Privacy Policy

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use the BrainMaxing mobile application, the website at https://brainmaxing.ai, and related services (together, the “Service”). By using the Service, you agree to this Privacy Policy. If you do not agree, do not use the Service.

This Privacy Policy is incorporated into and subject to our Terms of Use.

1. Who we are and how to contact us

Evergreen Consistency LLC is the controller responsible for your personal information.

• Email (support, privacy & legal): ben@brainmaxing.ai

2. A quick summary

• We collect the account information you choose to provide (via Sign in with Apple or Google), the learning content you enter (such as the topics you want to learn), your in-app progress (lessons, XP, streaks, reminder settings), and limited technical/usage data needed to run the Service.
• We use Anthropic’s Claude AI to generate your lessons. The topics and inputs you provide are sent to Anthropic to create that content.
• We use Supabase to host our database and authentication, RevenueCat to manage subscriptions, Apple/Google for sign-in and billing, and Vercel and Resend to host our website and send waitlist email.
• We do not sell your personal information, and we do not use it for cross-context behavioral advertising.
• You can delete your data at any time from within the app (“You” tab → “Delete my data”).
• The Service is intended for users 13 and older and is not directed to children under 13.

This summary is provided for convenience only and does not replace the full policy set out below.

3. Information we collect

3.1 Information you provide to us

• Account information. When you create an account using Sign in with Apple or Google Sign-In, we receive identifiers such as a user ID and, depending on your settings and choices, your name and email address. With Sign in with Apple, you may choose to hide your email (Apple provides a private relay address). You may also use parts of the Service on an anonymous basis without signing in.
• Waitlist sign-ups. If you join our waitlist on the website (https://brainmaxing.ai), we collect the email address you submit so we can record your interest and send you a confirmation and a one-time notification when the app is available.
• Learning content and inputs. The topics, prompts, motivations, answers, and other text you enter to generate or complete lessons.
• Progress and preferences. Your learning paths, completed lessons, experience points (XP), streaks, review items, and notification/reminder preferences.
• Communications. If you contact us (e.g., for support), we receive your message and contact details.

3.2 Information we collect automatically

• Device and technical data. Such as device type, operating system and version, app version, language settings, time zone, and general diagnostic information necessary to operate and secure the Service.
• Usage data. Limited information about how you interact with the Service (for example, lessons generated or completed), used to provide features like streaks and progress.
• Network information. Our infrastructure providers (e.g., Supabase and Vercel, which hosts our website) may process your IP address and connection metadata to route, secure, and deliver the Service.

We do not currently use third-party analytics, advertising, or crash-reporting SDKs in the app. If this changes, we will update this Policy and the disclosures below.

3.3 Information from third parties

• Authentication providers (Apple, Google). Identifiers and any profile information you authorize them to share when you sign in.
• RevenueCat / app stores. Subscription and purchase status, transaction identifiers, trial eligibility, and renewal/cancellation events. We do not receive or store your full credit-card number; payments are processed by Apple (App Store) or Google (Play), subject to their terms.

3.4 Push notifications

BrainMaxing reminders are local notifications scheduled on your device. We do not operate a remote push server and do not collect device push tokens for marketing. You can disable notifications at any time in your device settings or in the app.

4. How we use your information

We use personal information to:

1. Provide the Service — create and maintain your account, generate lessons, save progress, sync across your devices, and deliver reminders you enable.
2. Generate AI content — transmit your inputs to our AI provider to produce lessons and related content (see Section 5).
3. Process subscriptions — manage free trials, subscriptions, renewals, and entitlements through RevenueCat and the app stores.
4. Communicate with you — respond to support requests and send service-related messages (e.g., changes to terms).
5. Maintain safety and security — detect, prevent, and address fraud, abuse, security incidents, and technical issues.
6. Improve the Service — understand how features are used and develop new features, using the minimum data necessary.
7. Comply with law — meet legal obligations and enforce our agreements.

Legal bases (EEA/UK users)

Where the GDPR or UK GDPR applies, we rely on: performance of a contract (to provide the Service you request); legitimate interests (to secure, maintain, and improve the Service, balanced against your rights); consent (e.g., for optional features you enable, withdrawable at any time); and legal obligation.

5. AI processing of your inputs

To generate lessons and learning content, the topics and inputs you provide are transmitted to Anthropic, PBC (“Anthropic”), the provider of the Claude AI models, acting as our service provider/processor. Under Anthropic’s then-current commercial terms for its API, your inputs and the generated outputs are not used to train Anthropic’s models.

