Privacy policy

This policy explains what BrainGym collects, why, and what you can do about it. It covers the BrainGym iOS app and this website.

Who we are

BrainGym is the data controller for the information described here. Contact us at hello@braingym.uk.

What we collect

Account information

• Email address and display name, from email sign-up or Sign in with Apple / Google.
• Optional profile details you add, such as an avatar image.

If you use Sign in with Apple and choose to hide your email, we only ever see Apple's private relay address.

Training data

• Exercise session results: scores, reaction times, accuracy, duration and timestamps.
• Website exercise scores: exercise name, score and timestamp. These are not linked to an account or registration email and are used to calculate aggregate averages and percentiles.
• Derived figures such as your Brain Score, pillar trends, streaks and milestones.

Social features

• Friend connections, challenges you send or accept, and leaderboard placement.
• Comments you post in shared spaces.

Device and technical data

• A push notification token, if you enable notifications.
• App version and basic diagnostic information needed to fix crashes.

Marketing emails

If you join our mailing list on this website, we store your email address, first name, location and signup preferences in Supabase. We send the relevant contact details to MailerLite to deliver product news and training tips. MailerLite processes delivery and unsubscribe preferences; you can unsubscribe at any time using the link in an email.

The Founding 500 race

If you enter the race we store your first name, last name, email address, your points total and whether you asked to appear on the public leaderboard. If you did, your first name and last initial are shown publicly; if you didn't, you appear as "Athlete" and a number. We also record which entrant referred you, so referral points can be awarded. See the race rules.

Why we use it

• To run your account and the training programme. This is necessary to provide the service you asked for.
• To show progress, leaderboards and challenges. Other athletes can see your display name, avatar, tier and score — not your email address.
• To send notifications you opted into. You can turn these off at any time in iOS Settings.
• To send marketing emails. Only with your consent, and every email has an unsubscribe link.
• To keep the service secure and working. This is our legitimate interest.

Who we share it with

We do not sell your data. We use a small number of processors:

• Supabase — database, authentication and file storage.
• Apple (APNs) — delivery of push notifications.
• MailerLite — email delivery and unsubscribe handling for website subscribers. Supabase remains the source of truth for website signup records.
• Vercel — hosting for this website.

We may also disclose information where we are legally required to do so. Some processors operate outside the UK; those transfers rely on appropriate safeguards such as standard contractual clauses.

How long we keep it

Account and training data is kept while your account is active. When you delete your account it is removed from our live systems, with backups ageing out shortly afterwards. Website signup records are kept in Supabase; MailerLite keeps its delivery and unsubscribe records under its own retention controls.

Your rights

Under UK GDPR you can request access to your data, correction, deletion, restriction, a portable copy, or object to processing. Email hello@braingym.uk and we will respond within one month. You can delete your account yourself in the app, or request deletion here.

If you are unhappy with how we handled your request, you can complain to the UK Information Commissioner's Office at ico.org.uk.

Children

BrainGym is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.

Cookies

This website does not use advertising or analytics cookies. The only storage we use is what the site needs to function.

Changes

If we make a material change to this policy we will update the date above and, where appropriate, tell you in the app or by email.