Privacy Policy

Last updated: 2 November 2026 — version 0.17

1. Who operates breaco

breaco is a service operated by A. Knöpfel, a sole proprietorship under Swiss law.

breaco — A. Knöpfel
1442 Montagny, Switzerland
contact@breaco.app

A. Knöpfel is the data controller within the meaning of the Swiss Federal Act on Data Protection. Any question regarding your personal data may be sent to contact@breaco.app.

2. What this document covers

This policy describes how breaco collects, uses, retains and protects the personal data of:

It applies to anyone whose data processing is governed by Swiss law.

3. The breaco.app website

The website you are viewing sets no advertising cookies and no tracking technologies, and to date includes no audience-measurement tool. No consent banner is required.

The website's contact forms (for companies as well as individuals) collect the information you enter — depending on the case: company name, size, your name, email address, optional message. The data you enter is transmitted to the processor Formspree, Inc. (United States), which forwards it to breaco's email address. It is used solely to get back to you when the service opens, and is never sold or used for any other purpose. You may request its deletion at any time at contact@breaco.app.

The website is hosted by Infomaniak Network SA (Geneva / Zurich, Switzerland), whose technical connection logs temporarily retain visitors' IP addresses for security and access-statistics purposes.

3a. The demonstration visit

breaco offers a demonstration visit available without signing up. In it you explore an entirely fictional company: its employees, posts, groups and events are all invented. No real data of any real person is shown. The visit is read-only; you can react and comment inside this fictional company, without anything leaving it.

To visit, you provide no identifying data: no name, no email address. The demonstration simply places a random technical identifier in your browser (a "browser_id") that lets us count distinct visits and avoid asking you the closing question again if you return. This identifier is linked neither to your name, nor to an email address, nor to your IP address, and serves only to measure use of the demonstration. It is kept for a maximum of 24 months.

The closing question. At the end, a single question is asked: "After this visit, where do you stand?". Your answer is recorded with no personal identifier: no email, no name, no IP address. It cannot identify you and serves only to tell whether the product is understood.

The optional email address. If — and only if — you answer that you would like to learn more for your company, an email field appears. Filling it in is up to you: the visit ends the same way if you leave it empty.
Data collected Your email address, and the answer you have just given
Purpose To get back to you about breaco, at your request
Legal basis Your consent (art. 31 para. 1 FADP; art. 6(1)(a) GDPR), given by writing the address and confirming
Retention 12 months from collection, or until your deletion request if earlier
Disclosure None. These addresses are never sold, transferred, used for advertising, or added to any mailing list

These addresses are kept separately from the anonymous answers, in a closed register not accessible from any interface of the application. You may request their deletion at any time at contact@breaco.app, without having to give a reason (section 15).

Protection against abuse. To prevent automated mass submissions, breaco uses a non-reversible fingerprint of your IP address for a short window. The IP address itself is never stored.

4. Legal basis and scope

The processing of your personal data is governed by the Swiss Federal Act on Data Protection of 25 September 2020 (FADP, SR 235.1) and its implementing ordinance (DPO), in force since 1 September 2023.

If you access breaco from a country in the European Union or the European Economic Area, or if your company is established there, the General Data Protection Regulation (GDPR, EU 2016/679) may also apply alongside the FADP. In the event of divergence, the standard most protective for you applies by default.

5. Two distinct responsibilities: breaco and your company

breaco is a B2B service: your company (the "Client Company") subscribes to the Service for its employees and organises your access to the platform. Two responsibilities coexist, without merging:

For the content that the Client Company brings to life on the platform in the course of its professional use, breaco acts as a processor on behalf of the Client Company, under a data-processing agreement concluded with each Client Company.

