Privacy Policy

Last Updated: December 11, 2025

1. Introduction

Welcome to NeuroHack ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application NeuroHack (the "App").

Please read this Privacy Policy carefully. By using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our App.

2. Information We Collect

2.1 Personal Information You Provide Directly

We collect the following personal information that you provide directly to us during onboarding and app usage:

• Name: Your first name or preferred name
• Age: Your age for age verification and content personalization
• Wellness Goals: Your personal goals and objectives for using the App
• Current Mood: Your mental and emotional state
• Areas of Struggle: Challenges you face (e.g., focus, anxiety, motivation)
• Preferred Activity Time: Your preferred time for completing daily activities
• Profile Picture: Optional photo you upload for your profile

2.2 Information Collected Automatically

When you use the App, we automatically collect certain information:

Usage Data:

• Daily hack completion status and patterns
• Current streak count and progress tracking
• Check-in completion and activity timestamps
• Listen/Read preferences for content
• App interaction patterns and feature usage

Device and Technical Information:

• Device type, model, and manufacturer
• Operating system version (iOS)
• App version and build number
• IP address and general geographic location (derived from IP)
• Network carrier information
• Device identifiers for authentication and service delivery

Log and Diagnostic Data:

• Service-related diagnostic information
• Error logs and crash reports
• Performance metrics and analytics
• API request logs and timestamps

2.3 Information from Third-Party Services

We use the following third-party services that may collect information:

• Apple In-App Purchases: Transaction receipts and subscription status (Apple does not share your payment information with us)
• Superwall: Paywall interaction data and subscription analytics
• OpenAI: We send your personal information to OpenAI to generate personalized content (they do not store this data for training)

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 To Provide and Deliver Services

• Generate personalized AI-powered daily "brain hacks" based on your goals and struggles
• Track your progress, streaks, and wellness journey
• Provide personalized content recommendations
• Sync your data across devices
• Enable account restoration via Apple receipt

3.2 To Personalize Your Experience

• Utilize AI to create customized content based on your profile
• Tailor daily activities to your preferences and goals
• Adapt content difficulty and type based on your usage patterns

3.3 To Improve Our Services

• Analyze usage patterns and identify trends
• Evaluate and improve app features and user experience
• Develop new features and functionality
• Diagnose and fix technical issues

3.4 To Manage Subscriptions

• Process and manage your subscription purchases
• Verify purchase receipts with Apple
• Provide customer support for billing inquiries

3.5 To Communicate with You

• Send administrative notifications about your account and subscription
• Provide customer support and respond to your inquiries
• Send marketing and promotional communications (with your consent)
• Send push notifications about app updates and special offers

3.6 To Ensure Security and Compliance

• Protect against fraud, abuse, and security threats
• Comply with legal obligations and regulatory requirements
• Enforce our Terms of Service

4. Third-Party Service Providers

We share your information with the following third-party service providers who help us operate the App:

4.1 OpenAI

We use OpenAI's API to generate personalized AI content for your daily brain hacks. Your personal information (goals, struggles, preferences) is sent to OpenAI to create customized content. OpenAI does not use your data to train their models.

Privacy Policy: https://openai.com/policies/privacy-policy

4.2 Supabase

We use Supabase as our backend database and cloud infrastructure provider to store and manage your user data securely.

Privacy Policy: https://supabase.com/privacy

4.3 Superwall

We use Superwall to manage our subscription paywall and analyze conversion metrics. Superwall collects information about your interactions with subscription offers.

Privacy Policy: https://superwall.com/privacy

4.4 Apple Inc.

All payment processing is handled by Apple through their In-App Purchase system. We never see or store your payment information. Apple provides us with a receipt token to verify your subscription status.

Privacy Policy: https://www.apple.com/legal/privacy/

5. Data Retention

We retain your personal information according to the following policies:

5.1 Active Accounts

We retain your personal information for as long as you maintain an account with us, whether you have an active subscription or not. This allows you to return to the App and continue your progress at any time.

5.2 After Account Deletion

If you request deletion of your account:

• Personal Data: Deleted within 30 days of your request
• Payment and Subscription Records: Retained for 90 days or as required by law for compliance, dispute resolution, and fraud prevention
• Aggregated and Anonymized Data: May be retained indefinitely for analytics and service improvement

5.3 Legal Obligations

We may retain certain information longer if required by law, regulation, legal process, or to protect our legal rights.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information:

• Encryption in Transit: All data transmitted between the App and our servers uses HTTPS/TLS encryption
• Encryption at Rest: Your data is encrypted when stored in our database
• Secure Authentication: Receipt-based authentication system (no passwords to compromise)
• Access Controls: Row-level security policies ensure users can only access their own data
• Payment Security: Apple handles all payment processing (PCI DSS compliant); we never see your credit card information
• API Security: JWT verification on all backend functions
• Infrastructure Security: SOC 2 compliant cloud infrastructure (Supabase)

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

7. Your Privacy Rights

7.1 All Users

Regardless of your location, you have the following rights:

• Access: Request a copy of the personal information we have about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Data Portability: Request a copy of your data in a structured, machine-readable format
• Opt-Out of Marketing: Unsubscribe from promotional communications at any time

7.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information (subject to certain exceptions)
• Right to opt-out of the "sale" of personal information (we do not sell your information)
• Right to non-discrimination for exercising your CCPA rights

7.3 Other US State Residents

We comply with privacy laws in Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other states with consumer privacy legislation. You have similar rights to those described above.

7.4 How to Exercise Your Rights

8. Children's Privacy

NeuroHack is designed for users aged 17 and older. We do not knowingly collect personal information from children under 17. If you are under 17, please do not use the App or provide any information to us.

If we learn that we have collected personal information from a user under 17, we will promptly delete that information. If you believe we have collected information from a child under 17, please contact us at contact.neurohack@gmail.com.

9. Push Notifications and Marketing Communications

9.1 Types of Communications

We may send you the following types of push notifications:

• Administrative Notifications: Important updates about your account, subscription, or app functionality
• Promotional Notifications: Special offers, discounts, and marketing messages
• Daily Reminders: Notifications about your daily brain hacks (if enabled)

9.2 Opt-Out

You can opt-out of promotional notifications at any time by:

• Adjusting notification settings in your device's Settings app
• Contacting us at contact.neurohack@gmail.com

Note: You cannot opt-out of administrative notifications related to your account and subscription.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country.

By using the App, you consent to the transfer of your information to the United States and other countries where our service providers operate.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons.

We will notify you of any material changes by:

• Posting the new Privacy Policy in the App
• Updating the "Last Updated" date at the top of this policy
• Sending you a notification (if we have your contact information)

Your continued use of the App after any changes indicates your acceptance of the updated Privacy Policy.

12. Do Not Track

Some web browsers have a "Do Not Track" feature. Because there is not yet a common understanding of how to interpret Do Not Track signals, our App does not currently respond to Do Not Track signals.

13. California "Shine the Light" Law

California Civil Code Section 1798.83 permits California residents to request information regarding the disclosure of personal information to third parties for direct marketing purposes. We do not share your personal information with third parties for their direct marketing purposes.

14. Contact Us

© 2025 NeuroHack. All rights reserved.