Privacy Policy

This Privacy Policy explains how BrainBoost AI LLC (“BrainBoost,” “we,” “us,” or “our”) collects, uses, shares, stores, and protects your information when you use BrainBoost: AI Study Assistant (the “App” or “Service”) on iOS, Android, and the web, including https://brainbooststudy.com. The Join Students screen states that by continuing you confirm you are 13 or older and agree to the Terms of Service and this Privacy Policy. By using BrainBoost: AI Study Assistant, you agree to the practices described here.

Who we are

BrainBoost AI LLC, a Texas limited liability company (“BrainBoost,” “we,” “us”), operates the BrainBoost learning platform at brainbooststudy.com and is the data controller for personal information processed through the Service, except where a school controls class data (section 10) or a third party processes data under its own policy (section 6). For privacy questions, requests to access, correct, delete, or get a copy of your data, advertising opt-outs, or complaints, email thebrainboostsupport@gmail.com with the subject “Privacy Inquiry.”

Mailing address: BrainBoost AI LLC, 2900 FM 2187, Sealy, TX 77474, United States. Email is the fastest way to reach us.

Key points

• You must be 13 or older to use BrainBoost, and users under 18 need a parent or guardian’s permission.
• Your chats, Study Sets, and saved documents are stored on your device. We do not keep a cloud copy of your chat history, except the limited server records described in section 1 (for example AI memory for signed-in accounts and a 30-day log for Premium chats).
• What you submit to an AI feature is sent to the AI provider that handles it so it can produce your answer. BrainBoost does not sell your learning content or use it to train AI models.
• We do not sell personal information, and every ad request we make asks Google for non-personalized ads. Premium has no ads.
• Some AI work keeps running on our servers after you leave or close the App so the result is ready when you come back. Those results are kept only for a limited time (section 13).
• You can delete your account in the App (Profile → Delete account) or email us to use your privacy rights.

1. Information we collect

Sign in with Apple or Google is optional. On first launch we create an anonymous Supabase session so security, usage limits, subscriptions, and background work can function without an account. If you sign in, your usage and subscription can follow you across devices and reinstalls.

