Brainbuddy privacy & data

We are bound by the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Email address (for account creation, login, and support)

Check-ins, streak data, and any content you create

Subscription status and entitlement (managed via Apple, Google and RevenueCat

Device type, model, operating system version, app version, language, time zone

Mobile advertising identifiers (Apple IDFA where you've granted App Tracking Transparency permission; Android Advertising ID where applicable)

Approximate location derived from your IP address (country / region only — we do not collect precise GPS location)

Push notification token (only if you enable notifications)

To provide the Service — create and authenticate your account, sync your data across devices, and deliver features such as check-ins, predictions, and recovery insights.

To improve the Service — analyse aggregate usage patterns, fix bugs, develop new features.

To measure our own marketing — understand which of our advertising campaigns work so we don't waste money.

To comply with legal obligations , including Australian tax and consumer law.

Active account data (email, profile, wellness data, content) — Retention period: For as long as your account exists.

Account and personal data after deletion request — Retention period: Permanently deleted within 30 days.

Crash logs and diagnostic data — Retention period: 90 days.

Subscription and purchase records — Retention period: Up to 7 years, to comply with Australian tax and financial reporting law.

Backups — Retention period: Rotated and purged within 30 days of deletion.

Some of our service providers (notably Firebase, AppsFlyer, RevenueCat, Mailchimp, Meta, Google and OneSignal) store and process data on servers located in the United States, the European Union, or other locations.

including the European Commission's Standard Contractual Clauses where applicable

We share personal information only with the following service providers, and only as needed to operate the Service.

In the app — go to Settings → Account → Delete Account . Deletion is initiated immediately and completed within 30 days.

Access — request a copy of the personal information we hold about you.

Correction — ask us to correct information that is inaccurate.

Deletion — delete your account and personal data at any time (see Section 6).

Marketing opt-out — unsubscribe from marketing emails using the link in any marketing email, or by emailing us.

Withdrawal of consent at any time (where processing is based on consent)

Data portability

Restriction of, or objection to, processing

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.