Privacy policy

Controller

Rene Montilva, a self-employed professional based in Spain, is the data controller. You can write about any privacy matter to support@brainygym.com.

Data we process

• Account: your email, your name and, if you sign in with Google or another provider, the basic details it shares. Identity is managed by Clerk.
• What you learn: your goals, the courses you create or save, the links and documents you add as sources, your answers, your explanations and your progress (including your review schedule).
• Voice notes: if you explain something out loud, the audio is sent to a transcription service and we keep only the resulting text, not the audio.
• Notifications: if you turn them on in the app, your device identifier so we can send you reminders, stored encrypted.
• Technical data: server logs (date, route, errors, internal user identifier) for security and troubleshooting.
• Public website: we count visits and clicks without cookies or personal identifiers; to limit use of the syllabus preview we keep an irreversible hash of your IP address.

BrainyGym from Claude, ChatGPT or another assistant

When you connect BrainyGym to an AI assistant, it only sends us what each action needs: for example, the course it wrote for you so we can save it, the option you pick on a question, or your explanation so we can grade it. We do not receive or store your conversation with the assistant, and we do not access its memory, history or your files.

What we send back (your courses, questions, grades and progress) is processed by that assistant under its own privacy policy. You can disconnect BrainyGym at any time from the assistant’s connector settings.

Why we use it

The legal basis is the contract you accept when you create your account and, for the security of the service, our legitimate interest. We do not sell your data or use it for advertising.

• To provide the service: build your courses, prepare your daily session, grade answers and explanations, and schedule reviews.
• To send the reminders you have turned on.
• To keep the service secure and fix errors.

Who we share it with

Only providers that process data on our behalf to run the service:

• Amazon Web Services: hosting, database, document storage and the AI models (Amazon Bedrock) that prepare courses and grade answers.
• Clerk: sign-in and account management.
• Firecrawl: reading the public web pages you add as a course source.
• Groq: transcription of your voice notes.
• Expo: delivering notifications to the mobile app.

International transfers

Some of these providers process data in the United States. They do so with the safeguards required by the GDPR, such as the European Commission’s standard contractual clauses or the EU-US Data Privacy Framework.

How long we keep it

For as long as you have an account. If you ask us to delete it by writing to support@brainygym.com, we delete it together with your courses, answers and progress within 30 days at most. Technical logs are kept only as long as needed for the security and troubleshooting of the service.

Your rights

You can ask to access, correct, delete, restrict, object to the processing of, or take away your data by writing to support@brainygym.com. If you think we are not handling it properly, you can complain to the Spanish Data Protection Agency (aepd.es) or your local authority.

Age

BrainyGym is for people aged 18 and over.

Cookies

We only use the cookies needed to keep you signed in. We do not use advertising or third-party analytics cookies.

Changes

If we change this policy, we will update the date on this page and, if the change is significant, let you know inside the service.