Privacy

Brightkeep ("we", "us") provides a daily brain-care companion app. This policy explains what personal information we collect, how we use it, and the choices you have. Brightkeep is a wellness and engagement product; it is not a medical device and does not diagnose, treat, or prevent any condition.

Information we collect

• Account information — the email address and display name you provide when you sign up, plus authentication tokens.
• App activity — the exercises you complete, scores, streak history, habit check-ins, reminder time, and text-size preference.
• Memory Log entries — the short notes or optional photos you save for the delayed-recall exercise.
• Conversations with Keeper — the messages you send to our AI companion, and its replies.
• Subscription status — whether your account is on the free or Plus plan, and any upgrade interest you record.
• Basic technical data — device type, browser, anonymous error reports, and coarse product analytics used to keep the app running and understand which screens people use.

How we use your information

• To operate the app: sign you in, save your progress, and show your history.
• To personalise encouragement and your Keeper conversations.
• To send the daily reminder you opted into (you can turn it off in Settings any time).
• To generate the printable 90-day summary you can share with your doctor.
• To process subscription payments through our payment provider if you upgrade to Plus.
• To improve reliability and fix bugs.

We do not use your health-related activity for advertising, and we do not build advertising profiles.

Artificial intelligence (Keeper)

Keeper is powered by third-party AI providers — xAI for conversation and Perplexity for web-researched answers. When you send Keeper a message, we transmit that message along with a short, factual summary of your recent Brightkeep activity (for example "practised 5 of the last 14 days; strongest area lately: attention") so the reply is useful rather than generic.

• We do not send your email address, your name is only included if you chose to save a display name, and we never send your Memory Log photos.
• Requests are made from our servers, so your API activity is not exposed to your device or to other users.
• Keeper conversations are not used to train our own models.
• Providers process the request under their own terms; they may retain data briefly for abuse monitoring.
• Please avoid typing information into Keeper that you would not want processed by an AI provider — including full medical records, identity numbers, or financial details.

Sharing

We do not sell your personal information and we do not share it with data brokers. We share data only with the service providers we need to run the app — our hosting and database provider, our AI providers, our email-delivery provider, and our payment processor — and only to the extent needed to provide the service. We may also disclose information if required by law.

Retention

We keep your account data for as long as your account exists. If you ask us to delete your account, we remove your profile, sessions, habit check-ins, Memory Log entries, and photos within 30 days, except where we must keep billing records for tax and accounting purposes.

Your rights and choices

• Turn daily reminders on or off in Settings at any time.
• Change your text size, reminder time, and display name at any time.
• Request a copy of your data, correction of it, or full deletion by emailing us.
• If you are in the EEA, UK, or California, you have additional rights under the GDPR, UK GDPR, or CCPA/CPRA — including access, correction, deletion, portability, and the right not to be discriminated against for exercising them. We honour these requests for everyone, wherever they live.

Our legal basis for processing is the performance of our contract with you (running the app), your consent (reminders and optional photos), and our legitimate interest in keeping the service reliable and secure.

Security

Your data is stored on managed cloud infrastructure protected by row-level security, so that only your own account can read your entries. Traffic is encrypted in transit. We follow reasonable technical and organisational measures to protect your information, but no online service is perfectly secure.

International transfers

Our providers may process data in the United States and other countries. Where required, transfers rely on Standard Contractual Clauses or an equivalent safeguard.

Children

Brightkeep is intended for adults. It is not directed to children under 13, and we do not knowingly collect their information.

Changes

We may update this policy occasionally. When we do, we change the "Last updated" date above, and material changes are announced inside the app.

Contact

Questions, a data request, or a deletion request? Email privacy@brightkeep.app.