BrainnautPrivacy policy
- Most of what Brainnaut uses stays on the child's device.
- Some data goes to the cloud only when you link devices or sign in, so you can manage your child's device from your phone.
- We don't show ads, and we don't sell or share your family's data for marketing.
- You can delete everything from the app at any time.
Who we are
Brainnaut is made by Faberlume Labs, India. In this policy, "we" means Faberlume Labs and "you" means the parent or guardian who sets the app up. Contact us at faberlumelabs@gmail.com.
Who the app is for
Brainnaut is set up and controlled by a parent or legal guardian. Children use it to take quizzes and earn play time, but they don't create accounts. Before the app is used, the parent confirms they are the child's parent or guardian and gives consent on the child's behalf. The date of that consent is recorded on the device.
Data kept only on the device
The following stays on the phone or laptop where it was created and is not sent to us:
- Your parent PIN, stored only in scrambled (hashed) form.
- The list of locked apps, the rules for how much time each score earns, allowed hours, and chores.
- Quiz history and the time bank, unless you link devices (see below).
- Photos you scan to make questions. They are deleted automatically after the period you choose in the app.
How app locking works
On Android, Brainnaut uses an Accessibility service only to know which app is in front and to show the lock screen over it. It does not read what is on the screen, what is typed, or any messages. On Windows, the app checks which program is in front for the same purpose. This information stays on the device.
Data stored in the cloud
Brainnaut uses Google Firebase to store data in the cloud. Nothing about your child is stored there until you link a device (with a family code or by signing in with Google). After that, the following is stored:
| What | Why |
|---|---|
| For each linked device: play time left, names of locked apps, quiz scores, which questions were answered right or wrong, and when the device last synced | So you can see how your child is doing and how much time is left |
| Question sets you send to a device (questions, choices and answers) | So the child's device can show your questions |
| Requests for more time, your answers, and time changes or locks you send | So your phone and the child's device stay in step |
| If you sign in with Google: your name and email address | To recognise you and link your devices |
| If you use the family feature: each child's name or nickname and class, device labels (for example "laptop"), the parents in the family, and invite codes (deleted when used or after 48 hours) | So both parents can manage the same children and devices |
| A notification token for your phone | To tell you when your child asks for more time |
| A random ID for each device | To recognise a linked device without any personal details |
We use a child's first name or nickname only. You don't need to enter a full name, and we never ask for a child's date of birth, school, photo or location.
AI question help
If you choose to create questions with AI, the topic, text, or page photo you choose is sent to Google's Gemini service (through Firebase AI Logic) to draft questions. Don't include personal information in this material. Google processes it under its own terms and may use it to improve its services. If you don't use this feature, nothing is sent. Some features also work with an on-device model or text scanner that sends nothing.
Crash reports and diagnostics
When the app crashes, Firebase Crashlytics sends a crash report with technical details such as the device model, operating-system version, app version, and the app activity just before the crash. Firebase Analytics runs alongside it to support these reports. We use this only to find and fix problems, not for advertising. On Windows, a diagnostic log is kept on the laptop itself.
What we don't do
- We don't show ads or use advertising trackers.
- We don't sell, rent, or share your family's data for marketing.
- We don't use your child's data to build profiles or for any purpose other than running the app.
Who processes the data
We use Google as our service provider for cloud storage, sign-in, notifications, crash reporting and AI (Google Firebase and Google AI). Data may be processed on Google's servers outside India. We may also disclose data if the law requires it.
How long we keep it
Cloud data is kept while you use the app. Invite codes expire after 48 hours. Scanned photos on the device are removed after the period you set. When you delete your data (see below), it is removed from the device and the cloud.
Your choices and rights
- Delete everything: in the app, go to Parent settings → Privacy & device → Delete all data. This removes the data on that device and its cloud copy. See how to delete your data for all the options.
- Leave a family: a parent can leave, and the family's owner can remove a parent, from the Family screen.
- Sign out of Google at any time from Privacy & device.
- Ask us: to access, correct or delete your or your child's data, withdraw consent, or raise a complaint, email faberlumelabs@gmail.com. We aim to reply within 30 days.
We handle children's data with a parent's consent, as India's Digital Personal Data Protection Act, 2023 requires.
Security
Data is sent over encrypted connections and stored by Google Firebase. Your family's data in the cloud can only be read or changed by the parents in your family, the phone that linked a device, and the linked device itself. The parent PIN is stored only in hashed form. No system is perfectly secure, so please keep your PIN and family codes private.
Changes to this policy
If we change this policy, we'll update the date at the top. If a change affects how your child's data is used, the app will ask for your consent again.