• Account information (optional): If you sign in with Apple or Google, Apple may share your name (if you choose) and an email or private relay email; Google may share your name and email. We never receive your Apple or Google password. We store your Supabase user ID and link it to your usage and subscription.
• Email sign-up and confirmation: If you create an account with email and password, we send a one-time confirmation link or code to that inbox to verify it. The link opens https://brainbooststudy.com/auth/confirm on web or the BrainBoost app on mobile. This is an account security message, not marketing.
• Anonymous session and device identifiers: An anonymous authentication session and an app-generated device identifier used for daily limits (so the day's usage stays the same if you sign out, switch accounts, or reinstall), ads, abuse prevention, and continuity, plus app version, platform, language, and general device type. If you sign in, these may be linked to your account.
• Academic profile (optional): School or university name, school type, class or course names, and optional class notes or syllabus text you attach to a class in onboarding or Profile. This is stored on your device and, when you use AI chat, sent with your request so answers can be personalized. It is voluntary, self-reported context, not an official school record, transcript, or FERPA education record.
• AI memory (signed-in accounts): BrainBoost already uses the school, classes, and name you enter in onboarding or Profile so answers fit your courses. For signed-in (non-anonymous) accounts we also store, on our servers: structured personalization preferences (academic level, explanation style, response length, preferred name or language, subjects, goals, learning style, school and class labels); short durable facts extracted from your chats; embedding-indexed snippets of your study sets, notes, study guides, uploaded files, saved documents, and class files, used to recall relevant material with source citations; and compact rolling summaries of recent chats. Embeddings are created with an OpenAI embedding model. AI memory does not store full chat transcripts, homework photos, or grades as long-term memory, only the preferences, facts, snippets, and summaries described above. Guest and anonymous sessions do not sync cloud memory. You can ask support to clear your memory at any time, or delete your account (section 12).
• Learning content: Homework scan photos; questions you ask the AI; calculator inputs; quiz and flashcard inputs; image and study-video prompts; content you add by link, file, photo, camera, or paste for Import and Summarize, Study Plan, the Style & Tone Refiner (Humanizer), and the AI Detector; syllabus text; audio or video for Transcribe Notes; and Study Set materials (guide, notes, flashcards, quiz, podcast, tutor, and games).
• Camera, photos, microphone, files, and links: Optional permissions for the scanner, imports, attachments, voice dictation, and audio import. You can turn these off in your device settings; the related features then will not work. We may fetch public page content from links you paste and extract text from images, PDFs, and documents (OCR) on your device or on our servers so the AI can read them.
• Connected plugins (optional): If you connect a third-party account through Composio (for example Gmail, Google Calendar, Google Drive, Docs, Sheets, Slides, Google Classroom, Canvas LMS, Outlook, OneDrive, Microsoft Teams, Notion, Slack, GitHub, or YouTube; the list of available tools can change), we store the connection identifiers needed to run the actions you ask for. We do not receive your third-party password. For Canvas LMS you paste an access token you create in your school’s Canvas; it is sent once over an encrypted connection to Composio to create the connection and is not stored by BrainBoost on your device or our servers. You can revoke it in Canvas (Account → Settings) or disconnect in Chat → Connectors. When you use a plugin, the requested action and the chat context it needs are sent to Composio and then to that service. BrainBoost is not those companies.
• Study data on your device: Study plans, flashcard decks, Study Sets, tutor chats about your material, podcast scripts, and review progress are stored on your device. If you share a Study Set, a copy is stored on our servers so the share link works; anyone with the link can view it.
• Background jobs: When a scan, chat, file, image, video, writing tool, quiz, podcast, or Study Set is processed in the background (so it can finish if you leave or close the App), the input and result are stored temporarily in private backend job storage (see section 4A, and section 13 for how long).
• Premium service logs: If you have Premium, our servers keep a log of each AI chat question and answer for 30 days to apply Premium fair-use limits and prevent abuse, and a log of calculator problems and solutions until you delete your account. These logs are not shown to anyone else and are not used to train AI models.
• Feedback and reports: If you rate an answer or use Report response, we store your rating or report, your note, and a short excerpt of the reported answer so we can review it.
• Live Quiz: If you host a Live Quiz, we store the quiz and its game code. If you join one, we store the nickname you choose, your answers, and your score; other players in that game and the host can see nicknames and the leaderboard.
• Notifications: Study-reminder choices are stored on your device. If you allow notifications, a push token is sent to our backend so we can tell you when background work finishes or, for class members, about class activity.
• Subscription and purchase data: Payments are processed by Apple In-App Purchase, Google Play, or Stripe (web); RevenueCat helps manage entitlements. BrainBoost never receives or stores full card numbers. We receive the plan, entitlement, renewal, transaction, and purchase-status information needed to provide Premium, AI credit packs, and school plans. Current U.S. list prices are Weekly $5.99, Monthly $19.99, and Yearly $149.99; the storefront shows the price charged, which may vary by region, currency, or tax.
• Usage and service data: For each AI request we record the feature, the model used, token counts, estimated cost, your plan, and your account or device identifier, and we keep daily usage counters to enforce limits. These records do not include the text of your homework, chats, or prompts.
• Voice: Dictation audio is sent to our servers and a speech-to-text provider (OpenAI, OpenRouter, xAI, or Deepgram when enabled) and then discarded. For the Premium Voice Tutor we keep the text transcript of your spoken turns and the tutor’s replies with your voice session, and the minutes used, until you delete your account. Live voice calls in AI Chat stream your microphone audio to xAI; BrainBoost does not record or keep the call audio, and we keep the call length for your daily voice minutes. We do not use voice data to identify you (no voiceprints or biometric identifiers).
• Age confirmation and Terms acceptance: Join Students does not ask for your birth date. Continuing there confirms you are 13 or older (with a parent or guardian’s permission if you are under 18) and accepts the Terms and this Privacy Policy. Your device keeps a note that you confirmed 13+ and when; with your account we keep the Terms and Privacy Policy versions you accepted, which button you used (Continue, Apple, Google, or email), your platform, and the time. If you gave a birth month and year in an earlier version of the app, that answer stays on your device and we keep only the resulting age band (under 13, 13–17, or 18+).
• Crash reports: If the app hits an error, we record the error message and stack trace, the screen, app version and update, platform, whether the error was fatal, and your account ID if you are signed in, in our own crash log (Supabase). Crash reports do not include your homework or chat text. Deleting your account removes the link between your crash reports and your account.
• Browser agent (Premium): If you use the browser agent, we store the task you typed, the steps it took, and your approvals with your account (never what you type yourself in the live browser). See section 6.
• Chat history: AI chat sessions are saved on your device unless incognito is on. Optional “Save for later” bookmarks are also stored on your device.
• Document library: Copies of files and AI documents you save (chat artifacts, study-set exports, and similar) are stored on your device. The library is capped at 40 documents, each truncated to about 400,000 characters; when the cap is reached, older items may be dropped. This is on-device storage, not a cloud drive. Uninstalling or clearing app or site data removes it.
• Owner / internal devices: A small owner-enrollment program can bind one verified operator account to one device for internal testing (it skips usage limits). It is not a consumer plan and does not turn off abuse, security, or legal controls.
• Browser extension: If you install the BrainBoost Page Scan extension and open its side panel, it reads the title, address, and up to about 10,000 characters of text of the page you are viewing (again when you switch tabs or load a page while the panel is open) and sends them with your question to the same study APIs as the web app. It skips brainbooststudy.com and browser store pages. Pages you save in the extension stay in your browser.

2. Where your data is stored

On your device: Chat sessions (unless incognito), Study Sets, flashcard decks, study plans, the document library, notification settings, tutorial progress, your academic profile, plugin connection snapshots, and imported file copies (in app storage on iOS and Android, and in browser localStorage on the web).

In the cloud: Account, a profile photo if you upload one (stored at a public link that only the App uses, removed when you delete your account), usage, subscription, AI memory, Premium service logs, background jobs, shared Study Sets, Live Quiz games, Voice Tutor sessions, browser agent tasks, crash reports, plugin connections, and class data are stored in our Supabase backend (database, authentication, and storage) and with the service providers in section 6. Uninstalling the App or clearing site data removes local data but does not delete cloud records. To delete those, use Profile → Delete account or email us.

