Privacy Policy

Last updated: 2 November 2026

Brifco prepares a short, personal morning radio show for you: the weather where you are, news from sources you choose, an overview of your day and traffic on your route. To do this, it needs some information about you. Here we explain what data we collect, why, who helps us process it, how long we keep it and what rights you have.

The controller of your personal data under the EU General Data Protection Regulation (GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2) is Brifco, based in Slovenia (“we”). Questions and requests: info@brifco.app.

1. In short

No sign-up required: you don't need an email address or a password. The only exception is the optional news sign-up on our website (see section 3).
We use your data only to prepare your shows and run the app (and, if you sign up for news on our website, to send you news about Brifco). We don't sell it, we don't use it for advertising and we don't track you across other apps or websites.
Location, calendar, reminders, Google Calendar and notifications are optional — we only use them if you allow them.
You can delete your account and everything stored with it at any time in Settings → Delete account.

2. Your account

When you set up the app, we create an anonymous account for you in our backend. It has a random identifier, with no email address or password. This identifier links your settings and shows on our servers and is also your customer number with our subscription provider (RevenueCat), so we can check whether you have an active subscription.

Because the account is anonymous, we can't look it up by name or email address. If you delete the app or lose your phone before deleting your account, we may not be able to find it or confirm that it's yours.

The app currently doesn't offer sign-in with another provider's account (e.g. Apple or Google). If that changes, we will update this policy first.

3. What data we collect and why

Your profile. The name we greet you with; the app and show language; the areas, subtopics and custom topics you follow; your chosen news sources; host settings (voice, energy, tone, news length); whether the morning show is on and at what time; your home location (place name and coordinates); your usual commute destination with days and arrival time; and your device's time zone. We store them on our servers so we can prepare your shows (including the morning show while the app is closed) and so your settings are kept.

Location. If you choose “use my location” and allow it, the app reads your phone's position once while you're using it (never in the background) to find your town. Your phone's geocoding service (Apple's on iPhone, Google's on Android) turns the position into a place name; if that fails, BigDataCloud does. You can also type a place: the search text is sent to Open-Meteo's place search. We store your home town and its coordinates (if you use location, this is the position measured at that moment) — we don't keep a location history.

Calendar and reminders (optional). If you turn on Calendar and/or Reminders and allow access, the app reads on your phone the events in the next 7 days (title, date, start and end, whether it's all-day, location) and open reminders (title, due date and time) — up to 30 events and 15 reminders. We only read them and never change your calendar. With every show you prepare, we send them to our server so the host can walk you through your day, and they are part of what the AI provider receives (see “Who processes your data”). We look up event locations in Open-Meteo's place search so the show can include weather and traffic at your destinations.

Copy of the daily overview for the morning show. The morning show is prepared by our server while the app is closed, so while it's turned on we keep a copy of the same daily overview on your profile. The app refreshes it when you open it (at most every 30 minutes). Copies older than 3 days are not used. We delete it as soon as you turn off the morning show or both Calendar and Reminders.

Calendar entries can reveal sensitive things (for example a doctor's appointment). We process them only if you turn this feature on, only to read your day to you, and for nothing else.

Google Calendar (optional; not available in every version of the app). If you connect it, you sign in with Google and allow Brifco to read your calendars (read-only) and see your Google account's email address. Our server stores the access token (refresh token) it receives from Google — it is never returned to the app — and uses it to read your events for the next 7 days when preparing a show or showing your calendar on the home screen. We store the account's email address to show you which account is connected. You can disconnect it at any time in Settings: we then revoke access at Google and delete the token. You can also remove access in your Google account. Brifco's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Your shows. For each show we keep the title, the script text, the news used (headline, outlet, link), a weather summary, a few highlights for the home screen (for example the time and short title of your next event), which voice read it, and the audio file — in private storage that only you can access. The script naturally contains your name and what was said about your day, your route, and the weather and traffic where you are.

Notifications (optional). If you allow notifications, we store your device's push notification token and platform so we can tell you when the morning show is ready. If you start a free trial, the app may also set a reminder on your device the day before the trial ends; this never passes through our servers.

