Privacy Policy
How BrainRash collects, protects, and respects your data across devices.
Encryption
Encrypted traffic (HTTPS) and encrypted databases on Supabase.
Data Choice
Granular consent for analytics, ads, and notifications.
Export & Delete
One-click export and deletion available in account settings.
Jump to section
Section
Information We Collect
We collect information you provide (account details, profile fields, feedback, uploaded content) and data from your learning activity (courses enrolled, tokens earned, quizzes completed).
Automatically collected data includes device/browser specs, IP address, pages visited, referral source, and identifiers for crash analytics.
- Account creation and profile completion
- Course enrollments, assessments, and study streaks
- Support requests, creator submissions, and surveys
Section
How We Use Your Data
- Deliver personalized learning paths, reminders, and achievements
- Operate token rewards, streaks, and marketplace transactions
- Provide support, detect fraud, and maintain platform security
- Improve features via analytics (PostHog, Google Analytics)
- Display contextual ads (Ezoic) when enabled
Section
Advertising & Cookies
We use Ezoic to serve advertisements on our website. Ezoic uses cookies, web beacons, and other storage technologies to collect or receive information from our website and elsewhere on the internet and use that information to provide measurement services and target ads.
Ezoic and other advertising partners may combine data from your visits to other sites. You can opt out anytime.
- Ezoic and other third-party advertising partners may place and read cookies on your browser or use web beacons to collect information as a result of ad serving on our website
- Ezoic and other advertising partners may use this information to show you relevant ads on our site and other websites
- Ezoic uses AI-powered optimization to improve ad relevance and user experience
- Manage ad preferences through Ezoic's privacy settings or your browser settings
- Use DAA/NAI opt-out tools (aboutads.info | networkadvertising.org)
- Decline advertising cookies when prompted in the BrainRash consent banner
Learn more about Ezoic: Ezoic Privacy Policy.
You can opt out of the collection and use of information for ad targeting by visiting www.aboutads.info/choices or www.networkadvertising.org/choices.
Section
Third-Party Services
- Supabase: auth, database, storage
- Stripe: payment processing
- Vercel: hosting infrastructure
- OpenAI/Groq: optional AI assist features
- PostHog & Google Analytics: product analytics
Section
Security & Retention
While we follow industry-standard practices, no system is 100% secure. We’ll notify you of any breach consistent with applicable law.
- Encryption in transit (TLS) and encrypted backups
- Strict access controls, rotating credentials, and audit logs
- Retention based on active account status, legal requirements, or unresolved disputes
Section
Your Rights & Preferences
California residents retain CCPA rights (know, delete, opt out of sale). EEA residents retain GDPR rights (access, rectification, portability, objection).
- Access, correct, export, or delete your data at any time
- Opt out of marketing emails and in-product announcements
- Control cookie categories via the consent banner or browser settings
Section
Children & International Transfers
BrainRash is not intended for children under 13 (or the minimum age required by your jurisdiction). If we discover a child has shared data without consent, we’ll delete it immediately.
Data may be stored in the United States or other regions where our providers operate. We implement SCCs/DPAs for cross-border transfers.
Section
Policy Updates & Contact
We’ll post updates on this page, refresh the “last updated” date, and send email if the change is material.
Questions? Email privacy@brainrash.com or visit support.