Introduction
Brainlot ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application (the "App").
By using Brainlot, you agree to the collection and use of information in accordance with this policy.
Information We Collect
Personal Information
- Email Address: Collected during registration for account creation and authentication
- Authentication Data: When using Google Sign-In or Apple Sign-In, we receive your name and email as permitted by your privacy settings
- User ID: A unique identifier assigned to your account
Usage Data
- Upload Statistics: Number of files uploaded and timestamps
- Subscription Information: Your plan type (Free or Pro) and subscription status
- Quiz Performance: Scores and progress on generated quizzes
File Data
- Uploaded Files: PDFs and images you upload are temporarily processed by our AI service (Groq) to generate quiz questions
- Storage: Files are NOT permanently stored on our servers. They are processed in memory and discarded after quiz generation
- Content: We do not read, analyze, or use your uploaded content for any purpose other than generating quizzes for you
How We Use Your Information
We use the collected information to:
- Provide and maintain our service
- Create and manage your account
- Generate AI-powered quiz questions from your study materials
- Enforce upload limits (3 sessions per day for Free users, 500 sessions per day for Pro users with cloud model, unlimited with local model)
- Process subscription payments (if applicable)
- Respond to support requests
- Improve our app and user experience
Fair Usage Policy: To ensure stable performance for all users, upload activity may be subject to fair usage limits that prevent excessive automated or abnormal usage.
Third-Party Services
We use the following third-party services:
Supabase (Database & Authentication)
- Purpose: User authentication, database storage, and backend infrastructure
- Data Shared: Email, user ID, subscription status, upload statistics
- Privacy Policy: https://supabase.com/privacy
Google Sign-In (Authentication)
Apple Sign-In (Authentication)
Groq AI (Quiz Generation)
- Purpose: Process uploaded files and generate quiz questions
- Data Shared: Uploaded PDF/image content (temporarily, not stored)
- Privacy Policy: https://groq.com/privacy
RevenueCat (Subscription Management)
Data Storage and Security
- Database: User data is stored securely on Supabase servers
- Encryption: All data transmitted between your device and our servers is encrypted using HTTPS/TLS
- Authentication: We use industry-standard OAuth 2.0 for authentication
- File Processing: Uploaded files are processed in memory and never saved to disk on our servers
- Local Storage: Quiz progress and scores may be cached locally on your device
Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Update: Modify your account information
- Delete: Request deletion of your account and all associated data
- Opt-Out: Unsubscribe from promotional emails (if we send any)
To exercise these rights, please contact us using the information provided below.
Data Retention
- Active Accounts: We retain your data as long as your account is active
- Account Deletion: If you delete your account, all your personal data, subscriptions, and usage statistics are permanently deleted within 30 days
- Uploaded Files: Not stored; processed and discarded immediately after quiz generation
Children's Privacy
Brainlot is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal data, we will delete it immediately.
GDPR Compliance (For EU Users)
If you are located in the European Economic Area (EEA), you have the following rights under GDPR:
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
Legal Basis for Processing:
- Consent: By creating an account, you consent to our data processing practices
- Contract: Processing is necessary to provide the service you requested
- Legitimate Interests: Improving our service and preventing fraud
California Privacy Rights (CCPA)
If you are a California resident, you have the right to:
- Know what personal information we collect and how we use it
- Request deletion of your personal information
- Opt-out of the sale of your personal information
Note: We do NOT sell your data.
Cookies and Tracking
Brainlot does NOT use cookies or tracking technologies. We do not track your browsing activity outside of the app.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by:
- Posting the new Privacy Policy on this page
- Updating the "Last Updated" date at the top
Your continued use of Brainlot after changes constitutes acceptance of the updated policy.