Privacy Policy
Last updated: July 8, 2026
This Privacy Policy explains what data BrainGym ("we", "us") collects when you use braingymhq.com and our app, how we use it, and the rights you have over it. This page is maintained by the BrainGym team to answer common privacy questions about our service.
What we collect
- Account data: your email address and (optionally) a display name.
- Test & training data: your baseline test results, Brain Strength Score, workout history, and progress over time.
- Product analytics: anonymous session identifiers and funnel events (e.g. "landing viewed", "test completed") so we can understand how the product is used.
- Payment data: if you subscribe, our payment provider (Stripe) handles card details. We only store subscription status and identifiers — never full card numbers.
- Email leads: if you submit your email on the landing page, we store the address and the source of the submission.
How we use it
- To run your account, save your scores, and personalise your training program.
- To send transactional emails (sign-in, password reset, receipts).
- To send occasional product emails you can unsubscribe from at any time.
- To measure aggregate product performance and improve BrainGym.
We do not sell your personal data. We do not share it with advertisers.
Legal basis (GDPR)
We process account, test and payment data on the basis of performance of a contract(providing the service you signed up for). We process product emails and analytics on the basis of legitimate interests (improving the product) and, where required, your consent.
Subprocessors
We rely on a small number of trusted providers to run BrainGym:
- Cloud hosting, database, and authentication (managed via Lovable Cloud).
- Stripe, for payment processing.
- Email delivery infrastructure for transactional messages.
Data retention
We keep your account data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we are required to retain limited records (e.g. tax records for payments) by law.
Your rights
Under GDPR and similar laws, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion of your account and personal data ("right to erasure").
- Export your data in a portable format.
- Withdraw consent to marketing emails at any time.
To exercise any of these rights, email us at privacy@braingymhq.com. We aim to respond within 30 days.
Cookies
We use only essential cookies and local storage needed to keep you signed in and remember your session for analytics. We do not use advertising cookies.
Children
BrainGym is not directed at children under 13. If you believe a child has provided us with personal data, contact us and we will delete it.
Changes
We may update this policy from time to time. Material changes will be announced in-app or by email before they take effect.
Contact
Questions? Email privacy@braingymhq.com.