6. How we share and disclose information

We share personal information only as described here. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

• Service providers / subprocessors. Vendors who process data on our behalf under contract (see the table below).
• Authentication and payments. Apple and Google, to authenticate you and process purchases.
• Legal and safety. When we believe disclosure is necessary to comply with applicable law, regulation, legal process, or governmental request; to enforce our Terms; or to protect the rights, property, safety, or security of Evergreen Consistency, our users, or the public.
• Business transfers. In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as permitted by law. We will notify you of any change in ownership or use of your personal information.
• With your direction or consent. When you ask us to share, or otherwise consent.

Service providers / subprocessors

We may update this list as our providers change; the current version of this Policy controls.

7. Data retention

We keep personal information for as long as your account is active or as needed to provide the Service, and thereafter as required to comply with our legal obligations, resolve disputes, prevent fraud and abuse, and enforce our agreements. When you delete your data (Section 9), we delete or de-identify it from our active systems within a commercially reasonable period, except where retention is required by law or for legitimate, narrowly tailored purposes (such as records of transactions). Residual copies may persist in backups for a limited time before being overwritten.

8. How we protect your information

We use technical and organizational measures designed to protect personal information, including encryption in transit, access controls, and reliance on reputable infrastructure providers. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your device and any sign-in credentials secure.

9. Your choices and rights

Everyone

• Delete your data. In the app, go to the “You” tab → “Delete my data” to erase your paths, lessons, streak, XP, and account data from your device and our cloud. This action is permanent.
• Notifications. Turn reminders on or off in the app (“You” tab) or in your device settings.
• Account / sign-in. You may use the Service anonymously or sign in; you can stop using the Service at any time.
• Access and correction. Contact us at ben@brainmaxing.ai to request access to or correction of your information.

U.S. state privacy rights (California, Virginia, Colorado, Connecticut, Utah, and other states with applicable laws)

Depending on your state of residence, you may have the right to: know/access the personal information we collect; correct inaccuracies; delete your information; obtain a copy/portability; and opt out of “sale,” “sharing,” or targeted advertising and certain profiling. We do not sell or share personal information as those terms are defined under the California Consumer Privacy Act (as amended by the CPRA) or similar laws, and we do not process sensitive personal information for purposes that require a separate opt-out.

To exercise these rights, contact us at ben@brainmaxing.ai. We will not discriminate against you for exercising your rights. You may use an authorized agent where permitted by law. We will verify your request using information associated with your account. If we deny a request, you may appeal by replying to our decision; California residents may also contact the California Privacy Protection Agency or Attorney General.

EEA/UK rights

If you are in the European Economic Area or the United Kingdom, you have the rights to access, rectify, erase, restrict, or object to processing, to data portability, and to withdraw consent. You also have the right to lodge a complaint with your local supervisory authority. To exercise these rights, contact ben@brainmaxing.ai.

10. International data transfers

We are based in the United States and process and store information in the United States and other countries where our service providers operate. If you access the Service from outside the United States, you understand your information will be transferred to and processed in the United States, where data-protection laws may differ from those in your jurisdiction. Where required, we rely on appropriate safeguards (such as the European Commission’s Standard Contractual Clauses) for international transfers.

11. Children’s privacy

The Service is intended for users 13 years of age and older and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has provided us personal information, contact us at ben@brainmaxing.ai and we will delete it. If you are between 13 and the age of majority in your jurisdiction, you may use the Service only with the involvement and consent of a parent or guardian. We do not knowingly “sell” or “share” the personal information of consumers under 16.

12. Third-party links and services

The Service may link to or interoperate with third-party services (such as Apple, Google, and Anthropic). Their handling of your information is governed by their own privacy policies, not this one. We encourage you to review them:

• Apple: https://www.apple.com/legal/privacy/
• Google: https://policies.google.com/privacy
• Anthropic: https://www.anthropic.com/legal/privacy
• RevenueCat: https://www.revenuecat.com/privacy
• Supabase: https://supabase.com/privacy
• Vercel: https://vercel.com/legal/privacy-policy
• Resend: https://resend.com/legal/privacy-policy

13. Do Not Track

Some browsers offer a “Do Not Track” signal. Because there is no common industry standard for responding to these signals, the Service does not currently respond to them. We honor recognized opt-out preference signals (such as Global Privacy Control) where required by law.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date and, where required by law, provide additional notice (for example, in the app). Your continued use of the Service after an update takes effect constitutes acceptance of the revised Policy.

15. Contact us

Questions or requests about this Privacy Policy or your personal information:

• Email: ben@brainmaxing.ai