Privacy Policy

Account data: if you create an account, your email address and the sign-in method you used (email and password, Google, or Apple). You can also use the app as a guest with no email at all.

Learning data: the cards you study, your answers, your spaced-repetition schedule, your streak, and your topic interests. This is what makes the daily loop work.

Usage events: in-app events such as viewing a card, answering a quiz, finishing onboarding, and sharing, stored in our app_events log. Events from guest (anonymous) sessions are collected the same way and tied to your guest id.

Push tokens: if you turn on reminders on mobile, the device push token so we can send you a daily nudge.

Technical data: your IP address is used transiently for rate limiting and abuse prevention; we do not build advertising profiles.

To run the core product: serve your daily card, schedule reviews, track your streak, and remember your progress across devices once you link an account.

To keep the service reliable and safe: rate limiting, abuse prevention, and diagnosing errors.

To understand product usage in aggregate so we can improve the learning experience. We never sell your data.

Neon: our managed Postgres database, where your account and learning data are stored.

Vercel: hosting and content delivery for the web app and API.

Google and Apple: only if you choose to sign in with them, to authenticate you.

Expo push service: to deliver mobile reminder notifications, if you enable them.

Resend: to deliver email you send us through the contact form, if you use it.

Sentry: error and crash monitoring, to find and fix bugs.

These processors handle data on our behalf under their own security commitments. We share only what each one needs to do its job.

We keep your account and learning data for as long as your account exists. When you delete your account, we remove your data from our database, and processors purge their copies on their own schedules.

Aggregated, non-identifying usage statistics may be retained to understand long-term product trends.

Access and export: you can download a full copy of your data at any time from Settings, or via the data-export endpoint.

Deletion: you can delete your account and all of its data from Settings on web or mobile. This is permanent and immediate.

Depending on where you live, you may have additional rights under the GDPR or CCPA, including correction and the right to object. Contact us to exercise them.

Brainforage is not directed to children under 13 (or the minimum age in your country). We do not knowingly collect data from them.

Questions about this policy or your data? Reach us through the in-app contact form and we will respond.