3. How we use your information

• Provide the features you use: homework scans, AI chat and tutor, calculator, Study Sets, Learning Hub tools, the Style & Tone Refiner (Humanizer), the AI Detector, image and Premium study-video generation, Transcribe Notes, Import and Summarize, Study Plan, Live Quiz, the browser agent, and BrainBoost for Schools.
• Run optional Composio plugins you connect, sending the requested action and needed context to Composio and the connected service.
• Personalize answers with your academic profile and, for signed-in users, AI memory.
• Transcribe voice input, extract text from images and documents (OCR), and fetch public pages from links you provide.
• Manage subscriptions, credit packs, school plans, restores, and receipts.
• Show non-personalized ads to free users and grant rewarded-ad and share bonuses.
• Send account, billing, and service emails, and study reminder emails you can unsubscribe from (section 8).
• Enforce daily limits (described in the Terms of Service and shown in the App), detect fraud and abuse, keep the Service secure, and fix crashes.
• Understand how features perform using usage records that do not contain your content.
• Comply with law and respond to lawful requests.

We do not use your homework, chats, or class content to train AI models, and we do not sell it.

4. AI features and AI providers

What we send: When you use an AI feature, we send what that feature needs to the AI provider handling the request: photos, questions, files, pasted text, links and fetched page text, image and video prompts, audio or video for transcription, your academic-profile and AI-memory context when relevant, and Study Set material. Podcast playback sends script text to Microsoft Edge neural voices, with xAI, OpenRouter-hosted, or OpenAI voices as fallbacks. Premium Voice Tutor sends your recorded question for speech-to-text and the tutor’s short reply text for speech synthesis; audio is generated for playback only. Premium study video sends prompts and related study context through OpenRouter to ByteDance Seedance models.

Who receives it: Most requests go through OpenRouter to the model that handles them, from providers such as OpenAI, Anthropic, Google, xAI, DeepSeek, Moonshot AI (Kimi), Alibaba (Qwen), Mistral, Zhipu (GLM), MiniMax, Meta (Llama), Cohere, NVIDIA, Perplexity (live web search), and ByteDance (Seedance video). Some requests go directly to OpenAI (for example some chat and math answers, image text reading, image generation, transcription, speech, and the embeddings used for AI memory), to xAI (live voice calls and some speech), to Deepgram (Voice Tutor speech-to-text, when enabled), or to Google (understanding a video link, when enabled). Only the provider handling a request receives it. Plugin actions also go to Composio and the connected service.

Web search and live data: To answer questions about current events or facts, the AI may send search terms (not your name or account details) to search and data services such as Wikipedia, DuckDuckGo, Google News, and public weather, sports, finance, and currency data providers, and may fetch public web pages, sometimes through a reader service (Jina Reader). When you paste a public video link for Transcribe Notes or Import, the link is sent to a media-conversion service (for example a Cobalt instance or YouTube) to get its audio or captions.

Uses and retention by providers: Providers process your content to return the result. BrainBoost does not sell your learning content or use it to train foundation models. Providers may keep requests for a limited time for abuse monitoring or legal reasons under their own terms; see openrouter.ai/privacy and the applicable provider’s policy. Depending on the model that handles a request (chosen by you or automatically), your content may be processed in the United States, the EU, China, or other countries; if you pick a model yourself and prefer not to use a given provider, choose a different one.

Detector and Style & Tone scores: So the AI Detector and the Style & Tone Refiner show the same score for the same text, we store a one-way fingerprint (SHA-256 hash) of the checked text together with its score for 7 days. We do not store the text itself in that cache.

Stopping AI processing: Stop submitting content, uninstall the App, delete your account (Profile → Delete account), or email thebrainboostsupport@gmail.com.

4A. Background tasks and AI agent features

Some BrainBoost: AI Study Assistant features act on your behalf or keep working after you look away. This is what happens with your data when they do.

• Work that continues after you close the App: When you start a chat answer, scan, file, image, study video, writing tool, quiz, podcast, or Study Set, our servers can keep working on it if you leave the screen, lock your phone, close the tab, or quit the App. The request and its result are saved in private job storage linked to your account or device so the App can show the result when you return. If you allowed notifications, we send a push notification when it is ready.
• How long results are kept on our servers: Job records are deleted automatically about 3 days after they last change (finished image jobs after about 24 hours), and job files are deleted 30 days after upload. Once the App has the result, it is saved on your device like the rest of your study material (section 2). See section 13 for every period.
• Browser agent (Premium): A browser task runs in a cloud browser and can keep going while you watch or step away. We keep the task you typed, the steps it took, and your approvals with your account (section 6).
• Connector actions: When you ask the AI to act in a service you connected (for example create a Google Doc or send an email), the App asks you to allow it first (Allow once, Always allow, or Deny). Actions involving money, deleting, or database changes ask every time, and some high-risk actions (such as payments, transfers, changing passwords or permissions, or mail forwarding rules) are always blocked.
• Your responsibility: AI output can be wrong (section 5). Review results, drafts, and anything an AI feature prepares before you rely on it, submit it, or send it.

