Privacy Policy

BrainMaxx is operated by MightyApps. This policy covers the BrainMaxx app and this website. You can contact us about privacy at amenallah.hsoumi@gmail.com.

Your notes and impromptu audio recordings are stored on your device. BrainMaxx does not upload their contents to our routine-sync service or send recordings for transcription or grading. Device backups and services you choose to use, such as Apple backups or Siri, are governed by those services' settings and privacy policies.

Microphone access is used only for impromptu recording after you grant permission. You can end a recording at any time. Device authentication protects access to Notes; Apple performs the Face ID, Touch ID, or device-passcode check. BrainMaxx receives the authentication result, not your face, fingerprint, or passcode. The Notes lock is an access control, not a separate end-to-end encrypted backup service.

Reminders are scheduled locally after notification permission is granted. You can change microphone and notification permissions in iOS Settings. This version does not read HealthKit, contacts, or GPS location.

The app stores onboarding answers, brain and sleep check-ins, routine preferences, and progress on your device. Routine completion records are also automatically sent to our servers when the app connects: the routine identifier, date, completion status, and update time. This includes health-related habits such as hydration and meals, exercise habits such as walking, and completion of impromptu practice—not the recording itself.

Server records use an automatically assigned identifier associated with your app installation. They support routine synchronization and community completion totals. Other users see aggregate counts, not your individual history. Reinstalling the app or changing devices does not guarantee recovery of local data.

Apple processes payments. RevenueCat receives purchase and subscription information, including product and transaction identifiers, purchase and renewal dates, and access status, under an automatically generated app user identifier. We use this to unlock paid features, restore purchases, prevent purchase fraud, and understand subscription performance. We do not receive your full payment-card details.

We use PostHog to understand app use. It receives app launches, screens visited, taps, reminder actions, routine completions, and practice events, together with timestamps, an installation-level analytics identifier, and technical details such as device model, operating system, app version, and language. Note events include a length range, not note text; practice events include duration, not audio.

The current app also enables PostHog session replay, which can capture the appearance of app screens and interactions, including wellness information visible on unmasked screens. Notes and the note composer are masked from replay. Replay does not record microphone audio. Replay network-telemetry and console-log capture are disabled.

Our servers receive connection information, including IP addresses, and Apple App Attest identifiers and verification records to verify genuine app installations and protect the service. Random identifiers are pseudonymous, not a guarantee of anonymity: records can remain associated with the same installation even when we do not know your name.

If you contact us, we receive your email address and the information you choose to include, so we can respond and resolve your request. Please avoid sending notes, recordings, or medical details unless necessary for your request.

Our website hosting provider receives ordinary request information, such as IP address, browser information, and the page requested, to deliver and protect the website.

We use information to provide app features, synchronize routine progress, calculate aggregate community counts, validate purchases, answer support requests, secure the service, and improve the product.

We do not sell personal information, serve targeted advertising, or use app data for cross-app advertising tracking. We do not use your notes or recordings to train AI models.

Our providers include Apple for App Store purchases and device services, RevenueCat for purchase management, PostHog for analytics and session replay, and infrastructure and email providers for hosting and support. We share the information needed for these services. Apple also processes information under its own privacy policy.

Providers may process data outside your country, including in the United States. Applicable data-protection requirements govern those transfers. We may also disclose information when required by law, to protect users and the service, or in a business transfer subject to applicable privacy obligations.

Local notes and recordings remain in app storage until removed or the app's data is deleted. Deleting the app does not automatically delete server records, provider records, or device backups, and does not cancel a subscription.

We retain server-side routine, security, analytics, purchase, and support records for the purposes described above, taking account of service needs, deletion requests, fraud prevention, and legal obligations. Retention can differ by provider and record type. We do not promise a fixed automatic deletion period where one has not been configured.

We use safeguards such as HTTPS and access controls. No device, transmission, or storage system is completely secure.

You can delete notes in the app, revoke device permissions, and stop future app collection by ceasing use and deleting the app. Routine synchronization is automatic in this version; it is not a separately enabled cloud-backup option. Manage Apple backups and subscriptions separately in your Apple settings.

You can contact amenallah.hsoumi@gmail.com to request access, correction, deletion, or a copy of personal information we control, or to object to or restrict its processing where applicable. Depending on your location, you may also have a right to withdraw consent and complain to a data-protection authority. We may need information to verify your request and locate pseudonymous records; an email address alone may not identify an app installation. Please contact us before deleting the app if you need help locating its records.

BrainMaxx is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

We may update this policy. The latest version will always be posted on this page with its effective date.