Privacy notice

BrainBloom provides knowledge lessons, quizzes, puzzles and study tools. Interactive play and accounts have the eligibility requirements explained below. Contact brainbloomsupport@gmail.com for privacy questions, corrections, underage-account concerns or deletion help. Accountable legal-operator details and vendor retention arrangements still require confirmation before the wider launch.

Age eligibility and young learners

You can browse the homepage, lessons and subject guides without giving a birth date or signing in. Guests see the eligibility check when starting a quiz or focus timer. New accounts complete the check during setup; returning users can sign in directly, with account eligibility still checked on the server.

We check the birth date you enter against the minimum age of 16. The date is processed temporarily, not saved in our application database or deliberately logged. Guest eligibility is a browser-session flag. Account setup sends the date to our server for a second check and stores only a declared age band (16–17 or 18+), acceptance time and policy version. This is self-declaration, not identity verification or parental consent. We do not ask for ID documents, school details or phone numbers. Under-16 accounts and interactive play are not offered in this pilot.

Guest learning

Guest scores and focus reward dates stay in your browser and are not uploaded to your account or public leaderboard. You can download or clear them using “Your data, your choice”. Browser storage may be cleared by your device and is not a backup. Guest access still creates hosting traffic; it does not remove privacy obligations.

Puzzles and planning tools

The daily puzzle and study planner run in your browser. Puzzle entries, hints and study-plan inputs are not uploaded or saved to your BrainBloom account. Leaving or refreshing the page clears them. Puzzle play uses the same eligibility check; browsing its instructions and calculating a study plan do not require a birth date. Copying a result or plan places it on your device clipboard only when you choose that action. Puzzle sharing can open your device’s share controls; you choose the destination. A puzzle challenge contains a public grid number, hint count and link, not your account details. The link opens the same grid for another player. Printing uses your browser’s print controls. Optional page analytics follows the choices described below and does not receive these inputs.

Google and email sign-in

Firebase Authentication, provided by Google, handles Google sign-in and email/password login, verification and password-reset emails. Google sign-in can create your BrainBloom login on the first visit. It does not give us access to your Gmail inbox. Passwords go to Firebase, not to our progress database. We receive your Firebase user ID, email and email-verification status. The ID connects your learning records; your email is used privately and is not written to new progress profiles.

Account sessions use browser session storage rather than a permanent “remember me” login. Sign out on shared devices; closing a browser is not a substitute for signing out. The server checks your sign-in token with Google when you use protected account features. We do not store tokens in the learning database.

Learning records and public ranking

We store your chosen alias, XP, scores, question-set and award dates, streak, focus start time and leaderboard choice. Profiles start private. Public ranking requires a verified email and your explicit choice to enable sharing. Only your alias and learning statistics are displayed—not your email, age or school. Do not use identifying or harmful names. You can turn sharing off; this removes you from subsequent responses but cannot recall screenshots or copies made by others. There are no public profile pages, direct messages or user uploads.

Storage and service providers

Learning records use OpenAI Sites-managed Cloudflare D1. Google provides authentication and receives information needed for sign-in and verification. Google and Proton handle messages sent to our support inboxes. Providers may process information outside Australia. Exact processing locations, security-log retention and backup retention are still being confirmed; we do not claim Australian-only storage.

Access, retention and deletion

You can export your BrainBloom application records and identity details from account settings. The export is not a complete export of independent provider logs. Active records remain until you delete your account; automatic inactivity expiry has not been implemented. Account deletion requires a recent sign-in, erases your learning records and requests deletion of your Firebase login. It does not delete your Google/Gmail account, separate guest progress or provider logs and backups.

To prevent late saves from restoring deleted records, a minimal user-ID and deletion-status marker remains. Completed markers become eligible for cleanup after seven days and are removed in bounded batches during later account registrations. If login deletion fails or cannot be confirmed, saving remains blocked and the marker is retained until the issue is resolved. The interface will ask you to retry or contact support instead of claiming complete deletion.

Earlier pilot accounts

Earlier pilot records used a different sign-in provider. They are kept separate and are not automatically linked by matching email addresses or shown on the new leaderboard. Contact support for a verified ownership and data-access request. Never send passwords or recovery codes. Earlier records may contain an email address; a separate retention and migration review is required.

Optional traffic analytics

Cloudflare Web Analytics loads only after you select “Allow analytics” in the preferences at the bottom of the page. Declining does not restrict learning. We also keep it off when your browser sends Do Not Track or Global Privacy Control. Your choice is stored on this device for up to 180 days, separately from your account. You can change it below; turning analytics off reloads the page, so finish any unsaved quiz first. A final page-exit measurement may be sent as the old page closes.

The service measures public-page visits, referral sources, approximate country, browser/device categories and loading performance. Cloudflare says its Web Analytics does not use analytics cookies, fingerprinting or track individual visitors. Network requests still reach Cloudflare, which processes the connection information needed to deliver the service. We do not send account IDs, emails, aliases, birth dates, answers or scores to this analytics service. Sign-in and account routes are excluded from loading the analytics script, and automatic single-page navigation measurement is disabled.

Approved public promotion links can contribute to consenting page-visit totals. Only fixed campaign labels are allowed; unknown query parameters, click identifiers and free-form campaign values keep analytics off. Campaign labels are not used to identify people, and Cloudflare does not provide campaign-label attribution. These safeguards do not make the report a complete visitor count.

Reports describe consenting page visits, not a verified count of unique people. Blocking software, browser privacy choices and sampling can reduce the recorded totals. We do not currently measure quiz completion, individual journeys or returning-user retention. Cloudflare currently makes reports available for six months; raw beacon data is retained for seven days before longer-term aggregation/sampling. See Cloudflare’s analytics description and retention and measurement details. Provider processing may occur outside Australia; the wider-launch vendor and legal review remains outstanding.

Advertising and other tracking

This pilot has no advertising, session recordings, marketing-email subscriptions, payments or live AI question generation. We do not sell personal data. Necessary browser storage supports eligibility, sessions and guest progress. Any future advertising or expanded tracking requires a separate privacy and age-treatment review and updated notices.