Last updated: 11 November 2025 • Effective date: 10 November 2025
This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you use Brainyapp (the “App”). It is written to help meet Google Play requirements and UK/EU/Guernsey privacy standards.
Who we are
Brainyapp is operated by Opta Enterprises (C.I.) Limited (“we”, “us”, “our”). We are based in Guernsey, Channel Islands, and act as the data controller for personal data processed in and through the App.
This policy covers personal data processed when you install and use the App, create an account, make purchases via Google Play, participate in gameplay and community features, or contact support. Our website may present a separate cookie notice.
Personal data we collect
Account & Profile
Username, email address, password (stored as a hash).
Age (for appropriate experiences) and optional profile details such as gender and continent/region.
Gameplay & Community
Game progress, scores, daily test results, history, personal bests.
Friends list and friend requests you initiate or accept.
Purchases
Google Play purchase information handled by Google (e.g., order ID, payment status). We may receive a purchase token, product ID, and subscription state to activate or manage Pro access.
Device & Usage
Device model, operating system, app version, language, and basic diagnostic logs (e.g., crash or performance data).
Network IP address and timestamps for security, fraud prevention, and server reliability.
Support
Messages you send to support and the contact details you provide.
Validate Google Play purchases/subscriptions and manage Pro access.
Performance of a contract; legitimate interests (fraud prevention)
Improve and secure the App
Diagnostics, crash logs, analytics of aggregate usage patterns.
Legitimate interests
Communications
Service messages, responses to support, important changes.
Legitimate interests; compliance with legal obligations
Legal & compliance
Record keeping, responding to lawful requests.
Legal obligation
If we ever rely on consent (for example, optional notifications or marketing), you can withdraw it at any time in the App or by contacting us.
Sharing and disclosures
Google Play processes payments. We receive limited purchase details (e.g., purchase token, product ID) to grant subscription benefits. We do not process card details.
Service providers (e.g., hosting, customer support tools) may process data on our behalf under contracts requiring confidentiality and security.
Legal and safety disclosures when required by law or to protect rights, users, or the App.
We do not sell personal data. We do not share personal data with third parties for their own advertising purposes.
International transfers
Your data may be processed in Guernsey and in other countries (for example, where our service providers are located). Where required, we use appropriate safeguards (such as UK/EU Standard Contractual Clauses or equivalent mechanisms) to protect your information.
Data retention
Account data is retained while your account is active. If you delete your account, we generally delete or anonymise personal data within 30 days, unless we must retain it longer (e.g., to comply with law).
Server logs and diagnostic data are typically kept for up to 90 days, unless needed longer for security or troubleshooting.
Purchase records are retained as required for tax and accounting.
Security
Transport-layer encryption (HTTPS) for data in transit.
Password hashing and role-based access controls on our systems.
Internal policies aligned with the principle of least privilege.
No method of transmission or storage is 100% secure; we work to continually improve our safeguards.
Your rights
Depending on where you live, you may have rights under applicable data protection laws (including the Data Protection (Bailiwick of Guernsey) Law, 2017, the UK GDPR, and/or the EU GDPR) to:
access, correct, or delete your personal data;
object to or restrict certain processing;
data portability; and
withdraw consent where processing is based on consent.
You can exercise these rights from within the App where available, or by emailing support@brainyapp.fun.
The App is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided personal data, please contact us so we can take appropriate action. Local age requirements may vary; where consent is required by law, we will seek verifiable parental consent.
Google Play Data safety summary
To help you understand how data is handled in relation to Google Play’s Data safety section:
Data collected: account data (username, email, age), gameplay data (scores/progress), purchase tokens, device/diagnostic data, and support messages.
Data shared: purchase information with Google Play for billing; service providers act on our behalf.
Security: data encrypted in transit; passwords stored as hashes.
Deletion: in-app or email request; data typically deleted/anonymised within 30 days (subject to legal obligations).
Optional permissions: If the App requests any optional permissions, they are used only for the stated feature and can be disabled at any time.
Changes to this policy
We may update this policy from time to time. Material changes will be communicated in-app or by other appropriate means. The “Last updated” date shows the latest revision.