4B. Build Mode and optional computer connection

Build Mode lets you ask the AI to build websites, apps, games, and code. Work can keep going on our servers after you leave the App, like other background tasks (section 4A).

• Projects and history: Build Mode stores your project files and task history in our database and storage (Supabase). They are deleted when you delete the project or your account.
• Cloud sandbox: When enabled, code runs in an isolated cloud sandbox provided by Daytona, separate from your devices and from other users’ projects. Project files and commands needed for the task are sent to that sandbox.
• GitHub: If you choose to send a project to GitHub, it goes through your own GitHub connection in Composio (section 3). BrainBoost pushes only to branches named brainboost/…, and every push asks for your approval first. Disconnect anytime in Chat → Connectors.
• Connect a computer (optional): Available only to Premium users who are 18 or older and have a birth year on file. It stays off unless you turn it on yourself on that computer, and it works only inside folders you pick. Every command asks for your approval on that computer before it runs, and you can revoke access anytime by disconnecting or uninstalling the helper. Content it reads is sent to the AI provider handling the task (section 4), is not sold, and is not used to train AI models. It never types your passwords or payment details.
• Safety screening: Build Mode prompts are automatically screened for malware, phishing, and spam. Accounts that try to misuse Build Mode can be blocked from it.
• Limits: Build Mode’s AI and sandbox use counts toward your plan’s usage limits and fair-use allowance (see the Terms, section 4).

5. AI accuracy and automated processing

• The Homework Scanner and OCR can misread handwriting, diagrams, faded ink, or low-quality photos; a wrong read produces a wrong solution.
• Chat, tutor, and Learning Hub answers can contain errors even when phrased confidently.
• Math solutions, quizzes, summaries, study plans, and calculator steps may include critical mistakes.
• Image and Seedance study-video generation may produce incorrect diagrams or unexpected imagery despite filters.
• AI Detector scores are BrainBoost’s own style estimates, not proof of who wrote something, and should not be used as the only basis for any academic or employment decision.
• The Style & Tone Refiner (Humanizer) does not guarantee originality, “undetectable” text, or any academic outcome, and must not be used for cheating or to misrepresent authorship. Its in-app scores are BrainBoost’s own style scan; other tools, including classroom systems, can still flag text as AI-generated. We do not integrate with Turnitin or any academic integrity vendor, and we do not claim to “beat” those systems.
• Verify important information with reliable sources, your instructor, or a qualified professional before relying on it or submitting graded work.

6. Service providers (subprocessors)

Depending on the features you use, these providers process personal information for us. Each provider’s own privacy policy also applies to its processing.

• Supabase: backend database, authentication, file storage, server functions, and our crash log.
• AI and speech providers: OpenRouter and the model providers listed in section 4; OpenAI and xAI directly; Deepgram (when enabled); Microsoft (Edge neural text-to-speech); Google (video-link understanding, when enabled).
• Daytona (Build Mode sandbox, when enabled): runs Build Mode code in isolated cloud sandboxes and receives the project files and commands needed for the task.
• Composio (optional connectors): brokers sign-in and tool actions for the services you connect. BrainBoost is not affiliated with, endorsed by, or sponsored by those services unless expressly stated. Disconnect in Chat → Connectors.
• Hyperbrowser (browser agent, Premium): When you start a browser task and allow it, the task you typed is sent to Hyperbrowser, which runs a private cloud browser that opens public websites to complete it. Page content and screenshots from that browser are processed by Hyperbrowser and its AI model partners to decide the next step and write your answer; the live view and step list are shown only to you. It stops and asks for your approval before any sensitive step (signing in, entering your details, submitting a form, sending a message, accepting terms, booking, or buying) and shows you the site, item, price, and total first. The agent never receives or types your passwords or card numbers: for sign-in and checkout you take control of the live browser and type them yourself, directly into the website. For users who may be under 18 it is limited to research. BrainBoost keeps a log of each task’s steps and your approvals with your account to keep the feature safe, and deletes it when you delete your account. Hyperbrowser may keep session logs for a limited time under its own policy.
• Payments: Apple (App Store), Google (Google Play billing), Stripe (web payments, PCI DSS), and RevenueCat (subscription entitlements and restores; may receive device identifiers and purchase status).
• Sign-in: Apple and Google (optional sign-in).
• Advertising: Google AdMob (iOS and Android) and Google AdSense (web). See section 7.
• Email: Resend (account, billing, study reminder, and class emails).
• Hosting and delivery: Netlify (hosts brainbooststudy.com and our legal pages; processes technical logs), Expo / EAS (push notifications and over-the-air app updates), and content-delivery networks and Google Fonts that serve some scripts and fonts on our web pages.
• Search, data, and media services: the web search, live-data, reader, and media-conversion services described in section 4.

We will update this list when we add a provider that receives personal information.

Google user data obtained through plugins is used only to perform the action you request (for example create a Doc or send an email) and is not sold or used for advertising. Use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Advertising

The free plan is supported by ads from Google. Premium subscribers do not see ads, and we never show ads inside BrainBoost for Schools class features.

