Introduction
BrainWeight ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect when you use the BrainWeight mobile application, how we use it, and your rights in relation to it. Please read this policy carefully before using the App. By continuing to use BrainWeight, you acknowledge that you have read and understood this policy.
We may update this policy from time to time. When we make material changes, we will update the effective date above and notify you through the App. Your continued use of BrainWeight after any changes take effect constitutes your acceptance of the revised policy.
Information We Collect
When you create an account using Google Sign-In, we receive your name, email address, and profile photo from your Google account. We use this to identify you and personalise your experience.
As you use the App, we collect information about your activity — including your answers to challenges, your Brain Score, streak history, hint usage, and challenge completion status. This is the core of what makes BrainWeight work: without it, we cannot track your progress or provide a meaningful experience.
We also collect your device's push notification token when you grant notification permissions, which we store on our servers solely to deliver streak reminders and other App notifications. If you subscribe to BrainWeight Pro, we receive confirmation of your subscription status from RevenueCat. We never receive or store your payment card details at any point.
Some data never leaves your device. Daily hint counts and certain session data are stored locally and are not transmitted to our servers. This data is deleted when you uninstall the App.
We do not collect your location, contacts, photos, biometric data, or any information about your activity outside of BrainWeight.
How We Use Your Information
We use the information we collect to operate and deliver the App — to authenticate your account, track your progress, calculate your Brain Score, manage your subscription, and send you notifications if you have enabled them. We also use it to understand how people use BrainWeight so we can improve it over time.
We will not use your information for purposes unrelated to the App without your consent.
Advertising
BrainWeight displays native advertisements to free users, served through Google AdMob. AdMob may collect certain device information, including your advertising identifier (IDFA on iOS), to serve relevant ads. You can limit this by going to Settings > Privacy & Security > Tracking on your iOS device and disabling "Allow Apps to Request to Track." BrainWeight Pro subscribers do not see ads.
Third-Party Services
BrainWeight relies on a small number of third-party services to function. Each processes your data in accordance with their own privacy policies, which we encourage you to review.
Google Firebase handles authentication and data storage. RevenueCat manages subscription entitlements. Apple processes in-app purchases and delivers push notifications through APNs. Google AdMob serves advertisements to free users. None of these parties are permitted to use your data for their own purposes beyond what is necessary to provide their service to us.
Sharing Your Information
We do not sell your personal information. We do not share it with third parties for their own marketing purposes. We share your data only with the service providers listed above, who process it strictly on our behalf, and in cases where we are legally required to disclose it — for example, in response to a court order or to protect the safety of our users.
If BrainWeight is ever involved in a merger or acquisition, we will notify you before your data is transferred to or becomes subject to a different privacy policy.
Data Retention
We retain your account and progress data for as long as your account is active. If you request account deletion, your data will be permanently removed from our servers within 30 days. Encrypted backups may retain residual copies for up to 90 days, after which they are permanently purged. RevenueCat may retain transaction records beyond this period as required by financial regulations.
Security
We use industry-standard security measures to protect your data, including TLS encryption for data in transit, Firebase security rules to restrict unauthorised access, and authentication controls. No system is perfectly secure, and we cannot guarantee the absolute security of your information. In the event of a breach that is likely to affect your rights, we will notify you and any relevant authorities as required by law.
Push Notifications
If you grant notification permissions, we use your push token to send streak reminders and other App updates. You can opt out at any time by going to Settings > Notifications > BrainWeight on your device. Disabling notifications has no effect on any other part of the App.
International Transfers
Your data may be processed in countries other than your own. Firebase stores data on Google servers, which may be located in the United States. Google and RevenueCat participate in the EU–U.S. Data Privacy Framework and implement Standard Contractual Clauses approved by the European Commission for transfers from the EEA and UK.
Your Rights
Regardless of where you live, you have the right to request access to the personal data we hold about you, ask us to correct inaccurate data, and request deletion of your account and associated data.
If you are in the European Economic Area or the United Kingdom, you have additional rights under the GDPR and UK GDPR: the right to data portability, the right to restrict or object to certain processing, and the right not to be subject to automated decision-making that significantly affects you. You may also lodge a complaint with your local supervisory authority. A list of EEA authorities is available at edpb.europa.eu. The UK supervisory authority is the Information Commissioner's Office at ico.org.uk.
If you are a California resident, the CCPA and CPRA give you the right to know what personal information we collect and how it is used, the right to delete your data, the right to correct inaccurate data, and the right to opt out of the sale of your personal information. We do not sell personal information. We will not discriminate against you for exercising any of these rights. To submit a California privacy request, email us with the subject line "California Privacy Request" and we will respond within 45 days.
If you are in Australia, the Privacy Act 1988 and Australian Privacy Principles apply. You may contact the Office of the Australian Information Commissioner at oaic.gov.au if you believe your privacy rights have been breached.
We process your data on the legal bases of contractual necessity (to provide the App), legitimate interests (to improve and secure the App), and consent (for notifications). You may withdraw consent at any time without affecting the lawfulness of prior processing. We will respond to all privacy-related requests within 30 days.
Contact
If you have questions about this policy or want to exercise any of your rights, please contact us at brainweight.co@gmail.com.
For users in the EEA and UK, BrainWeight acts as the Data Controller in respect of your personal data.