Usage and subscription. We log every show prepared (time and type) so we can apply fair-use limits. If you subscribe, we check your subscription status with RevenueCat. Payment is handled by Apple (App Store) or Google (Google Play), depending on where you got the app; we never see your card details.

Technical data. Like any online service, our servers and providers process technical data needed for operation, such as your IP address, and keep technical logs for a short time (for example errors, account identifier and times) for security and troubleshooting.

On your device. The app also keeps your settings on your phone so it works quickly and offline. When you delete the app, this copy is deleted too.

Usage statistics and crash reports. The app sends usage events to PostHog — for example which screens you open, when a show is played or the subscription screen is shown — and, if the app crashes or hits an error, a crash report (the error, the screen and app version, your phone model and operating system version). They are linked to your anonymous account identifier, not to your name, and we use them only to fix bugs and improve the app.

What we don't collect: contacts, photos, health data, background location or advertising identifiers. The app has no ads, and we don't track you across other apps or websites.

4. Legal bases

Contract (Art. 6(1)(b) GDPR): creating your account, storing your profile, preparing, storing and playing shows, the morning show, subscriptions and usage limits.
Consent (Art. 6(1)(a) GDPR, and Art. 9(2)(a) for sensitive calendar entries): device location, calendar, reminders, Google Calendar and notifications. You give it by turning the feature on and allowing access; you can withdraw it at any time in Settings or in your phone's settings. Withdrawal does not affect processing carried out before it.
Consent (Art. 6(1)(a) GDPR): the news sign-up on our website. We use your email address only if you enter it and confirm your consent; you can withdraw it at any time by unsubscribing via the link in an email or by writing to info@brifco.app.
Legitimate interest (Art. 6(1)(f) GDPR): service security, abuse prevention (e.g. daily limits), troubleshooting with technical data and logs, and usage statistics and crash reports to fix bugs and improve the app.
Legal obligations (Art. 6(1)(c) GDPR): where the law requires us to keep or disclose data.

5. Who processes your data

We use the following service providers (processors). Each receives only what it needs for its task, under a data processing agreement:

Supabase (Supabase Inc., USA) — our backend: accounts, database, file storage and server functions. Your database records and files are stored in the EU (Frankfurt, Germany).
OpenRouter (OpenRouter Inc., USA), which forwards requests to the AI model provider we use — currently Anthropic (Anthropic PBC, USA), Claude models. It writes your show's script and checks the topics you enter. It receives: your name, language, local date and time, home town and weather, your destinations and commute, nearby traffic, your daily overview (if turned on), your areas and subtopics, and the headlines of news selected for you.
Google (Google LLC, USA / Google Ireland Ltd.) — Gemini text-to-speech, which reads your show and receives the script text; the Google Calendar API, if you connect it; Google News search, which receives only the search terms of your custom topics, without anything that would identify you; and, on Android, Google Play payments, push notification delivery (Firebase Cloud Messaging) and place names for your location (the Android geocoder).
RevenueCat (RevenueCat Inc., USA) — subscription management; it receives your anonymous account identifier and purchase data from Apple or Google.
PostHog (PostHog Inc., USA) — usage statistics and crash reports; it receives your anonymous account identifier, the usage events and crash reports described above, information about your phone and the app, and your IP address. The data is stored in the EU (Frankfurt, Germany).
Apple (Apple Inc. / Apple Distribution International Ltd.) — App Store payments, push notification delivery (APNs) and place names for your location on iPhone.
Expo (650 Industries Inc., USA) — push notification delivery; it receives your notification token and the notification text (e.g. the show title).
Open-Meteo — weather forecasts and place search; it receives coordinates (home and destinations) and place names. Your phone requests the home screen weather directly, so Open-Meteo also sees your IP address.
BigDataCloud (Australia) — fallback place naming when your phone's geocoder can't find one; it receives coordinates from your phone.
Brevo (France) — collecting sign-ups for news and updates and sending the emails; it receives the email address you enter and a record of your consent.
Cloudflare (Cloudflare, Inc., USA) — hosting of this website and anonymous visit statistics (Cloudflare Web Analytics), which use no cookies and don't track you across other websites; it receives technical visit data (e.g. your IP address, browser and the page visited).