• iOS and Android: Google AdMob shows sponsored cards under some chat replies and optional rewarded ads (watch an ad to earn bonus uses, up to 5 rewarded ads a day). We do not show forced full-screen ads.
• Web app: Google AdSense may show an ad under some longer chat answers, only after you choose Accept in the cookie notice. With Essential only, no third-party ads load.
• Study guide pages: Our public study guides on brainbooststudy.com show Google AdSense ads unless you chose Essential only, are signed in with Premium in that browser, or your browser sends a Global Privacy Control signal.
• Non-personalized only: Every ad request we make in the apps, the web app, and the study guides asks Google for non-personalized ads. Google may still use cookies or device identifiers for ad delivery, frequency capping, measurement, and fraud prevention. Personalized ads are never requested, even if you accept cookies or allow personalized ads in Google’s consent message.
• Possible minors: Because we do not ask for a birth date, we treat everyone who has not given us one as possibly under 18: ad requests are tagged as under the age of consent and limited to a Teen content rating. BrainBoost does not request iOS tracking permission (App Tracking Transparency) from anyone. A device whose age answer in an earlier version of the app was under 13 gets no ads at all.
• Consent and rewards: On iOS and Android the App runs Google’s consent tool before ads load; where the law requires it (for example in the EEA, UK, and Switzerland), Google’s consent message asks for your choices. You can change them any time in Profile → Ad privacy choices. On the web, ads load only after you choose Accept in our cookie notice. Rewarded ads are confirmed by Google to our server so the bonus can be granted; web ads never grant rewards.

8. Emails, notifications, and text messages

• Account and billing emails: confirmation codes, receipts, renewal and payment-failure notices, cancellation and refund confirmations, and important service or policy notices. These are needed to run your account and do not have an unsubscribe link.
• Study reminder emails: If you sign in with a confirmed email, we may send occasional study reminder emails (for example tips, a weekly digest, or a check-in after a break) with a button that opens BrainBoost. Every one has a one-click unsubscribe link, and you can also email us to stop them.
• Class emails: Class members may get emails about assignments, announcements, grades, and messages. Each has a one-click link to turn class emails off, and you can also turn them off for a class in the App.
• Notifications: Local study reminders and push notifications are optional; turn them off in your device settings.

9. How we share information

We do not sell personal information for money or other valuable consideration. We disclose personal information only:

• to the service providers in section 6, to operate the Service;
• to Google for non-personalized advertising, as described in section 7;
• to the third-party services you connect, when you ask a plugin to act;
• to your teacher and class, for class features you use (section 10), and to other players in a Live Quiz you join (nickname, answers, and score);
• to anyone you give a Study Set share link to;
• when required by law or valid legal process, or to protect the rights, safety, and security of users, the public, or BrainBoost (including reporting child sexual abuse material to authorities);
• as part of a merger, acquisition, or sale of assets, in which case this policy (and the student data commitments in section 10) continue to apply and we will notify you; and
• with your consent.

10. BrainBoost for Schools (classes, teachers, and students)

The consumer BrainBoost study app is not a school or “educational agency or institution” under FERPA, and optional school or class labels you enter in your own profile are self-reported study context, not education records. BrainBoost for Schools lets a teacher or school create classes, invite students with a join code, assign quizzes and assignments, and see results. This section covers those class features; the rest of this policy still applies to everything else in BrainBoost.

