Privacy Policy
Last updated: May 10, 2026
This Privacy Policy explains what information Morning Bref (operated by Avara Designs) collects, how we use it, and the choices you have. If you have questions, email hello@morningbref.com.
1. What we collect
Account data. Email address (used for login and to deliver your daily stack).
Onboarding answers. The free-text answers you give in the conversational onboarding (what you do, what you want to learn, content preferences) are stored as your “learning profile” and used to pick your daily stack.
Usage data. Stacks generated for you, items you save, mood toggles, and aggregate engagement (open rate, click-through). We use this to improve recommendations.
Billing data. Stripe handles card processing. We never see or store your card number; we keep only a Stripe customer ID and subscription status.
2. How we use it
To pick and send your daily stack, to keep you logged in, to bill you on paid plans, to send transactional and product emails, and to improve the Service. We do not sell your data.
3. How content is recommended
We use a third-party large-language-model provider to help match content to your learning profile. Your onboarding answers are sent to that provider as part of each recommendation request, but they are not used to train any model and are not retained by the provider beyond the request lifecycle.
4. Sub-processors
We use the following service providers:
- Supabase — database, authentication, file storage
- Netlify — application hosting
- Stripe — payments and subscription billing
- Resend — transactional email delivery
- Anthropic — natural-language matching for content recommendations
- Spotify, Apple Podcasts, YouTube, Audible — content metadata and deep-links
- Cloudflare — DNS and email routing
5. Cookies
We use a small set of cookies that are strictly necessary for the Service to function — primarily an authentication cookie set by Supabase to keep you signed in. We do not use third-party analytics or advertising cookies.
6. Your rights
You can access, correct, export, or delete your account data at any time by emailing hello@morningbref.com. We will respond within 30 days. If you are in the EEA, UK, or California, you have additional rights under GDPR/UK-GDPR/CCPA, including the right to object to certain processing — email us and we’ll honor any valid request.
7. Retention
We keep account and usage data while your account is active and for up to 90 days after deletion to satisfy legal and operational requirements. Billing records may be retained longer where required by tax law.
8. Children
Morning Bref is not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect data from minors. If you believe a minor signed up, email us and we’ll delete the account.
9. Changes
If we materially change this policy we’ll email subscribers and update the “Last updated” date above.
See also our Terms of Service.