Privacy Policy

Last updated: August 18, 2026

Brainblast (“we,” “our,” or “us”) respects your privacy and is committed to protecting it. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Brainblast mobile application (the “App”) and any related services (collectively, the “Services”). By using the Service, you agree with Brainblast’s collection, use, and sharing of your personal information in accordance with the terms of this Privacy Policy.

Remember that your use of Brainblast is at all times subject to our Terms of Use, which incorporates this Privacy Policy. Any terms we use in this Policy without defining them have the definitions given to them in the Terms of Use.

1. Information We Collect

a. Information You Provide We may collect information you voluntarily provide, including: - Account Information: name, email address, phone number, username, and login credentials - Educational Data: practice activity, progress, scores, and performance metrics - Communications: feedback, support requests, or messages sent to us - Contact Syncing: Brainblast has a Contact Sync feature, which allows you to find your contacts who also use Brainblast. If you use Contact Sync, you will provide your phone number and give the Brainblast app permission to access the contacts stored on your phone, including the phone number, name, photo, and other information stored in that contact for the purpose of identifying your contacts who also use Brainblast and recommending them as users you may wish to engage with. If you use the Contact Sync feature, Brainblast will not store your contacts’ phone numbers, but only an encrypted “hash” of them. This hash is an alternative code to the actual phone number and can be used only to match the hash of other users’ numbers. The hashing process securely strips away the real phone number, so Brainblast cannot use the hashes to identify your contacts’ real phone numbers, contact your contacts, or share their information with anyone else. This hashing process applies only to your contacts’ phone numbers and not yours. You can disable the Contact Sync feature and your sharing of contacts with Brainblast by accessing the Social Accounts section of the app Settings. This will also instruct Brainblast to automatically delete any previously shared information about your contacts.

We use Mixpanel to understand how users interact with the App and website, and Google Analytics to understand anonymous website usage, so we can improve functionality and user experience. These analytics services may collect information such as: - App usage events and interactions - Session duration and feature usage - Anonymous device identifiers This data is used solely for analytics and product improvement purposes. Brainblast does not send names, email addresses, phone numbers, account identifiers, school choices, scores, or survey answers to Google Analytics. We do not use these analytics services for advertising or selling personal data. Data processed by Mixpanel and Google Analytics is handled in accordance with their respective privacy policies.

b. Advertising Customer Lists For eligible adult parent accounts with trial or paid subscription history, we may use the email address, phone number, first name, last name, and billing country (when available) associated with the account to build a Meta Customer List. Brainblast normalizes and SHA-256 hashes these fields before transmitting them to Meta. We do not include student accounts, learning activity, scores, answers, or other educational data in this Customer List.

c. Mobile App Advertising Measurement With your permission through Apple’s App Tracking Transparency framework, the App may use Meta’s iOS SDK and App Events to measure the effectiveness of Brainblast advertising and improve campaigns intended to reach prospective adult parents. Events may include app activation, adult-parent registration, onboarding or tutorial completion, trial start, and subscription purchase or renewal. Depending on the event, Meta may receive limited app and device information, an authorized advertising or device identifier, an account identifier, product and transaction identifiers, currency, value, quantity, and event time. For an eligible adult-parent account that has authorized tracking, Brainblast may also provide the parent’s email address, phone number, first name, and last name in normalized and SHA-256 hashed form to improve event matching. Hashing does not make these fields anonymous to an advertising platform when they are used for matching. We do not send student names, student contact information, student account identifiers, answers, scores, learning activity, schools, target scores, or other educational data to Meta App Events. When App Tracking Transparency permission is not authorized, Brainblast disables Meta advertising-identifier collection and adult-parent advanced matching. Apple’s privacy-preserving aggregate attribution technologies may still report campaign performance without identifying a particular user. You can review or change the App’s tracking permission in iOS Settings under Privacy & Security → Tracking. Meta processes information it receives under its own privacy policy at https://www.facebook.com/privacy/policy/.