6. What data do we collect?

Category Examples of data Source
Account data Email address, password (hashed, never stored in clear text), date of birth Provided by you at sign-up
Profile data Last name, first name, photo, job title, time zone, company and group memberships Provided by you, freely editable
Professional contact details The contact details you choose to display so colleagues can reach you (for example a professional email address or phone number) Provided by you, optional
Published content Posts, comments, reactions, messages, photos, documents shared in a group, events you create and your participations, reminders you write for a group, announcements Written or uploaded voluntarily by you
Relationship data Professional connections, page subscriptions, blocks and mutes of users Result from your voluntary actions
Interests The interests you choose from a list offered by the service Provided by you
Travels Countries visited, year of visit, optional photo and caption, and an optional personal note readable only by you Provided by you
Professional history Positions held, dates, and the matching company chosen from those already present on breaco. Declaring a company makes you findable by people who work there or who have also declared it — this is what lets you find former colleagues, and them find you (section 9) Provided by you
Partner pages If you create a partner page: its name, city, description, photos and opening hours, as well as the link between that page and your account Provided by you
Mutual help between colleagues The carpool trips you offer or look for (the departure and arrival places you enter, the date, the number of seats), the classified ads you post (Co-Market), and the parking spaces you offer during an absence together with the dates of that absence Provided by you
Group funds The group funds you create or take part in: title, target, participants, declared contributions Provided by you
Idea box The ideas you submit (their text, optionally anonymously), your endorsements and your comments Provided by you
Secret Santa Your participation in a draw and, where applicable, your guesses Result from the draw and your actions
Coffee of the week The pairings you are part of, your confirmation that the coffee took place, and your answer to the question "Would you do it again?" Result from the draw and your own actions
Surveys and company life Your answers to network surveys, arrival announcements, and the HR or training announcements you post if you are authorised to Provided by you
Company-space requests When you request the creation of a company space or have a professional email address verified: that address, the company name and the configuration details you provide Provided by you
Preferences Your Coffee-of-the-week participation mode, and the notification categories you wish to receive Provided by you
Acceptance of terms The date of your acceptance, the versions of the terms of use and of this policy in force on that day, and your declaration that you are 16 or older Recorded when you accept
Service usage The days you open breaco, and the screens you view during a day — never the time of day, nor how many times Collected automatically
Company memberships The company you are attached to, and the dates on which you joined and then left it Result from your arrivals and departures
Participation score An indicator calculated from your interactions, visible only to you (section 8) Calculated automatically
Technical data IP address, session identifiers, device and browser type, connection and security logs, and — if you enable them — your browser's push-notification subscription identifier Collected automatically
Reports and moderation The content of reports you make or that are made about you Generated by use of the moderation functions
Error reports When the application hits a failure: the technical error message, the page concerned, the browser type and your account identifier. No IP address is recorded on these reports Collected automatically on an anomaly

breaco does not ask for or require any sensitive data within the meaning of art. 5(c) FADP (health, religious or political opinions, trade-union membership, racial or ethnic origin, biometric or genetic data, criminal proceedings or sanctions) in order to function. You remain free as to the content of your posts and messages: if you choose to mention such information voluntarily, it is treated like the rest of your content, under the visibility settings you have chosen. We encourage you not to publish sensitive data where it is not necessary.

The places you declare. breaco does not geolocate you: the Service never measures your position (no GPS coordinates). Some features do rely on places that you enter yourself: the departure and arrival places of a carpool trip, the address or city of a partner page, the location of an event, or your time zone. These are declared pieces of information, not a measured location.

Where your images are served. The photos you publish, your travel photos, and the photos and documents shared inside a group are kept in private storage: viewing them goes through the same authorisation rules as the content they belong to. Three deliberate exceptions are served from public storage, i.e. accessible to anyone who knows the exact address, without being listed or indexed: your profile photo, the images of partner pages, and the cover photo of a group or community.

