Privacy Policy
Last updated: May 9, 2025
This Privacy Policy describes how BrainRush ("we", "us", or "our") collects, uses, and shares your personal information when you use our mobile application and related services (collectively, the "Service"). By using BrainRush, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
1.1 Account Information
When you create an account, we collect:
- Email address — used for authentication and account recovery
- Password — stored securely via Supabase Auth (hashed, never plain text)
- Username — your public display name in the app
- Avatar — either a Dicebear-generated avatar or a custom image you upload
If you sign in with Google, we receive your Google account email, name, and profile picture from Google OAuth. You can view Google's privacy policy at policies.google.com/privacy.
1.2 Game Data
We collect data related to your gameplay to provide core features:
- XP and level — progression data
- Streaks — current and best win streaks
- Match history — scores, correct answers, game results, and room participation
- Friends list — connections you make with other players
- Friend requests — sent and received requests
1.3 Device & Technical Information
To deliver push notifications and ensure compatibility, we collect:
- Push notification token — an Expo push token used to send you notifications (room invites, game updates)
- Platform — iOS or Android (used for platform-specific features and push routing)
- Device type — whether you are on a physical device or simulator
1.4 Advertising Data
BrainRush displays advertisements through Google AdMob. Google may collect and use device identifiers and usage data to serve personalized or non-personalized ads. You can learn more about Google's ad practices at policies.google.com/technologies/ads.
2. How We Use Your Information
- To provide, maintain, and improve the Service
- To authenticate users and secure accounts
- To enable multiplayer features (rooms, friend connections, leaderboards)
- To send push notifications for room invites and game events
- To display advertisements and measure ad performance
- To analyze usage trends and fix bugs
- To enforce our Terms of Service and prevent abuse
3. Data Storage & Security
Your data is stored in Supabase, a secure PostgreSQL-backed platform. Authentication tokens are stored securely using Expo Secure Store on mobile devices. We use industry-standard practices to protect your data, including encrypted connections (TLS/SSL) and hashed passwords.
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.
4. Third-Party Services
We use the following third-party services:
- Supabase — authentication, database, and storage. Privacy Policy
- Google OAuth — social sign-in. Privacy Policy
- Google AdMob — advertising. Ad Policies
- Expo / EAS — app updates and push notifications. Privacy Policy
- Cloudflare Workers — game server backend. Privacy Policy
- Dicebear — default avatar generation. Privacy Policy
5. Push Notifications
With your permission, we send push notifications for room invites and game-related events. You can disable notifications at any time through your device settings. Your push token is stored in our database and deleted when you sign out or disable notifications.
6. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your account and associated data
- Object to or restrict certain processing
- Withdraw consent (e.g., for push notifications)
To exercise these rights, contact us at the email below. Account deletion is also available in-app via Settings.
7. Children's Privacy
BrainRush is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us and we will delete it.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes via the app or by updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.
9. Contact Us
If you have any questions about this Privacy Policy, please contact us at support@brainrush.app.