• Roles and what teachers see: A teacher (or a school administrator who manages a license) creates and owns a class. Students join with a code. For their own classes, teachers see each student’s display name, join date, answers, scores and feedback on class assignments, attendance, and integrity events recorded during monitored assignments. Teachers also see the class messages, posts, replies, and work students turn in, and when a student opened timed work. The class roster shows display names, not email addresses. Teachers do not see a student’s personal AI chats, study sets, documents, or other activity outside class assignments.
• FERPA: When a school or teacher uses BrainBoost for Schools with students, we act as a “school official” with a legitimate educational interest under FERPA’s school official exception, under the school’s direct control with respect to education records. The school controls student records. We process class data only to provide the service and on the school’s instructions. Requests to review or correct student records go through the school.
• COPPA (students under 13): Students under 13 may not sign up on their own: every user must confirm they are 13 or older before continuing, and the App has no separate sign-up for younger children. A school that wants students under 13 to use class features must contact us first. We will only allow it after we have agreed in writing with the school, which then provides consent on behalf of parents for this educational use only (the COPPA school-authorization exception); those students see no ads. We collect only what the class needs (display name, answers, scores, and integrity events). Parents can ask to review or delete their child’s class information through the school or by emailing thebrainboostsupport@gmail.com, and we will work with the school to respond.
• Integrity monitoring: When a teacher turns on integrity monitoring for an assignment, students are told before they start. During that assignment the app records only these events: paste or copy attempts, leaving the quiz window or switching tabs, opening the right-click menu, and when the device reports a screenshot or that screen recording started. Each event stores its type, time, and a short detail. We do not use the camera or microphone, and we do not record the screen, keystrokes, or browsing. Events are signals for the teacher to review, not proof of cheating.
• Focus mode: A teacher can require focus mode for a quiz. On the web this opens the quiz full screen and records when a student leaves full screen or switches away, in the same way as other integrity events. It does not control or watch other apps, tabs, or the device.
• Class Stream: Teachers can post announcements and discussions to a class, and class members can reply. Posts and replies, with the author’s class display name and time, are visible to everyone in that class and its teachers. Teachers can pin, lock, hide, or delete posts and replies, and members can report a reply to the teacher. Hidden or deleted content is removed from the class view; we may keep a copy for a short time for safety and abuse review. Do not post personal contact details or sensitive information in a class.
• Inbox and class email: Teachers can message one student, a group, or the whole class, and students can message their teacher. Each conversation is private between that student and the class’s teachers. Messages (and any files or links attached to them) are stored with the sender’s class display name and time; attached files are stored privately and opened only through short-lived links by the people in that conversation. A copy of a message may be emailed to the recipient through our email provider (Resend). Every class email has a one-click way to turn class emails off.
• Attendance and QR check-in: Teachers can mark attendance (present, late, absent, excused) for each class day. Students can check themselves in by scanning a code shown in class; the code changes every 30 seconds and only works for signed-in members of that class. We store the class, the student, the day, and the status. Students see only their own attendance.
• Photos, videos, and files in class: Teachers and students can attach photos, videos, and files (up to 25 MB each) to announcements, discussions, and replies. These files are stored privately and can be opened only by members of that class, through short-lived links. Do not upload anything you do not have the right to share.
• Modules, groups, and timed work: Teachers can organize a class into modules, put students in groups (group members see each other’s class display names), and set a time limit on an assignment. For timed work we record when the student opened it, and the work is turned in automatically when time runs out.
• Turned-in work and files: Students can turn in essays, filled-in tables, links to their own documents (for example Google Docs, Slides, or Sheets, Microsoft 365, or Canva), or upload files up to 25 MB. Uploaded files are stored privately and can be opened only by the student who uploaded them and the teachers of that class, through short-lived links. They are deleted when the assignment or class is deleted or when the account is deleted. When a student turns in a link, the document stays in that outside service and its sharing settings and terms apply; BrainBoost stores only the link.
• AI grading suggestions: A teacher can ask BrainBoost AI to suggest rubric scores and feedback for an essay or written answer. The student’s answer, the prompt, the rubric, and the teacher’s notes are sent to our AI provider to produce the suggestion and are not used to train models. Suggestions are only a starting point: the teacher reviews and decides every grade.
• AI quiz drafts: When a teacher asks for an AI quiz draft, the topic and settings are sent to our AI providers only to generate the questions. Teachers review drafts before students see them, and students never receive answer keys.
• Your classes in BrainBoost AI: For students and teachers in a class, the BrainBoost assistant can use your class information (class names, assignment titles and due dates, your own scores and teacher feedback, and recent announcements) to answer your questions, such as what is due this week. This stays in your account, is not shown to other students, and is not used to train AI models. The assistant is told not to complete graded work for you.
• Class notifications: If you allow notifications, BrainBoost may send class notifications such as new announcements and upcoming due dates. You can turn notifications off in your device settings at any time.
• Never used to train AI: We do not use student data, answers, or class content to train AI models.
• Student data commitments (FERPA, SOPIPA, and similar state laws): For class data we act on the school’s behalf. We do not sell student data; we do not use it for targeted advertising or to build advertising profiles; we do not show ads inside class features (class pages, assignments, the class Inbox and Stream); we use it only to provide and secure the class service; and we disclose it only to the service providers in section 6 that need it to run the service, under confidentiality and security obligations. If the business is sold, these commitments continue to apply to the student data. On a school’s written request we delete or return class data within 30 days, except copies in backups that expire on their normal schedule. Teachers can also export their class data in the App.
• Retention and deletion: Class data (roster, join codes, assignments, submissions, grades, attendance, and integrity events) is kept while the class exists. A teacher can remove a student from a class at any time, which ends that student’s access. When a teacher deletes a class, its assignments, submissions, grades, and integrity events are deleted. Deleting an account deletes the classes it owns and that person’s class records. Schools, teachers, and parents (through the school) can also request deletion by emailing thebrainboostsupport@gmail.com. Backups expire on our provider’s normal schedule.
• Security: Class data is stored in our Supabase backend with access controls so only the class teacher and the enrolled student can reach their records, and it is encrypted in transit (HTTPS) and at rest by our hosting provider. No system is perfectly secure. If a breach affects student data, we will notify the affected schools as the law requires.
• Class cover images: A cover image a teacher adds to a class is stored at a public link so class cards can show it. Do not use a photo of a student or anything private as a cover.
• Billing: School plans are billed through Stripe on the web or by invoice. We receive the plan, seat count, and subscription status, not full card numbers.
• Data processing agreement: A data processing agreement (DPA) is available to schools and districts on request, and a district’s own state student-data agreement can be reviewed on request. We do not currently hold third-party privacy certifications or seals.
• Contact: thebrainboostsupport@gmail.com (subject: “BrainBoost for Schools privacy”).

11. Children and teens (COPPA)

12. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or get a portable copy of your personal information, to object to or restrict certain processing, to withdraw consent, and to opt out of the sale or sharing of personal information or targeted advertising. To make a request, email thebrainboostsupport@gmail.com from, or including, your account email so we can verify it. We respond within the time the law requires (for example within 30 days under the GDPR or 45 days under California law, extendable where the law allows, and we will tell you why). We do not treat you differently for using these rights.