7. Why do we process your data?

Purpose Legal basis (FADP)
Create and manage your account, authenticate you Performance of the contract (art. 31 para. 2(a))
Operate the social and mutual-help features of your company, and enable connections with people with whom you share a common point within the meaning of section 9 Performance of the contract
Ensure the security of the platform, prevent fraud and abuse Overriding legitimate interest (art. 31 para. 1)
Moderate reported content and enforce the terms of use Overriding legitimate interest
Produce aggregated and anonymised statistics for the Client Company Overriding legitimate interest
Improve the service, fix anomalies, develop new features Overriding legitimate interest
Detect and fix application failures from error reports Overriding legitimate interest
Host and display the partner pages you create Performance of the contract
Verify a professional email address and process a company-space creation request Pre-contractual measures / performance of the contract
Keep proof of your acceptance of the terms and of your age declaration Legal obligation / overriding legitimate interest
Organise the Coffee of the week and pair you with other people in your scope Performance of the contract
Produce Coffee-of-the-week participation statistics, aggregated and from ten people upward Overriding legitimate interest
Measure adoption of the service and understand which features are used, in order to improve it Overriding legitimate interest
Send you service-related communications Performance of the contract
Handle your contact request sent from the website Pre-contractual measures / legitimate interest
Get back to a person who asked to learn more at the end of the demonstration visit (section 3a) Consent (art. 31 para. 1)
Bill the subscription to the Client Company and keep accounts Performance of the contract / legal obligation
Comply with our legal obligations Legal obligation

The participation score and the statistics sent to administrators never allow private individual interactions to be identified. breaco never exposes a public ranking based on personal data.

8. The monthly adoption summary and the participation score

The Client Company receives a monthly adoption summary: number of active employees, number of active groups, volumes of posts, reactions, recognitions, events and photos. This summary is exclusively aggregated: it never indicates who posted, who reacted, or who did nothing. It is produced only from ten people upward, so that no small group becomes identifiable. The same summary is published to all of the company's employees.

Two clarifications on these figures. An active group means a company group — excluding independent groups — that, during the month considered, received at least one post, event or photo. And the volumes of reactions and photos cover items still present on the calculation date: a reaction or photo that has been permanently removed no longer counts.

Your participation score is a personal indicator calculated from your interactions. It is visible only to you, is communicated neither to your company nor to your colleagues in any individual form, gates access to no feature, and is never used to produce a ranking. Should the way it works change, this policy would be updated before any deployment.

8a. How we measure use of the service

To know whether breaco works, we need two things: which days people open the service, and which screens they view. Here is exactly what is recorded, and what is not.

Days, not times. We record that on a given day you opened breaco. Not the time, nor how many times. These days are kept 24 months, then erased, and they disappear with your account if you delete it.

Screens, by category and for one day. We record that during a day you viewed a type of screen — the news feed, messaging, a group, a profile. Never which one: "a group", not which group; "a profile", not whose; "a conversation", not with whom. This named information is kept for seven days at most, the time to consolidate it, then it is deleted.

What remains afterward no longer concerns you. Once consolidated, these figures become totals per company and per screen, with no personal identifier — and they are produced only from ten people upward, like the monthly summary. Below that, no figure is kept, not even a partial one: in a team of four, "one person opened the gallery" names someone.

Your company sees none of this. Neither your connection days, nor your screens, in aggregated form or any other. These measurements serve breaco to improve its product, and no one else. None of them feed the monthly summary in section 8.

9. What your company can see about you

breaco applies a strict and non-negotiable principle in its technical architecture: an administrator gains no extension of their read rights by virtue of their status. A group or company administrator sees exactly what any member of the same scope sees — no more, no less. This principle is enforced technically, at the level of the database security rules, and not merely described in this document.

Data Company / group administrator breaco support
Name, job title, group memberships Yes Yes
Posts shared at group / company / breaco level Yes Yes
Interests, countries visited and travel photos Yes, like any colleague Yes
Aggregated and anonymised statistics Yes Yes
Existence and reason of a report concerning you Yes Yes
Private messages and conversations No No
Personal connections No No
Individual participation score No No
Professional history No No
Personal note attached to a travel No No
Coffee-of-the-week pairings No No
Your answer to "Would you do it again?" No No
Your connection days and the screens you view No No

In the event of a report, the administrator of the group concerned sees only the existence of the report and its reason, never the reported content; they can remove the reported person from their group. breaco's support team has limited technical access for support, abuse-prevention and moderation, logged in an audit trail, and never has access to the content of private messages.

