01Who we are
Breaker6 is a voice-first audio platform operated by Breaker6. If you have questions about how we handle your data, contact us at hello@breaker6.com.
02What this is
Breaker6 is currently in private beta. Access is by invitation only. By accepting an invitation and using the service, you agree to this policy.
03What data we collect
Data you give us
- Email address: used to send you a one-time login code. We do not store passwords.
- Audio recordings: the spoken content you record when creating a post. Recordings are uploaded directly to secure cloud storage.
- Post content: working title, chapter structure, and any text you enter during the creation flow.
Data we generate from your content
- Transcripts: your audio is automatically transcribed using Google Cloud Speech-to-Text. Transcripts are stored per chapter and in full.
- Chapter summaries: a short AI-generated summary of each chapter, produced using the Anthropic API. This helps with discovery and navigation.
Data we generate automatically
- Session data: a secure, server-side session cookie issued on login. No persistent tracking cookies.
- Usage events: first-party analytics events such as listen progress, post published, and chapter jumped. These are stored on our own infrastructure and are not shared with third-party analytics services.
- Device and browser information: collected for debugging and compatibility purposes only.
04What we do not collect
- We do not use third-party advertising trackers.
- We do not sell your data.
- We do not collect public engagement counts. All signals (appreciate, save, reply) are private.
- We do not collect payment information during beta. There is no paid tier active at this stage.
05Why we process your data (lawful basis)
| Purpose | Data | Lawful basis |
|---|---|---|
| Authenticating your account | Email address | Legitimate interest (secure access) |
| Providing the service | Audio, transcripts, summaries | Performance of contract (Terms of Service) |
| Improving the product during beta | Usage events | Legitimate interest (product development) |
| Security and abuse prevention | Session data, usage patterns | Legitimate interest |
06Where your data is stored
All data is stored within the European Union on Google Cloud Platform infrastructure, specifically in the europe-west1 (Belgium) region.
- Audio files are stored in Google Cloud Storage.
- Transcripts and account data are stored in Cloud SQL (PostgreSQL).
- No data is stored or processed outside the EU as part of normal operations.
07How long we keep your data
| Data | Retention period |
|---|---|
| Email address | Until account deleted |
| Audio recordings | Until account deleted or post deleted |
| Transcripts and summaries | Until account deleted or post deleted |
| Session data | 30 days from last activity |
| Usage events | 12 months rolling |
| Cloud Run access logs | 30 days |
08Who we share data with
We share data with the following sub-processors only to the extent necessary to operate the service.
| Sub-processor | Purpose | Location |
|---|---|---|
| Google Cloud Platform | Infrastructure, storage, transcription | EU (Belgium) |
| Anthropic | AI chapter summarisation | United States |
| Resend | Transactional email (OTP delivery) | United States |
Where sub-processors are located outside the UK or EU, we rely on Standard Contractual Clauses or equivalent transfer mechanisms.
09Your rights
Under UK GDPR and the Data Protection Act 2018, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Delete your account and associated data (note: during beta, deletion requests are handled manually by contacting us at hello@breaker6.com).
- Object to processing based on legitimate interest.
- Withdraw consent where we rely on consent as a lawful basis.
- Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
To exercise any of these rights, email hello@breaker6.com.
10Security
We use the following measures to protect your data:
- HTTPS enforced across all connections.
- Audio files served via short-lived signed URLs, not public links.
- Session cookies are secure and HttpOnly.
- Credentials and API keys are stored in Google Secret Manager, not in code or environment files.
- Rate limiting is applied to authentication endpoints.
11Beta-specific notice
This is a private beta. The platform is under active development. Features, data practices, and this policy may change. We will notify beta participants of material changes by email before they take effect.
12Changes to this policy
We will publish updated versions of this policy at breaker6.com/privacy. The effective date at the top of this page indicates when the current version came into force.