Your Privacy Matters
Privacy Policy
We're committed to protecting your personal data. This policy explains how we collect, use, and safeguard your information.
Effective January 16, 2026
Introduction
Primersky LLC ("Primersky," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our services, including the BRF (Best Robot Forever) habit coaching application and related services.
Information We Collect
Account Info
- Email address
- Name (optional)
- Password (encrypted)
Usage Data
- Habit tracking data
- AI conversation history
- App usage statistics
Technical Data
- Device type & OS
- IP address
- Browser type
Biometric Data and Face Recognition
BRF offers an optional face recognition feature that allows the app to identify you and detect your emotional state. This section explains how we handle this sensitive data.
Why We Store Face Data
User Identification
Recognize you when you return to the app
Emotional Coaching
Tailor responses to how you're feeling
Presence Detection
Pause when you step away
Face recognition is entirely optional. You can use all core BRF features without enabling this feature.
How Long We Store Face Data
Face Images & Embeddings
Stored for up to 365 days from last use. After 365 days of inactivity, automatically deleted.
Emotional Analysis Results
Not stored permanently. Processed in real-time during your session only.
Why 365 days? We chose this retention period to balance user convenience (not requiring re-registration after a few months away) with privacy best practices (not storing biometric data indefinitely).
Third-Party Face Data Sharing
We do NOT share your face data with third parties for their own purposes.
We use Amazon Web Services (AWS) as our cloud infrastructure provider to process and store face data:
AWS Rekognition
Face Processing Service- What they receive:
- Face images for processing and face embeddings for storage
- Do they store data?
- Yes, face embeddings in our dedicated, isolated collection
- How long?
- Until we delete them (on your request, account deletion, or after 365 days of inactivity)
- Their practices:
- AWS does not use your data to train their models. See their Privacy Notice and Service Terms.
AWS S3
Image Storage- What they receive:
- Encrypted face images you provide for registration
- Do they store data?
- Yes, as encrypted files that only we can access
- Their practices:
- Data encrypted at rest (AES-256) and in transit. AWS cannot access contents.
No other third parties receive your face data. We do not share with advertisers, data brokers, analytics providers, or any other companies.
Collection & Consent
- ✓ Requires explicit opt-in consent
- ✓ Clear consent prompt before enabling
- ✓ Disable and delete data anytime
What We Collect
- • Face images (1-3 photos from different angles)
- • Face embeddings (512-dimensional vectors)
- • Metadata (registration and last-use timestamps)
Storage & Security
- 🔒 AES-256 encryption at rest
- 🔒 HTTPS only (TLS 1.2+)
- 🔒 Isolated per-user collections
- 🔒 SOC 2 Type II, ISO 27001 certified
Deletion & Your Rights
- ✕ Manual: Settings → Privacy → Delete Face Data
- ✕ Account deletion removes all data
- ✕ Auto-deletion after 365 days inactive
- ✕ Deletion is permanent and unrecoverable
How We Use Your Information
To provide services
Process habits, AI coaching, recommendations
To improve services
Analyze usage patterns, enhance features
To communicate
Service updates, support responses
To process payments
Subscription billing via Stripe
Data Storage and Security
Your data is stored securely using Amazon Web Services (AWS) infrastructure:
- ✓ Encrypted databases (DynamoDB)
- ✓ Secure authentication via AWS Cognito
- ✓ HTTPS encryption for all data transmission
- ✓ Regular security audits and updates
Data Retention
We retain your data based on your subscription tier:
7 days
Free Tier
Conversation history
30 days
Basic Tier
All data
Forever
Pro Tier
Until you delete
You may request deletion of your data at any time by contacting us.
Third-Party Services
We use the following third-party services:
- Amazon Web Services (AWS): Cloud infrastructure and AI services (Bedrock, Polly, Comprehend)
- Stripe: Payment processing
- Apple/Google: App distribution and in-app purchases
These services have their own privacy policies governing how they handle your data.
Your Rights
You have the right to:
Access
Request a copy of your data
Correction
Fix inaccurate data
Deletion
Request data removal
Portability
Get data in portable format
Children's Privacy
Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
Contact Us
If you have questions about this privacy policy or our data practices, please contact us:
Questions? Reach out to privacy@primersky.com