Legal
Privacy Policy
Last updated: June 1, 2026
This Privacy Policy explains how Brainana collects, uses, discloses, and safeguards your information when you use the service.
1. Information We Collect
We collect information you provide directly (name, email address, payment details entered through our payment processor), information generated by your use of the service (courses created, study progress, AI session history), and technical information (device type, browser, IP address, and cookies).
2. How We Use Information
We use your information to create and authenticate your account, deliver and improve the Brainana service, personalise your learning experience, process subscription payments, send transactional and support emails, detect and prevent abuse, and comply with legal obligations.
3. Payment Processing
Payments are processed by Polar (polar.sh). When you subscribe to a paid plan, you provide your payment details directly to Polar. Brainana does not store your full card number or banking credentials. Polar's own privacy policy governs how it handles payment data. We receive from Polar only the information needed to fulfil your subscription (e.g., payment status, last four digits of card, billing country).
4. Sharing
We do not sell your personal information. We share data only with service providers that help us operate the product — including Supabase (database and authentication), Vercel (hosting), Anthropic (AI features), and Polar (payments). Each provider is contractually required to handle data in accordance with applicable privacy law.
5. Retention
We retain account and usage data for as long as your account is active or as needed to provide the service. If you delete your account we will remove or anonymise your personal data within 30 days, except where retention is required by law or to resolve disputes.
6. Cookies
We use strictly necessary cookies for authentication and session management. Disabling these cookies will prevent login from working. We do not use cookies for advertising. You can manage cookie preferences through your browser settings.
7. Your Rights
Depending on where you live you may have rights to access, correct, or delete your personal data, object to processing, or request data portability. To exercise these rights, email privacy@brainana.app. We will respond within 30 days.
8. Children
Brainana is not directed at children under the age of 13 (or a higher age threshold where required by local law). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact privacy@brainana.app and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or in-app notice at least 14 days before they take effect. Your continued use of the service after the effective date constitutes acceptance of the updated policy.
10. Contact
Questions about this policy can be sent to privacy@brainana.app. For billing-related data inquiries, you may also contact Polar directly at polar.sh.