d. Website Advertising Measurement With your marketing-cookie consent where consent is required, our public marketing and onboarding website pages use Meta Pixel and Meta’s Conversions API to measure page visits and actions such as requesting a parent magic link, beginning checkout, creating an account, starting a trial, and purchasing a subscription. Browser and server copies use the same event identifier so Meta can recognize one action rather than count it twice. These events may include Meta browser identifiers (_fbp and _fbc), IP address, browser user agent, the canonical marketing-page URL, and limited event details such as currency and purchase value. For student registration flows, we do not send the student’s email, phone number, account identifier, answers, scores, learning activity, or an explicit student-status field to Meta. For a consenting adult-parent magic-link request, the submitted email may be normalized and SHA-256 hashed before transmission to Meta as part of a Lead event. Adult-parent registration and subscription events may similarly include normalized and SHA-256-hashed account or billing identifiers. Cookiebot manages marketing consent. Where consent is required, Meta measurement does not load or store identifiers until marketing consent is granted. You may withdraw consent at any time using the Cookie settings control on the website. We also honor Global Privacy Control for this measurement. Events that occur before consent are not replayed. See our Cookie Policy at https://www.brainblast.com/privacy/cookies.

e. Information Collected Automatically When you use the App, we may collect: - Device Information: device type, operating system, and app version - Activity Data: When you use the Service, we may generate data about your use of the Service, which may include your browser and device data, log data, and IP address. We will also generate data regarding your engagement in educational activities on the Service. We may recommend other Brainblast users for you to follow, and for other users to follow you, based on a shared IP address such as other users on the same WiFi network as you, or if other users share your device. We will retain your IP address for no more than thirty (30) days, unless exceptional circumstances require longer retention. - Usage Data: app launches, taps, feature usage, session activity, learning progress, scores, answers, purchase status, and other interactions needed to operate, personalize, analyze, and improve the App - Diagnostics: crash reports, performance information, and other technical diagnostic data used to maintain reliability and security - Identifiers: account, authentication, subscription, and device identifiers used for app functionality, analytics, communications, fraud prevention, and, only when authorized through App Tracking Transparency, advertising measurement - Approximate Location: authentication or network providers may infer coarse location, such as country or region, from network information for app functionality and security We do not collect precise location data.

f. Payment and Purchase Information All mobile payments are processed through Apple’s In-App Purchase system. Brainblast and its subscription-service providers may receive the purchased product, subscription status, transaction identifiers, price, currency, trial status, and renewal information needed to provide access, prevent fraud, support customers, analyze subscriptions, and, with App Tracking Transparency permission, measure advertising. We do not collect, store, or have access to your full payment card or bank-account information.

2. How We Use Your Information We use your information to: - Provide, operate, and maintain the App - Personalize learning content and experiences - Track learning progress and performance - Improve features, functionality, and user experience - Authenticate accounts, protect the Service, and prevent fraud - Manage trials, purchases, subscriptions, and customer support - Exclude existing adult-parent trial or paid customers from acquisition advertising and create lookalike seed audiences intended to reach prospective adult parents - With App Tracking Transparency permission, measure and improve advertising intended to reach prospective adult parents - Respond to support requests and communicate important updates - Comply with legal obligations - As otherwise stated in this Privacy Policy. - Brainblast will use the email address or phone number you provide to send you the following types of messages. You may - opt-out of receiving non-essential messages within the app Settings: - Messages to support the Brainblast teaching methodology and reinforce your learning, such as learning tips, reminders to practice, and progress reports. - Notifications about friend requests and your friends’ activity on Brainblast. - Notifications of messages and nudges from your friends. - Announcements regarding changes to the Service or products. - Announcements of new Brainblast products, services, offers, or opportunities. - Essential messages to support the operation of the Service such as password reset emails. - We do not sell your personal information.