Absences and mutual help. Some mutual-help features are, by nature, shared with the people in your scope, because that is their very purpose: the carpool trips and classified ads you post are visible to your colleagues. Likewise, if you flag an upcoming absence — for example to offer your parking space during that time — your company colleagues see the period. You can keep an absence silent: it is then not broadcast.

Beyond your company. Three situations fall outside your company's scope, and they all result from your own choices. A confirmed connection — a person whose request you accepted, including in another company — sees your interests and the countries you have visited, exactly as a colleague would; they do not see your personal note. And a partner page you create is, by nature, an open page inside breaco: its content, as well as the fact that you own it, are visible to anyone connected to the service, whatever their company. You can delete a partner page at any time from Me → Settings. Finally, a company you have declared in your professional history makes you findable by people attached to that company, currently or in their own history — this is what lets former colleagues find one another, and it is explained just below.

Who can find you. breaco is not an open directory, and that is not merely an intention: it is a rule written into the database. You are findable, by your name, only by a person with whom you share at least one common point:

A person with whom you share none of these points does not find you: the search returns nothing, not a reduced profile. If they come across your name under a post you deliberately shared at breaco scale, they see the author of that post — your name and photo — but viewing your profile shows them neither your job title, nor your company.

In other words: on breaco, you cannot reach someone with whom you have no real link. This is the deliberate difference with open social networks, and it is enforced where it cannot be argued with — the database read rules, not the display.

9a. The Coffee of the week

Your company, or your team, can enable the Coffee of the week: at regular intervals, breaco pairs the people concerned, within the same scope, so they can have a coffee together. Nothing happens until an administrator has enabled it. A meeting brings together two to four people.

Taking part is a choice, and so is not taking part. Three modes exist — take part every time, decide each round, or do not take part — changeable at any time from Me → Settings. No one is paired without having said yes, one way or another. A non-answer is not a yes.

What is recorded. The pairing itself (the people concerned, the round, the date), your confirmation that the coffee took place, your answer to "Would you do it again?", and your decision to take part or not each round. Nothing else. The content of your exchanges is an ordinary private message and falls under section 9.

Who can read a pairing: the people concerned, and no one else. Not your team administrator, not your company administrator, not the breaco team, not a technical administrator of the platform. This limit is not a display setting. The table that holds the pairings is open to no account: no application, no administrator, no technical account can read it directly, and the attempt fails before the question "who is this?" can even be asked. The only information that reaches you is what concerns you, served one item at a time. No one at breaco can draw up the list of who was paired with whom.

Your answer to "Would you do it again?" is readable only by you — not even by the other people in that meeting.

What an administrator sees. Three numbers, and only from ten participants upward: how many people took part in the last round, how many pairings ended in a confirmed meeting, and the total number of coffees since activation. Below ten, no figure is shown — neither partial nor rounded — so that no small team becomes identifiable, exactly as for the monthly adoption summary (section 8).

Notifications. Three at most per round: the invitation to answer, the announcement of your pairing, and a single reminder. You can turn these off without turning off breaco's other notifications, from Me → Settings.

Retention. Your participation mode and your round-by-round decisions are deleted with your account. The pairing, however, concerns the people of the meeting: like a message, it survives the deletion of your account — your answer to "Would you do it again?" stays attached to it without ever becoming readable, neither to the other people in that meeting nor to anyone (section 13).

10. Automated decisions and profiling

Two processes are automated: the calculation of the participation score, and the Coffee-of-the-week matching — which pairs the people concerned according to fixed criteria (same scope, declared participation, priority to people who have not yet met). Neither has any effect on your rights, your access or your employment relationship. Apart from these two processes, breaco makes no automated individual decision producing legal effects or significantly affecting the user (art. 21 FADP). The automated processes rely on predefined and documented rules, with no profiling or assessment of professional performance.