Delete your account: Profile → Delete account. This deletes your account and the personal cloud data linked to it, including your profile and profile photo, AI memory, Premium service logs, Voice Tutor sessions and transcripts, background jobs and their files, reports you sent, study email settings, Terms acceptance records, browser agent logs, shared Study Sets, referral records, Live Quizzes you host, and classes you own (with their files), and it disconnects your Composio plugins. Deletion starts right away; some cleanup (for example removing stored files) finishes in the background shortly after. Some records are kept where we need them: crash reports are kept without the link to you; daily usage counters tied to your device are kept so free limits cannot be reset by deleting and re-creating an account; and purchase, billing, tax, fraud-prevention, security, and legal records are kept as required. Premium study videos you made, and your Build Mode projects (their files, task history and cloud computers), are deleted too. Apple, Google, Stripe, and RevenueCat keep their own purchase records. Deleting your account cancels any personal web (Stripe) subscription right away so it does not renew; if we cannot reach Stripe, the account is not deleted and we ask you to try again. Deleting your account does not cancel an App Store or Google Play subscription: cancel that first in your App Store or Google Play subscription settings. A school plan bought for a school is not cancelled automatically; the school manages it. Data on your device stays until you uninstall the App or clear its data.

Control AI Memory: Memory is always on so answers stay personal. Deleting your account erases all of it, or email thebrainboostsupport@gmail.com and we will clear your preferences, facts, study snippets, and chat summaries. School and class labels live in Profile, where you can change them. BrainBoost does not keep full chat transcripts as long-term memory, only compact summaries you can clear, and never shares memory across accounts.

Get a copy: Email us for a copy of the personal information we hold about you. Your chats, Study Sets, and documents are on your device, where you can view, export, or delete them. Teachers can export class data in the App.

Emails and notifications: Use the unsubscribe link in any study reminder or class email, or email us. Turn off notifications in your device settings.

Your privacy choices (Do Not Sell or Share)

We do not sell personal information, and we do not share it for cross-context behavioral advertising: every ad request we make is for non-personalized ads. You can still use these controls at any time:

• Web: choose Essential only in the cookie notice (or clear site data to see the notice again). This turns off Google ads in the web app and on our study-guide pages. A Global Privacy Control (GPC) signal is treated the same way.
• iOS / Android: Profile → Ad privacy choices opens Google’s consent and privacy options.
• Google: manage ad settings at adssettings.google.com.
• By email: send “Do Not Sell or Share” to thebrainboostsupport@gmail.com. We confirm within 15 business days.

California (CCPA / CPRA)

California residents have the right to know what personal information we collect, use, and disclose; to access, delete, and correct it; to opt out of its “sale” or “sharing”; to limit the use of sensitive personal information; and not to be discriminated against for using these rights. Email thebrainboostsupport@gmail.com with subject “California Privacy Request.” You may use an authorized agent if you give them written permission and we can verify your identity.

In the past 12 months we have collected these categories, from you, your device, and the services you connect, for the business purposes in section 3, and disclosed them to the service providers in section 6: identifiers (name and email if you sign in; account, device, and session IDs); commercial information (plan, purchases, and subscription status); internet or other electronic activity (feature usage, crash reports, and ad interactions); audio information (dictation and voice tutor input); user content (photos, files, prompts, and messages you submit); education information you provide (school and class labels, and class data for BrainBoost for Schools); and inferences and preferences (academic profile and AI memory). We keep each category for the periods in section 13. We do not sell personal information or share it for cross-context behavioral advertising, and we have no actual knowledge of selling or sharing the personal information of consumers under 16. We use sensitive personal information (such as account login) only as permitted to provide and secure the Service, not to infer characteristics about you.

California “Shine the Light” (Civil Code § 1798.83): we do not disclose personal information to third parties for their own direct marketing.

Other U.S. state privacy laws

Residents of states with comprehensive privacy laws (for example Colorado, Connecticut, Virginia, Texas, Oregon, and others) may have similar rights to access, correct, delete, and get a copy of their data and to opt out of sale, targeted advertising, or certain profiling. We do not sell personal information, engage in targeted advertising, or use profiling that produces legal or similarly significant effects. Email thebrainboostsupport@gmail.com with subject “State Privacy Request.” If we deny your request, you may appeal by replying to our decision with the subject “Privacy Appeal.”

EEA, UK, and Switzerland (GDPR / UK GDPR)

We process your personal information on these legal bases: contract (to provide the Service you ask for, including sending your content to AI providers to produce results, and to handle purchases); legitimate interests (security, fraud and abuse prevention, fixing crashes, measuring feature performance without your content, enforcing limits, and funding the free plan with non-personalized ads), balanced against your rights; consent (optional plugins, device permissions, notifications, and cookies or ads where consent is required), which you can withdraw at any time; and legal obligation (tax, accounting, and responding to lawful requests). You have the right to access, rectify, erase, restrict, or port your data, to object to processing based on legitimate interests, and to withdraw consent without affecting earlier processing. We do not currently appoint a named Data Protection Officer; email thebrainboostsupport@gmail.com. You may lodge a complaint with your local data protection authority (for example your EU member state authority, the ICO in the UK, or the FDPIC in Switzerland).

