PRIVACY POLICY · 13 OCTOBER 2026
Your privacy, in plain words.
This policy covers the SharpBrain app and the website at https://sharpbrain.app, operated by Spring Digital Commerce LLC (Wilmington, Delaware, United States). For privacy questions or requests, email bas@springdigitalcommerce.com. The app is in development. If its data practices change before release, we will update this policy and the date above.
The short version
- You can use the app without creating an account or giving us your name or email.
- We store your game results, levels, streaks and test results so the app works and syncs.
- Answers to the ADHD and anxiety screeners are encrypted and never used for analytics, advertising or anything but showing you your result.
- We use a small number of service providers (hosting, payments, analytics, crash reports, email). We do not sell personal data and we do not track you across other companies' apps or websites.
- You can delete your account and all your data from inside the app.
1. What we collect and why
Account and identifiers
When you first open the app it creates an anonymous account with a random identifier on Supabase, our backend provider. This lets your progress sync and lets us honour your purchase. If you choose to sign in with Apple, Apple gives us a stable account identifier and, if you allow it, your email address or an Apple private relay address. We use the email only to identify your account, to recover it, and to send the service emails described below.
Game and progress data
For each game you play we store the game, the level, the score, accuracy, duration and the time. We store your daily Snack, your streak, your planner weights (which skills you asked to focus on and how you have been doing) and your weekly reports. This is the product.
Test results
For the IQ Test, Brain Type and Focus Personality we store your answers, your score or type and the date, so you can see the result again and so the planner can use the Focus Personality result.
For the ADHD Screener (ASRS v1.1) and the Anxiety Check (GAD-7) we treat your answers as health data. They are encrypted on your device before they are stored or synced, we never send them to our analytics or crash-reporting providers, we never use them to decide what to show you in ads or paywalls, and you can delete any result on its own from the test screen. In Apple's App Privacy labels this is declared under Health.
Onboarding answers
During onboarding you tell us when your brain usually gives up (to set a reminder time), roughly how much you scroll (for a joke on your first result card) and which skills you want to work on (for the planner). We store those answers with your account.
Purchases
Purchases are made through Apple. We never see your card. RevenueCat, our subscription provider, receives the purchase receipt from Apple and tells us which product you own and until when. We store that entitlement next to your account identifier. Apple's own privacy policy governs what Apple keeps.
Usage analytics
We use PostHog, hosted in the European Union, to understand how the app is used: which screens are opened, whether a Snack was finished, which game and level were played and the score, whether a share card was created, whether the paywall was seen, and whether a trial started. For tests we record only that a test was started or finished and, for the non-health tests, the result band. We never send screener answers or results to analytics. Events carry your anonymous account identifier and basic device details (model, OS version, app version, country derived from language settings).
Crash reports
We use Sentry to collect crash and error reports. A report contains the technical state of the app at the time of the crash, your device model and OS version, and your anonymous identifier so we can see whether the same person is hit repeatedly. Reports do not contain test answers.
Notifications
The daily reminder is scheduled on your device and sends nothing to us. If you allow notifications we also store a push token so we can send the Sunday Brain Report. You can turn either off in the app or in iOS Settings.
If we have your email we may send a message when a trial is about to end and, if you opt in, the weekly report by email. We use Resend to deliver these. We do not send marketing newsletters unless you sign up for one separately.
Website
The website sets no advertising cookies and loads no third-party analytics or tracking pixels. Our hosting provider keeps ordinary server logs (IP address, requested page, browser, time) for security and reliability. If you use the support form, we store your name, email, the topic and your message so we can reply. If you leave your email on the download page, we store it to send one launch email, with an unsubscribe link.
2. What we do not do
- We do not sell or rent personal data.
- We do not track you across other companies' apps or websites, and the app does not show Apple's App Tracking Transparency prompt because it does not need to.
- We do not show third-party ads in the app.
- We do not use screener answers for anything other than showing you your result.
- We do not make claims about your health, intelligence or medical status from your data.
3. Legal bases (EU, UK and similar laws)
We process account, progress, test and purchase data to perform our contract with you. We process analytics and crash data on the basis of our legitimate interest in running and improving the app, with the safeguards above, and you can opt out of analytics in Settings. We process health-screener answers only with your explicit consent, which you give when you start a screener and can withdraw by deleting the result. Service emails are sent to perform the contract; optional emails are sent only with consent.
4. Service providers
| Provider | Purpose | Region |
|---|---|---|
| Supabase | Database, authentication, sync | EU |
| Apple | Sign in with Apple, App Store purchases, push delivery | Global |
| RevenueCat | Subscription status | US |
| PostHog | Usage analytics | EU |
| Sentry | Crash reports | EU or US, configured at release |
| Resend | Transactional email | US |
| Website host | Serving this site and the support form | Global edge, EU origin preferred |
Where a provider is outside the EU or UK, transfers rely on standard contractual clauses or an adequacy decision. We will confirm the final list and regions before release and update this table.
5. Retention
We keep your data for as long as your account exists. If you delete your account, all rows linked to your identifier are deleted from our database immediately and from backups within 30 days. Crash reports are retained for 90 days. Analytics events are retained for 12 months. Support messages are kept for 24 months after the last reply. Purchase records needed for tax and accounting are kept as the law requires, without your game or test data.
6. Your rights and choices
- Delete your account and all data from Settings in the app. See how deletion works.
- Delete any single test result from its result screen.
- Turn off analytics, reminders and emails in Settings.
- Ask us for a copy of your data, a correction, or deletion by emailing bas@springdigitalcommerce.com. We answer within 30 days.
- If you are in the EU or UK you can also complain to your data protection authority.
More detail is on the privacy choices page.
7. Children
SharpBrain is written for adults. We do not knowingly collect personal data from children under 13 (or the higher age your country sets), and the app does not allow account creation under that age. If you believe a child has given us data, email us and we will delete it.
8. Security
Data is encrypted in transit. Screener answers are encrypted at rest with a key held on your device. Database access is restricted so that each account can read and write only its own rows. No system is perfectly secure; if we learn of a breach affecting you we will tell you and the relevant authority as the law requires.
9. Changes
We will post changes here with a new date. If a change materially affects how we use your data we will also tell you in the app before it takes effect.