The short version: Bread connects to your Gmail to find airline and hotel booking confirmation emails. We use that information to monitor your flight and hotel prices and save you money. We only look at booking confirmation emails — nothing else. We don't sell your data. Ever.
Bread ("Bread," "we," "us," or "our") is a service that automatically monitors your flight and hotel prices after you book and helps you get the lower rate when prices drop. Our website is savebread.ai. For questions about this policy, contact us at support@savebread.ai.
From Google / Gmail: When you sign in with Google, we receive your name, email address, and a token that allows us to search your Gmail inbox. We use this token only to search for travel booking confirmation emails — from known airline senders (United, Delta, American Airlines, Southwest, JetBlue, Alaska Airlines, and others) and known hotel senders (Hilton, Hyatt, Marriott, IHG, Wyndham, Choice Hotels, and their family brands such as Sheraton, Westin, Courtyard, Hampton Inn, Grand Hyatt, Holiday Inn, Days Inn, Super 8, La Quinta, Comfort Inn, and others).
From your booking confirmation emails: From airline confirmations we extract flight details including airline name, flight number, route, departure date, fare class, ticket number, price paid, and passenger count. From hotel confirmations we extract booking details including hotel name and chain, confirmation number, check-in and check-out dates, room type, rate per night, and rate type (for example, refundable or non-refundable). We store this information to monitor prices and calculate savings.
About how you found us: If you arrive through a link with campaign tags (UTM parameters), we store those tags with your account so we know which channel brought you. After you sign up we may ask how you heard about Bread — answering is optional, and we store your answer if you give one. We use this only to understand which marketing works; it's never shared or used for advertising to you.
We do not:
We'll email you about your bookings and savings — that's the core of the service. From time to time we may also email you about new features, service updates, or issues affecting Bread. Every non-essential email includes an unsubscribe link, and you can opt out of product news at any time.
Your data is stored in a secure Postgres database (hosted by Supabase) on industry-standard infrastructure; the application itself runs on Netlify. We store your flight and hotel booking details and your price-check history. When we contact an airline or hotel on your behalf, we keep a record of that outreach and its outcome so we can track it and avoid duplicate contact. Access tokens are stored encrypted. We retain your data for as long as your account is active. You can delete your account and all associated data at any time by contacting support@savebread.ai — we'll process your request within 24 hours.
We do not sell or rent your personal information, and we never share your Gmail content or booking details with advertisers. We do use Google Ads to measure how well our advertising works and to reach past visitors — see “Cookies and advertising” below. Beyond that, we may share data with:
Our website uses Google Ads (Google's gtag.js) to measure how well our advertising works — for example, to see when a visit that began from one of our ads led to a sign-up — and, where enabled, to show Bread ads to people who have already visited savebread.ai. To do this, Google may set cookies in your browser and receive standard browsing information such as the pages you visit on our site, the ad or link that referred you, and your device, browser, and approximate location.
When you sign up after clicking one of our ads, we use Google's Enhanced Conversions to confirm that conversion. Your email address is hashed — irreversibly scrambled — in your browser before anything is sent, so Google receives only the scrambled value and never your actual email address, and it is used solely to match your signup to the ad you clicked.
We use the same kind of measurement for our Meta (Facebook and Instagram) ads, through the Meta Pixel and Conversions API. Meta may set cookies and receive standard browsing information, and when you sign up after clicking one of our Meta ads we send Meta a hashed — irreversibly scrambled — version of your email address along with technical details such as your IP address and browser (some from your browser, some directly from our server), used only to confirm and attribute that signup. As with Google, Meta never receives your actual email address. You can control ad personalization in your Meta ad preferences.
This is entirely separate from your Gmail and booking data: we never use the contents of your Gmail, or your flight and hotel bookings, for advertising. You can turn off ad personalization at Google's My Ad Center, and you can block or delete cookies in your browser settings.
Bread's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
You have the right to access, correct, or delete your personal data at any time. You can disconnect Bread from your Google account at any time by visiting your Google Account permissions page and revoking Bread's access. To delete your Bread account and all data, email support@savebread.ai.
We may update this policy from time to time. If we make material changes, we'll notify you by email. Continued use of Bread after changes constitutes acceptance of the updated policy.
Questions about this privacy policy? Email us at support@savebread.ai.