3. Data Sharing and Disclosure We may share information only in the following situations: - Service Providers: trusted vendors who help operate the App (such as analytics or hosting), under confidentiality obligations - Authentication Providers: providers such as Apple and Google may process account information, identifiers, device information, approximate location, and limited usage data to authenticate users, secure accounts, and operate sign-in features - Analytics, Subscription, and Communication Providers: providers such as Mixpanel, Google Analytics, PostHog, Superwall, and Stream may process usage, purchase, identifier, diagnostic, or communications data needed to provide their services - Advertising Platforms: Meta may receive consented website conversion events and browser or network identifiers for advertising measurement. With App Tracking Transparency permission, Meta may also receive adult-parent mobile app events, identifiers, purchase information, and hashed advanced-matching fields for advertising measurement and campaign improvement. Meta may separately receive hashed contact fields from eligible adult-parent accounts for Customer List acquisition exclusions and lookalike seeding. Customer Lists are for audience-building and are separate from conversion measurement. - Legal Requirements: if required by law or valid legal process - Business Transfers: in connection with a merger, acquisition, or sale of assets

4. Children’s Privacy Brainblast is an educational app that may be used by students of any age. - We collect only information necessary to provide the educational experience - We do not display third-party behavioral advertising inside the App. The adult-parent advertising audiences described above are used for campaigns outside the App. - We do not sell children’s personal data - We do not include student accounts or educational data in advertising Customer Lists - Website student-flow conversion events exclude student account identifiers, contact information, answers, scores, learning activity, and explicit student-status fields - Mobile Meta App Events do not include student identities, contact information, account identifiers, answers, scores, learning activity, schools, target scores, or other educational data If you are a parent or guardian and believe your child has provided personal information without your consent, you may contact us to request deletion of that information.

5. Data Retention To ensure your account stays operational, Brainblast will generally retain your personal information until your account is deleted. However, Brainblast may retain certain information longer if necessary to provide our Service, defend our legitimate interests or those of third parties, comply with legal requirements, resolve or defend ourselves in disputes, investigate misuse or disruption of the Service, or perform agreements. We may also retain anonymous data indefinitely.

6. State Law Privacy Rights California Resident Rights

Under California Civil Code Sections 1798.83-1798.84, California residents are entitled to contact us to prevent disclosure of Personal Data to third parties for such third parties' direct marketing purposes; in order to submit such a request, please contact us at Krishna@brainblast.com

Your browser may offer you a “Do Not Track” option, which allows you to signal that you do not wish operators to track certain online activities over time and across different websites. Our Services do not support Do Not Track requests at this time. To find out more about “Do Not Track,” you can visit www.allaboutdnt.com.

Nevada Resident Rights If you are a resident of Nevada, you have the right to opt-out of the sale of certain Personal Data to third parties. You can exercise this right by contacting us at Krishna@brainblast.com with the subject line “Nevada Do Not Sell Request” and providing us with your name and the email address associated with your account.

Advertising Audience Choice You may opt out of Brainblast Customer List advertising audiences at https://www.brainblast.com/privacy/ads or in the App under Settings → Account → Advertising Privacy. An opt-out is stored in Brainblast’s private database and applied to future full Customer List replacements; removal is normally sent to Meta within 24 hours. You may opt back in at any time. This preference applies to Customer List acquisition exclusions and lookalike seeding only. Mobile app tracking is controlled separately through Apple’s App Tracking Transparency setting under iOS Settings → Privacy & Security → Tracking. Website advertising measurement is controlled separately through the website’s Cookie settings. Changing one choice does not override the others. If you cannot access your account, contact Dylan@brainblast.com from the address associated with your account.

7. Data Security We use reasonable administrative, technical, and physical safeguards to protect your information. However, no system is completely secure, and we cannot guarantee absolute security.

8. Third-Party Services The Services use third-party providers for authentication, analytics, crash reporting, subscriptions, communications, hosting, customer support, and advertising measurement. These providers process information according to their own privacy policies and our agreements with them. The App may also include links to third-party services. We are not responsible for the privacy practices of websites or services that Brainblast does not control.

9. Changes to This Policy We may update this Privacy Policy from time to time. Any changes will be reflected by updating the “Last updated” date. Continued use of the App constitutes acceptance of the updated policy.

10. Contact Us If you have questions or requests regarding this Privacy Policy, please contact us at this email: Dylan@brainblast.com By using Brainblast, you acknowledge that you have read and understood this Privacy Policy.