No AI training. Google user data, and all data you provide, is never used to train or improve AI/ML models — by us or by our providers. Requests to Anthropic go through OpenRouter with Zero Data Retention: the provider doesn't store the data or train on it. Gemini runs on Google's paid API, which doesn't use inputs to improve Google's models.

Who we don't send your data to: traffic and news. Our server downloads national traffic data from NAP (the National Access Point, DARS / promet.si data) and the news feeds (RSS) of the outlets you choose, and filters them for you on our servers — it sends them nothing about you. When you open a news story or a map link, you leave the app and that outlet's or map provider's privacy policy applies.

We may also disclose data where the law requires it, for example to a court or a competent authority.

6. Transfers outside the EU

Some of the providers above are based in the USA or elsewhere outside the EU/EEA, so your data may also be processed there. Such transfers are protected by the European Commission's Standard Contractual Clauses and/or the provider's certification under the EU-US Data Privacy Framework, together with additional measures such as encryption in transit.

7. How long we keep data

Profile and settings: until you delete your account.
Shows: we keep your 5 most recent shows (and all from the last 24 hours); older ones are deleted automatically together with their audio. Temporary audio parts created during live playback are deleted automatically later. A morning show intro still waiting to be played is kept until you play it or delete your account.
Copy of the daily overview: replaced on every refresh, and deleted when you turn off the morning show or both Calendar and Reminders.
Google Calendar access: until you disconnect it, Google revokes it or it expires, or until you delete your account.
Notification tokens: until you delete your account or the device stops accepting notifications (e.g. when you remove the app).
Usage records (for counting shows against limits): until you delete your account.
Technical logs: for a short time, as set by our providers (usually a few days, at most a few weeks).
Usage statistics and crash reports: at most 12 months. Deleting your account does not delete them straight away; write to us if you want them deleted sooner.
Email address for news and updates: until you unsubscribe or withdraw your consent.

Deleting the app alone doesn't delete anything on our servers. If you want your data removed, delete your account in Settings before deleting the app.

8. Deleting your account

In Settings → Delete account you can permanently delete your account at any time. This deletes your profile, all shows and their audio files, the copy of your daily overview, usage records, notification tokens and stored Google Calendar access. This cannot be undone.

Deleting your account does not cancel your subscription — billing is handled by Apple or Google, so cancel it in your Apple ID settings or in the Google Play app (Play Store → your profile → Payments & subscriptions → Subscriptions) (see the Terms of Use). If you also want to remove Brifco from the list of connected apps in your Google account, first disconnect Google Calendar or remove it in your Google account.

9. Your rights

Under the GDPR you have the right:

to access your data and receive a copy;
to rectify inaccurate data (you can edit most of it directly in Settings);
to erasure of your data (Settings → Delete account);
to restriction of processing in certain cases;
to data portability — to receive the data you provide to us in a structured, machine-readable format;
to object to processing based on our legitimate interest;
to withdraw consent at any time (turn the feature off in Settings or in your phone's settings; for news emails, unsubscribe via the link in the email or write to info@brifco.app).

To exercise a right, write to info@brifco.app. Because accounts are anonymous, we may ask you for details that let us find your account and confirm that it's yours. We reply within one month.

You also have the right to lodge a complaint with a supervisory authority — in Slovenia this is the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, https://www.ip-rs.si — or with the authority in the country where you live or work.

We don't make decisions about you based solely on automated processing that have legal or similarly significant effects. The AI only writes your show.

10. Children

Brifco is not intended for people under 15 (the age of consent for online services in Slovenia), and we don't knowingly collect their data. If you believe a child under 15 is using the app, write to us and we will delete the data.

11. Security

All connections are encrypted (HTTPS). Each account can access only its own data, audio files are stored privately and the app gets them only through short-lived links, and keys to paid services stay on our servers and never in the app. No system is completely secure, but we protect your data carefully and will notify you of a breach where the law requires it, as well as the competent authority.

12. Changes to this policy

We will update the policy when the app or the law changes. The date at the top shows the latest version. If a change is significant, we will let you know in the app before it takes effect.

13. Contact

Brifco, Slovenia — info@brifco.app