Privacy Policy

Information you provide

We may collect information that you provide directly to us, including:

• Your full name and email address.
• Authentication information, including a password that is processed and stored as a cryptographic password hash rather than in readable form.
• Assignment and worksheet information, including titles, descriptions, selected curriculum questions, and worksheet settings.
• Information you submit through the contact form or in communications with us, including your name, email address, and message.
• Feedback or other information you voluntarily provide.

Information collected automatically

When you use the Service, Brainyak and its service providers may automatically process technical and diagnostic information, including:

• IP address and approximate location derived from the IP address.
• Browser, device, operating-system, and language information.
• Requested pages, request times, referring pages, and response information.
• Session, authentication, and security information.
• Error reports, stack traces, request identifiers, and performance diagnostics.
• An internal Brainyak account identifier and account role when useful for diagnosing authenticated server errors.
• Information about how you interact with the Service, such as pages viewed, features used, and actions taken.

Brainyak does not use advertising trackers, targeted-advertising technology, or advertising analytics. We may use product-analytics technology to understand how the Service is used and to improve it. We do not currently use session-recording technology.

We may use personal information to:

• Create, authenticate, maintain, and secure user accounts.
• Provide assignments, worksheets, curriculum browsing, and related features.
• Send transactional messages, including welcome and password-reset emails.
• Respond to support requests, privacy requests, and other inquiries.
• Prevent spam, abuse, fraud, and security incidents.
• Monitor, debug, maintain, and improve the Service.
• Understand how the Service is used, including which curriculum topics, question types, and settings are used most, to improve Brainyak’s content and features.
• Request feedback about the Service.
• Comply with legal obligations and enforce applicable agreements.

We do not use personal information for targeted advertising.

We may disclose personal information to service providers that process information on our behalf to operate, secure, and support Brainyak. These providers currently include:

• Heroku, including Heroku Postgres and Heroku Redis, for application hosting, database hosting, caching, and background-job infrastructure.
• Cloudflare for DNS, HTTPS, traffic delivery, and security.
• Sentry for server-side and browser error monitoring and limited performance tracing.
• Google reCAPTCHA for spam and abuse prevention on protected forms. Use of reCAPTCHA is subject to the Google Privacy Policy and Terms of Service.
• Resend for transactional email delivery. Resend processes recipient addresses and message content and retains delivery records and copies of sent messages for a limited period.
• Migadu for receiving, storing, and managing email communications sent to Brainyak addresses.
• Pushover for limited internal operational alerts.

These providers process personal information on our behalf as necessary to provide their services to Brainyak, subject to applicable contractual terms and privacy practices.

We may also disclose information:

• When required by law, legal process, or a valid governmental request.
• To protect the rights, safety, and security of Brainyak, our users, or others.
• To investigate fraud, abuse, security incidents, or violations of our policies.
• In connection with a merger, financing, acquisition, reorganization, sale of assets, or similar business transaction.
• With your direction or consent.

We do not sell personal information or share personal information for cross-context behavioral advertising or targeted advertising.

Brainyak uses cookies and similar technologies that are necessary to operate, authenticate, and secure the Service. These may include:

• A Rails session cookie used to maintain an authenticated session.
• An optional remember-me cookie used to keep a user signed in.
• Security-related technologies used by Cloudflare and Google reCAPTCHA.

We do not use cookies for advertising or targeted advertising and do not currently use cookies for product-usage analytics.

Most browsers allow you to control cookies through their settings. Blocking necessary cookies may prevent account login or other Service features from working correctly.

Do Not Track signals

Some browsers offer a “Do Not Track” (“DNT”) setting that signals a preference not to have online activity tracked. Because no uniform standard for interpreting DNT signals has been adopted, Brainyak does not currently respond to browser DNT signals.

Third-party collection across websites

Brainyak does not use third-party technologies for cross-site behavioral advertising or to build advertising profiles. However, service providers such as Cloudflare and Google reCAPTCHA may process technical, device, cookie, and interaction information for security, fraud prevention, and abuse detection in accordance with their own privacy practices.

We generally retain account and assignment information for as long as you maintain a Brainyak account or as needed to provide the Service.

We may retain some information for a limited period after an account is deleted when reasonably necessary for legal compliance, security, fraud prevention, dispute resolution, backup restoration, or ordinary system operations. Technical logs and diagnostic information may be retained according to our service providers’ settings and operational needs.

Retention by individual service providers, including copies of transactional email, is described in the “How we disclose information” section above.

Contact-form submissions and support communications may be retained as reasonably necessary to respond to the inquiry and maintain appropriate business records.

We use reasonable administrative and technical safeguards designed to protect personal information. These include HTTPS, password hashing, secure cookie settings, access controls, spam prevention, and application monitoring.

No method of transmission or storage is completely secure. We therefore cannot guarantee absolute security.

Brainyak is intended for teachers, tutors, and others creating educational materials. Student-facing registration and access are not currently available.

Brainyak is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we collected personal information from a child under 13, we will take reasonable steps to delete it. If you believe a child under 13 provided personal information to Brainyak, contact [email protected].

You may delete your account at any time from your account settings. Deleting your account removes your account and associated assignment information from our active systems, subject to the limited retention described in the “Data retention” section above.

You may also request access to, correction of, or deletion of personal information by contacting [email protected] or by using the contact form.

We may need to verify your identity before completing a request. Applicable law may permit or require us to deny or limit a request in certain circumstances. If we deny a request that is subject to an appeal right, you may appeal by emailing [email protected].

You may update your email address and password from your account settings.

Depending on where you live and whether an applicable privacy law covers Brainyak, you may have rights concerning your personal information, including rights to request access, correction, deletion, or a copy of certain information, and rights to appeal certain decisions.

Brainyak does not sell personal information, use personal information for targeted advertising, or engage in profiling that produces legal or similarly significant effects.

To submit a request, contact [email protected] or use the contact form.

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date. When appropriate, we may also provide additional notice through the Service or by email.

Brainyak is operated by Nicholas Mizokami under the trade name Brainyak.

Privacy questions and requests: [email protected]

General support: [email protected]