Privacy Policy
Effective Date: June 19, 2026
1. Information We Collect
1.1 Information You Provide
When you use Brain Coach, we collect your email address (used to send one-time sign-in codes and service emails), any responses you give in our intro questionnaire (e.g., your goals and general background), and your exercise activity and progress (which exercises you do, completion, and streaks). We do not ask for medical diagnoses or clinical records.
1.2 Information Collected Automatically
We record device and browser information (model, OS/browser version, identifiers), usage patterns (which screens you view, which features you tap, session length), crash and performance diagnostics, and your subscription status as reported by Stripe through RevenueCat.
1.3 Information Collected with Your Consent
Microphone: Used only during speaking exercises, and only when you tap the microphone. Your speech is processed in your browser to check your answer and is not recorded or stored by us. On some browsers, speech recognition is performed by the browser's own speech service under that browser's privacy terms.
Push notifications: If you allow browser/PWA notifications, we store a push subscription token to deliver practice reminders and encouragement. You can turn these off at any time in your browser or device settings.
2. How We Use Your Information
We use your information to provide and personalize the Brain Coach service, sync your progress, deliver reminders you've opted into, process subscriptions, understand and improve how the app is used, send service emails (sign-in codes, receipts), and detect fraud or abuse.
Where your exercise activity relates to your recovery, we treat it with care and use it only to run and improve the practice experience — not to make any medical assessment.
3. Third-Party Services
- Supabase — authentication (email codes) and encrypted data storage
- RevenueCat — subscription management and entitlement checks
- Stripe — payment processing
- Mixpanel — product analytics (event-level usage)
Each provider processes your information under its own privacy terms and our data processing agreements.
4. Data Sharing
We do not sell your personal information. Sharing occurs only with the service providers listed above, when required by law, or in connection with a corporate transaction (merger or acquisition) where the acquiring entity assumes the obligations of this policy.
5. Data Retention
Account data persists for as long as your account is open. If you delete your account, we remove your information within 30 days, except where retention is legally required (e.g. tax records related to subscriptions). Anonymized aggregate analytics may be retained for product improvement.
6. Data Security
We protect your data with encrypted transmission (HTTPS/TLS), passwordless sign-in (one-time email codes, so there is no password to leak), row-level security on the Supabase database, and signed-token authentication. No method of transmission or storage is 100% secure, but we apply industry-standard controls and review them regularly.
7. Cookies and Local Storage
Brain Coach uses essential browser storage to keep you signed in and to save your progress on your device. Our website and intro questionnaire may use analytics and, where you consent, advertising cookies. You can control non-essential cookies through our consent banner and your browser settings.
8. Your Rights (EEA/EU Users)
Under the GDPR you have rights to access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. To exercise any of these, email [email protected]; we respond within 30 days. Our legal bases are contract performance (providing the service), your consent (microphone, push, non-essential cookies), and our legitimate interests (analytics, security, fraud prevention).
9. Your Rights (California Users)
The CCPA grants California residents the rights to know what personal information we collect, request deletion, opt out of sale (we do not sell personal information), and non-discrimination for exercising these rights.
10. Children's Privacy
Brain Coach is intended for adults aged 18 or older. It is not directed at children. If we discover an account was created by someone under 18, we will delete it.
11. International Data Transfers
Your information may be processed in the European Union, the United States, or other regions where our service providers operate. We rely on Standard Contractual Clauses or equivalent safeguards where required by the GDPR.
12. Changes to This Privacy Policy
We post updates here with a revised effective date and surface material changes in-app or by email. Continued use of Brain Coach after the effective date constitutes acceptance.