Privacy Policy
Technology should serve you. Not the other way around. In a world that harvests your attention, we help you reclaim it. To do that, we need to process your brainwaves and some basic information about you.
Here is how we handle it.
| The Human Version | The Standard Terms |
|---|---|
| Why we collect data. We only collect what is necessary to make your training work. We use your data to detect your focus, track your progress, and help you reach your goals. | Purpose of Processing. BRYM processes data to provide, improve, and personalize the Service. This includes focus detection, progress analytics, and account management. |
| Brainwaves vs. Scores. Your EEG headband sends raw brainwave data to our servers. We use this to calculate your Focus metrics and refine our algorithms. We only save your permanent Focus Scores to your profile. | Data Processing. Raw EEG signals are transmitted to BRYM servers for real-time metric calculation and algorithm optimization. Permanent storage is limited to derived Focus Scores and session metadata. |
| Your Identity. You can choose to share your name, email, or phone for login and updates. Year of birth and gender are optional and help us improve the science. | Personally Identifiable Information (PII). Users may provide names, emails, and phone numbers for authentication. Optional demographic data is processed as anonymized metrics. |
| No Third Parties. We never share your data with third parties. We only use IT services like Google Cloud and Heroku to host the app. They don't "own" your data; they just provide the digital room for it. | Disclosure. We do not share data with third parties for marketing. We utilize authorized IT service providers (sub-processors) solely for infrastructure, hosting, and storage. |
| Surveys and Coaching. These are always optional. They help us learn how to improve the product for everyone, or help us tailor the training specifically for you. | Optional Feedback. Participation in surveys or coaching is voluntary. Data is used for product development (legitimate interest) or individual program customization. |
| 6-Month Rule. We keep your data for 6 months after you close your account so you can change your mind. After that, we wipe it clean. | Data Retention. Data is retained for the duration of the agreement and for a 6-month grace period following account closure before permanent deletion or anonymization. |
| Safety and Privacy. Your data is encrypted and stored in your region. It is locked down with industry-standard security. | Security. Data is encrypted in transit (TLS) and at rest (AES-256). Data is stored on servers within the user's primary geographic region (EEA for Europe). |
| Total Control. You don't need to ask us for permission. You can view, change, or delete your data and account directly at account.brym.app. | Data Subject Rights. Users maintain the right to access, rectify, or erase their personal data and focus metrics. These rights are exerciseable via the BRYM User Account portal. |
Important Reminder
BRYM is a gym for the brain, not a clinic. Our products are not medical devices and are not intended to diagnose or treat any condition. We focus on performance and well-being.