Privacy Policy
Last updated: October 25, 2026
Brainimo (the website brainimo.app and the Brainimo app for iPhone, iPad and Android) is made and run by PrizEDU ("we", "us"). This policy explains, in plain words, what we collect when your family uses Brainimo, why, and what you can do about it. Questions: hello@brainimo.app.
The short version
- A parent creates the family account. Kids don't have their own accounts, emails or passwords.
- We ask only for what the games need: a first name or nickname for each kid, an age band and a language. No last names, photos, voice recordings or contact details of kids.
- No ads, no selling or renting of data, no third-party advertising or tracking for ads.
- Kids can't chat with anyone or post anything other people see.
- You can delete a kid, or the whole family account, inside the app at any time. Deletion is immediate.
What we collect
About you, the parent:
- Your email address, and a password if you choose one (you can also sign in with links we email you). A password is stored by our sign-in provider only as a secure hash; we never see it.
- Your family name (optional), the app language and your settings (for example the daily star limit and the beta tester switch).
About your kids, entered by you:
- A first name or nickname, an avatar picture chosen from our set, a birth year (optional, used only to work out the age band), the age band (4 to 6, 7 to 8 or 9 to 11), a language and a reading level.
- An optional 4-digit PIN, a simple lock between siblings on the same device.
What happens in the app:
- Game progress: levels, rounds played, answers' results and the stars earned and spent.
- The rewards and missions you set up, your kids' requests to redeem them, and your approvals.
- The look of each kid's brain pet and the outfits bought with stars.
- The device's time zone, so daily games start a new day at the right time.
Reporting is on by default for families using a language other than English and can be turned off in Settings. Reports include the voice clip or language issue, language, reason, optional note, screen, kid if playing, and platform. We remember when your family dismisses the language introduction.
Brainimo Pro: in the iPhone and iPad app Apple takes the payment, in the Android app Google Play takes it, and on the website our payment provider Stripe takes it. We never see your card, Apple ID or Google account details. For purchases in the app, our subscription service RevenueCat receives the purchase records from Apple or Google and your family's internal Brainimo id. For purchases on the website, Stripe receives your email address and card details, and we keep the Stripe customer id. We keep the plan, where it was bought, its end date and the subscription events.
Usage analytics
To see which games work and fix what doesn't, the app sends usage events to PostHog, in its EU cloud: for example a game opened, a round finished, a level reached, a reward approved. These events:
- identify the parent only by an internal random user id, and a kid only by an internal random id, the age band and the language;
- never contain names, email addresses, PINs or anything typed;
- never include screen recordings, heatmaps or automatic capture of clicks, taps or text;
- are not sent when your browser asks sites not to track (Do Not Track), and carry no device details: no browser, operating system, device model, user agent, time zone or IP-based location. The one exception: when the website is opened as an app from a phone's home screen, we note the screen size once, to fit its launch picture.
PostHog receives the IP address of the device when events arrive, as any web service does. On the website it may be used to estimate a rough location (country or city). In the iPhone, iPad and Android app this lookup is turned off.
How we use it
- To run Brainimo: the games, levels, stars, rewards, missions and the parent area.
- To sign you in and send the emails you ask for: sign-in links, sign-up confirmation, password reset, and the confirmation when an account is deleted. We don't send newsletters or marketing emails.
- To improve the app, from the usage analytics above.
- To keep the service safe: for example, we log the email address of each sign-in email we send, for up to about two days, to stop abuse.
- To answer you when you write to us.
We don't use your family's data for advertising, we don't sell it, and we don't build profiles of kids.
Where the data is stored
Your family's account and game data are stored in the United States (Supabase on Amazon Web Services). Usage analytics are stored in the European Union (PostHog). If you live elsewhere, your data is transferred to these countries, protected by the providers' data processing terms.
Children's privacy
Brainimo is made for kids aged 4 to 11, and it is built so that the account is the parent's:
- Only a parent or legal guardian may create an account. By creating it you agree to this policy for yourself and your kids, and you choose what to tell us about them.
- Kids can't sign up, can't enter an email or any contact details, can't chat and can't publish anything.
- Buying, settings and anything about the account are in the parent area, which opens only after a check meant for grown-ups.
- You can see what we hold about your kids in the parent area (their profiles, progress and stars), change it, or delete a kid or the whole account at any time. You can also write to us at hello@brainimo.app.
We collect no more about a child than the games need. If we learn that a child created an account without a parent, we delete it.
This follows the children's privacy laws we operate under, including the US Children's Online Privacy Protection Act (COPPA) and the EU General Data Protection Regulation (GDPR) rules for children.
How long we keep it, and deleting it
- We keep your family's data while the account exists.
- Remove a kid in the parent area (Kids) and that kid's profile, progress, stars and requests are deleted at once.
- Delete the family account in the parent area (Settings → Delete family account) and everything is deleted at once: every kid, their progress, stars, rewards and missions, the subscription records, and your sign-in (email and password). We send one last email to confirm.
- Records of website payments that Stripe sends us (they can include the email address used at checkout) are kept for our accounting, no longer linked to your family.
- Copies may stay in our database provider's encrypted backups for up to 30 days, until those backups expire.
- Usage analytics contain no names or email addresses. They stay linked only to a random id; write to us and we'll delete them too.
Deleting your Brainimo account does not cancel a Brainimo Pro subscription bought in the app: Apple or Google manages it. Cancel it on iPhone or iPad in Settings → your name → Subscriptions, or on Android in the Google Play app → Payments & subscriptions → Subscriptions. A subscription bought on the website is cancelled when you delete the account.
Your rights
You can ask us to give you a copy of your family's data, correct it, delete it, or stop a particular use of it. Write to hello@brainimo.app; we answer within 30 days. Most of this you can also do yourself in the parent area. If you think we got something wrong, you may also complain to the data protection authority where you live.
Security
Everything travels encrypted (HTTPS). Each family can reach only its own data: the database checks it on every request. Passwords are stored as hashes. The parent area needs a grown-up check. No system is perfect, but we work to keep your family's data safe, and we will tell you if something happens that affects it.
Changes to this policy
When this policy changes, we update the date at the top. If a change matters, for example a new kind of data or a new use, we tell you in the app or by email before it applies.
Contact
PrizEDU, the maker of Brainimo. Email: hello@brainimo.app.