11. To whom is your data disclosed?

Your data is accessible to the other users of your company and to your confirmed connections according to the visibility settings you choose (section 9), to the administrators of your scope and to the support team within the strict limits of section 9, to our technical processors listed below, and to the competent authorities if the law requires it.

Processor Scope Role Data concerned Hosting
Supabase Application and demonstration visit Database, authentication, file storage, server functions, real-time All Service data, including email addresses left at the end of a demonstration visit Frankfurt, Germany (EU)
Resend Application Transactional emails: account confirmation, password reset, account-deletion confirmation, verification code for a professional email address Email address, content of the transactional email United States
Infomaniak Network SA Website and application Hosting of the breaco.app website, the legal pages and the breaco application served at app.breaco.app Technical connection data; authentication token passing when a link received by email is opened Switzerland (Geneva / Zurich)
Formspree, Inc. Website Routing of the breaco.app contact forms Name, company, company size, email address, optional message United States
GIPHY Application Search and display of animated GIFs. When a GIF is displayed, your browser loads it directly from GIPHY's servers, which then receive your IP address Search term, reader's IP address United States
Push-notification services (Google, Apple, Mozilla, Microsoft, depending on your browser) Application Deliver to your browser the web notifications you have enabled Technical subscription identifier (endpoint), time of sending — never the content of the notification International
OpenStreetMap / Nominatim Application Suggest cities when creating a partner page Search term, IP address EU / United Kingdom

The "Scope" column indicates where each processor operates. If you only browse the breaco.app website without using the application, only Infomaniak and — if you fill in a form — Formspree process data about you. The other processors operate only from use of the application, except for an email address left voluntarily at the end of a demonstration visit, which is recorded at Supabase (section 3a).

To date, the Service integrates no payment provider, no third-party behavioural-analytics tool, and no third-party artificial-intelligence service processing personal data. If any of these is introduced, this policy will be updated before it goes into service.

breaco never sells personal data to third parties and never uses it for advertising.

12. Is your data transferred abroad?

The database, authentication, file storage and server functions (Supabase) are hosted in Frankfurt, Germany, a country recognised as adequate by the Swiss Federal Council (annex 1 DPO): no additional safeguard is required (art. 16-17 FADP).

Resend, Formspree and GIPHY process data in the United States, a country without a general adequacy recognition. These transfers are governed by those processors' data-processing agreements, incorporating standard contractual clauses compliant with art. 16-17 FADP. Your browser's push-notification services may be located outside Switzerland and the European Union; they receive only a technical subscription identifier, never the content of the notifications. Nominatim (OpenStreetMap) is hosted in the European Union and the United Kingdom, recognised as adequate.

Infomaniak hosts exclusively in Switzerland ("Swiss Hosting" certification): no transfer abroad for this component.

On iOS and Android, breaco will be distributed as a native application: the interface is embedded in the binary installed from the App Store or Google Play, without going through a web server in use.

13. Retention and deletion of your account

Data is kept for the duration of active use of the account. You can delete your account from Me → Settings, or by simple request (section 15).

Deletion happens in two stages. Your account is first deactivated immediately: you are no longer visible or reachable on breaco. After a short period, of the order of two weeks, which leaves you the possibility of reversing your decision, the erasure becomes definitive and irreversible.

What is erased. Your identity is deleted: last name, first name and composite name, photo, job title, date of birth, time zone, professional contact details and account information. Your login identifier is deleted, so that the account can no longer be restored or reconnected. An anonymous, permanent marker remains, for the sole purpose that content shared with others can continue to exist without being attached to you: wherever you used to appear, you are now shown as "Deleted account".

What is kept, detached from you. The content you shared with other people continues to exist for them, without your name or photo, under the label "Deleted account": your posts and comments, the messages you sent (which remain visible to their recipients), the photos and documents shared in a group, the events you created and the reminders you had scheduled for a group (which continue to fire), announcements, idea-box ideas (including anonymous ones), group funds, the pairings of an already-drawn Secret Santa, your network-survey answers (anonymised), and the company-space requests you had made, kept in anonymised form, without your professional email address. The Coffee-of-the-week pairing, which concerns the people of the meeting (two to four), survives like a message; your answer to "Would you do it again?" stays attached to it without being readable by anyone (section 9a).