13. Data retention

We keep personal information only as long as we need it for the purposes in this policy:

• Account, profile, and AI memory: while your account exists, or until you ask us to clear AI memory.
• Guest (anonymous) sessions: a guest session without an active Premium subscription is deleted automatically after about a day without activity, together with the cloud records linked to it. Data on your device and the device’s daily usage counters are not affected.
• Data on your device: until you delete it, clear the App or site data, or uninstall.
• Premium chat log: 30 days. Premium calculator log: until you delete your account.
• Background jobs: job records are deleted automatically within about 3 days of finishing (finished image jobs within about 24 hours). Job files in private storage are deleted automatically 30 days after upload, or sooner when you delete your account.
• Generated files and study material: chats, AI documents (including chat files and study-set exports), AI images, and Study Sets are kept on your device until you delete them, clear the App or site data, or uninstall; the document library keeps up to 40 items. On our servers they exist only as background-job copies for the periods above, as shared Study Sets (until you delete your account), and, for Premium, the 30-day chat log. Premium study videos are kept at an unlisted link so the App can play them, until you delete your account; you can also ask us to delete one sooner.
• Usage records: per-request usage records for about 120 days; usage events about 30 days; feature analytics events about 90 days; daily usage counters for as long as needed to enforce limits and prevent abuse, including after account deletion.
• Security and rate-limit logs: from 1 day up to about 180 days, depending on the log.
• Crash reports: individual crash events about 90 days; a summary of each distinct error (message and stack trace, without your account) may be kept longer so we can fix it.
• Detector and Style & Tone score fingerprints: 7 days (a hash, never the text).
• Voice Tutor transcripts, browser agent logs, shared Study Sets, Live Quizzes you wrote, and Terms acceptance records: until you delete your account.
• Live Quiz games: ended games (players’ nicknames, answers, and scores) are deleted automatically about 180 days after they end, and games that never finished after about 30 days, or sooner when the host deletes their account.
• Plugin connections: until you disconnect the plugin or delete your account.
• Class data: as described in section 10.
• Purchase and billing records: as long as needed for tax, accounting, refunds, and legal requirements.
• Backups: deleted data may remain in backups until they expire on our provider’s normal schedule.
• AI and other providers: under their own policies (section 4).

14. Security

• Encryption: HTTPS/TLS in transit, and encryption at rest where our providers support it.
• Access control: authentication, database access policies, private storage with short-lived links, scoped credentials, and rate limits.
• Payments: we never store card numbers; Apple, Google, or Stripe process payments.
• Security incidents: if we become aware of a breach of personal information we hold, we will notify affected users, schools, and regulators as required by applicable law.
• No system can guarantee absolute security. Please keep your sign-in details private and tell us about any suspected unauthorized use.

15. International transfers

We are based in the United States, and our providers may process data in the United States and other countries, which may have different data protection laws than where you live. Where required, we rely on safeguards such as the European Commission’s Standard Contractual Clauses (with the UK Addendum and Swiss adjustments) included in our providers’ data processing terms, or other lawful transfer mechanisms.

16. Cookies, localStorage, and similar technologies

On the web we use cookies and browser localStorage / sessionStorage. The mobile apps use on-device storage, SDK identifiers, and authentication tokens.

• Essential: sign-in and anonymous session tokens, usage identifiers, your cookie choice, tutorial and navigation state, your academic profile, chat history (unless incognito), Study Sets, and plugin connection snapshots. These are needed for the Service to work.
• Advertising: In the web app, Google ads load only after you choose Accept; on our study-guide pages they load unless you chose Essential only, are Premium, or send a GPC signal. Ad requests are non-personalized. Where the law requires consent (for example in the EEA, UK, and Switzerland), Google’s consent message applies. Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads based on visits to this site and/or other sites on the Internet. Because we request non-personalized ads, Google does not use those cookies to personalize the ads we show, but it may use them for frequency capping, measurement, and fraud prevention. You may opt out of personalized advertising in Google Ads Settings or at aboutads.info. Learn how Google uses information from sites that use its services.
• Measurement: We measure the Service with our own usage records, which do not contain your content. If we turn on Google Analytics for the website, it measures page visits with IP anonymization.

Clearing cookies or site data does not delete cloud account records, and blocking essential storage may stop sign-in or saved study materials from working.

Global Privacy Control and Do Not Track: We treat a Global Privacy Control (GPC) signal in your browser as a request to opt out of sale and sharing, and we turn off Google ads for that browser. Browsers’ “Do Not Track” signals are not handled consistently across the industry, so we do not respond to them; use GPC or the controls above instead.

17. Changes to this policy

We may update this policy. We will change the effective date at the top and, for material changes, tell you in the App or by email before they take effect and, where required, ask for your consent. We record which version you accepted and when. If you keep using BrainBoost after a change takes effect, the updated policy applies.

18. Contact

For data requests, include your account email so we can verify the request. This policy is also in the App under Profile → Privacy Policy.

See also our Terms of Service.