers

This policy applies to everyone who uses bruh., including visitors, free-tier users, and paid subscribers, wherever you are in the world. If you are in the European Economic Area (EEA), the United Kingdom, or California, additional rights described below apply to you.

Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Display name (if you choose to provide one)
• A securely hashed password (authentication is handled by Supabase Auth; we never see or store your password in plain text)

Your Content

To provide the Service, we store the content you create, which may include:

• Tasks, notes, lists, and projects
• Goals and habits you track
• Focus session data and productivity statistics
• User preferences and settings

This content is yours. We only access it as needed to operate, secure, and support the Service, or as you direct (for example, when you use an AI or integration feature).

Usage and Device Data

When you use bruh., we automatically collect limited technical data needed to run and secure the Service, such as:

• Device and browser type, operating system, and general settings
• IP address and approximate location derived from it
• Log data, feature usage, and error/diagnostic reports

Payment Information

When you subscribe to a paid plan, payments are handled by Stripe. On our side we store:

• A reference to your Stripe customer ID
• Subscription status, plan, and billing period
• Transaction and invoice history metadata

Your full payment card number is collected and processed directly by Stripe, a PCI-DSS compliant payment processor. bruh. never receives or stores your full card number.

Integration Data

If you connect an optional third-party service (Google Calendar, Notion, or Slack), we store:

• OAuth tokens needed to maintain the connection
• Sync preferences you configure
• The minimum data required to sync between services (e.g., calendar event IDs)

Each integration is opt-in and can be disconnected at any time from Settings.

How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Create and manage your account
• Process subscription payments and manage billing
• Power AI features you choose to use (see below)
• Sync your tasks with connected third-party services
• Send transactional email (account, billing, and security notices) and notifications you opt into
• Monitor for errors, prevent abuse, and keep the Service secure
• Comply with legal obligations

AI Features

bruh. includes AI-assisted features such as brain-dump capture and planning. When you use these features, the relevant text you submit (and the context needed to process it) is sent to our AI provider, Anthropic (Claude), to generate a response. We only send what is needed to perform the requested task. AI output can be inaccurate or incomplete, so please review it before relying on it. We do not use your content to train third-party AI models.

Subprocessors and Third-Party Services

We rely on a small set of trusted service providers ("subprocessors") to run bruh. Each processes data only as needed to provide their service to us:

• Supabase — database, authentication, and hosting of your data
• Vercel — application hosting and delivery
• Stripe — payment processing and subscription billing
• Anthropic (Claude) — AI brain-dump and planning features (your submitted text may be sent to process AI features)
• Google — optional Google Calendar integration via OAuth
• Notion — optional Notion integration (opt-in)
• Slack — optional Slack integration and notifications (opt-in)
• Resend — transactional email delivery
• Upstash — rate limiting and abuse prevention
• Sentry — error monitoring and diagnostics

This list functions as our current subprocessors list. We may update it as our providers change; material changes will be reflected here. For an up-to-date list, contact privacy@getbruh.app.

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

Legal Bases for Processing (EEA / UK)

If you are in the EEA or UK, we process your personal data under the following lawful bases of the GDPR / UK GDPR:

• Contract — to provide the Service you sign up for and process payments
• Legitimate interests — to secure, maintain, and improve the Service and prevent abuse
• Consent — for optional integrations and communications you opt into (you can withdraw consent at any time)
• Legal obligation — to meet tax, accounting, and other legal requirements

Your Rights

Depending on where you live, you may have some or all of the following rights:

• Access — request a copy of the personal data we hold about you, and export your data from Settings
• Rectify — correct inaccurate or incomplete data
• Erase — delete your account and associated data
• Portability — receive your data in a portable, machine-readable format
• Object / Restrict — object to or restrict certain processing
• Withdraw consent — disconnect any integration or opt out of optional communications at any time

To exercise any of these rights, use the in-app Settings or email privacy@getbruh.app. We will not discriminate against you for exercising your rights. EEA/UK users also have the right to lodge a complaint with their local data protection authority.

California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect and how we use it, to request deletion of your personal information, and to opt out of the "sale" or "sharing" of personal information. bruh. does not sell your personal information, and we do not share it for cross-context behavioral advertising. You may exercise your rights via Settings or by emailing privacy@getbruh.app, and we will not discriminate against you for doing so.

International Data Transfers

bruh. is operated from the United States, and your data is processed and stored in the U.S. and other countries where our subprocessors operate. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S. Where required, we rely on appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses (SCCs) or equivalent mechanisms.

Data Retention

We retain your account and content data for as long as your account is active. When you delete your account, we delete your personal data within 30 days, except where we are required to retain certain records (such as payment and tax records) to comply with law. We may keep anonymized, aggregated data that no longer identifies you.

Data Deletion

You can delete your account and all associated data at any time from in-app Settings, which removes your content from our systems. If you need help or prefer to request deletion by email, contact privacy@getbruh.app and we will process your request.

Data Security

Your data is stored using Supabase, which provides encryption in transit and at rest, and payment data is handled by Stripe using bank-level encryption. We use reasonable technical and organizational measures to protect your information. No system is perfectly secure, so we cannot guarantee absolute security, but we work to protect your data and to notify you of any breach as required by law.

Cookies

We use only essential cookies for authentication and session management. We do not use advertising or third-party tracking cookies, and we do not run third-party analytics. Our error-monitoring provider (Sentry) is used for diagnostics only, not advertising or behavioral tracking.

Children's Privacy

bruh. is not directed to children, and we do not knowingly collect personal information from anyone under 13 (or under 16 where a higher age applies under local law). If you believe a child has provided us personal information, contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the "Last updated" date. For material changes affecting your data or billing, we will notify you by email.

Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at privacy@getbruh.app or by mail at Elite LOZ Transportation, LLC, Rocky Mount, Missouri, USA.