The honest limit of detachment. Removing your name from displays does not rewrite the past. If your first name or a signature appears in the text of a post, message or comment you wrote, that text stays as you wrote it. Likewise, if another person had mentioned you in their own content, or if a Coffee notification already sent carried your first name, that first name may remain in those specific items. breaco does not alter content written by users.

What is deleted with you. Your professional connections, your reactions, your event participations, your carpool trips and classified ads (Co-Market), your parking-space reservations, your Coffee-of-the-week participation mode and your round-by-round decisions, your interests, your notification preferences, your notifications, your group join requests, your travels (including your personal notes), your endorsements of ideas, and your own participation in a Secret Santa.

Your images. The photos you published outside a group are erased, including from storage; a post that contained only that photo disappears. Your travel photos are erased from storage. By contrast, the photos and documents shared inside a group, as well as the images of a partner page, remain, because they belong to a collective or open space.

What is kept for reasons of proof or security. The history of your company memberships — who was part of which company, and on which dates — is kept, because it constitutes proof. The partner pages you own are transferred to one of their invited administrators if there is one, and deleted with their content otherwise. Technical logs are kept for as long as strictly necessary for security. Backup copies by the host may temporarily remain according to its cycle, without ever being consulted outside incident recovery.

Email addresses left at the end of a demonstration visit are kept 12 months (section 3a). Statutory accounting and tax retention periods prevail where applicable.

14. How do we protect your data?

Technical and organisational measures compliant with art. 7 FADP (data protection by design and by default): hashed passwords, data isolation at the level of each database row with no exception for administrators (section 9), systematic server-side authorisation checks, rate limiting on sensitive actions, strict role separation, no secret exposed on the client side. In accordance with art. 24 FADP, in the event of a data-security breach entailing a high risk, the Federal Commissioner is notified and the persons concerned are informed where the law requires it or where it is necessary for their protection.

15. What are your rights?

You have a right of access, rectification, restriction and objection, deletion (section 13), data portability (art. 28 FADP), withdrawal of consent, and the right to lodge a complaint with the supervisory authority. These rights are exercised free of charge, in writing to contact@breaco.app. A reply is provided within 30 days. Proof of identity may be requested to verify your identity.

16. Cookies and similar technologies

The application uses only essential technical technologies (session, preferences), stored locally on your device. No advertising cookie or third-party tracker is set, neither on the website nor in the application. Notifications (reminders, transactional emails, browser notifications) rely on the categories you enable and are not trackers; browser notifications, when you allow them, pass through your browser's push-notification service (section 11).

17. Use by minors

The Service is for professional use and intended for employees invited by a Client Company, or for people creating an independent group.

It is reserved for people aged 16 or older, the threshold set by the GDPR for the consent of minors in the information society and above the minimum working age applicable in Switzerland. The person must also meet the legal working age in their jurisdiction.

At account creation, an express age declaration is requested and recorded together with acceptance of the terms of use. breaco asks for no supporting document and performs no identity verification: no additional data is collected for this purpose. The date of birth entered in the profile serves for birthdays: only the day and month are visible to your colleagues, the year stays private. The application rejects a date corresponding to under 16, but this is a consistency check on a declared piece of information, not an age verification. If breaco learns that an account was created by a person under 16, that account is deleted.

18. Changes to this policy

This policy may be amended to reflect changes to the Service or the regulation. Any substantial change is notified in the application before it takes effect.

19. Contact and supervisory authority

breaco — A. Knöpfel
1442 Montagny, Switzerland
contact@breaco.app

For any question about the use your employer specifically makes of breaco (section 5), please contact them directly.

Swiss supervisory authority: Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern — www.edoeb.admin.ch — tel. +41 58 462 43 95.