Privacy Policy
Last updated: October 29, 2025
At BrainRash, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
Information We Collect
We collect information that you provide directly to us when you:
- Create an account
- Complete your profile
- Enroll in courses
- Participate in assessments
- Submit content or feedback
- Contact our support team
Automatically Collected Information
When you visit our website, we automatically collect certain information about your device, including:
- Browser type and version
- Operating system
- IP address
- Pages visited and time spent
- Referring website
- Device identifiers
How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Create personalized learning experiences
- Track your progress and achievements
- Communicate with you about updates and new features
- Analyze usage patterns to improve our platform
- Detect and prevent fraudulent activities
- Display relevant advertisements
Advertising and Google AdSense
We use Google AdSense to display advertisements on our website. Google AdSense uses cookies and web beacons to serve ads based on your prior visits to our website and other websites on the Internet.
How Google Uses Your Information
Google uses cookies to serve ads based on a user's prior visits to our website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our site and/or other sites on the Internet.
Opt Out of Personalized Advertising
You can opt out of personalized advertising by:
- Visiting Google's Ads Settings
- Visiting Digital Advertising Alliance
- Visiting Network Advertising Initiative
- Declining advertising cookies in our cookie consent banner
Learn more about how Google uses data when you use our partners' sites or apps at Google's Privacy & Terms.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies for:
Essential Cookies
Required for the website to function (authentication, security, session management)
Analytics Cookies
Help us understand how visitors use our site:
- Google Analytics: Website traffic and user behavior analysis
- PostHog: Product analytics and feature optimization
Advertising Cookies
Used to display relevant advertisements:
- Google AdSense: Personalized ad serving
- Google DoubleClick: Ad campaign measurement
Preference Cookies
Remember your settings and choices (theme, language, etc.)
For more detailed information about cookies we use, please see our Cookie Policy.
Third-Party Services
We use third-party services that may collect information about you. These services include:
- Supabase: User authentication and database hosting
- Stripe: Payment processing
- Google AdSense: Advertising
- Google Analytics: Analytics
- PostHog: Product analytics
- Vercel: Hosting and deployment
Data Security
We implement appropriate security measures to protect your personal information, including:
- Encryption of data in transit (HTTPS)
- Encrypted database storage
- Regular security audits
- Access controls and authentication
- Secure payment processing (PCI DSS compliant via Stripe)
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
Data Retention
We retain your personal information for as long as:
- Your account is active
- Needed to provide you services
- Required by law or regulation
- Needed to resolve disputes or enforce agreements
Your Rights and Choices
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update or correct your information
- Deletion: Request deletion of your account and data
- Portability: Request your data in a portable format
- Opt-out: Unsubscribe from marketing communications
- Cookie Control: Manage cookie preferences
To exercise these rights, please contact us at privacy@brainrash.com or visit your account settings.
Children's Privacy
Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
International Data Transfers
Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. We ensure appropriate safeguards are in place for such transfers.
California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act:
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to say no to the sale of personal information
- Right to access your personal information
- Right to equal service and price
European Privacy Rights (GDPR)
If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation:
- Right to be informed about data processing
- Right of access to your data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Rights related to automated decision-making
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by:
- Posting the new Privacy Policy on this page
- Updating the "Last updated" date
- Sending you an email notification (for significant changes)
Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us:
- Email: privacy@brainrash.com
- Support: Contact Form