Privacy Policy

01

Who we are and what this policy covers

This Privacy Policy applies to the BrainWins mobile application, the website at brainwins.app, and related services operated by 717apps, LLC (“BrainWins,” “we,” “us,” or “our”).

BrainWins is an individual-authorized digital wellbeing app. It is not a parental-monitoring service, employee-monitoring service, or hidden-surveillance tool. You choose whether to grant Apple Screen Time authorization and which apps, categories, or websites to protect.

02

Information that stays on your device

The following information is stored locally on your device or within Apple-provided Screen Time and App Group storage. BrainWins does not upload it to our cloud service:

• Apps, app categories, and websites you select through Apple’s Family Activity Picker.
• Opaque Family Controls tokens and Managed Settings shield state.
• Raw per-app Screen Time identities and the private usage report rendered by Apple’s Device Activity framework.
• The private identities of apps and websites selected for a mode. Mode names, schedules, protection settings, and daily allowances may be backed up without those identities.
• Local usage-baseline history used to calculate Time Won.
• Local notification content for Focus Run completion reminders.

03

Information we may process

You can use local blocking without Sign in with Apple, although an active App Store subscription is required after onboarding. When the app is online, BrainWins may automatically create a pseudonymous installation account with a service-generated identifier to privately back up route definitions and preferences. No name or email is attached unless you later choose Sign in with Apple. If you connect Apple or use optional online features, we may also process the categories below.

Website information

The BrainWins website does not currently use advertising cookies or cross-site trackers. Like most hosting providers, our host may process standard request information such as IP address, browser type, requested page, and timestamp to deliver the site, maintain security, and diagnose failures.

04

How we use information

We use information only as reasonably necessary to:

• Authenticate accounts and provide account recovery.
• Sync eligible goals, progress, and profile settings.
• Provide opt-in leagues, challenges, and privacy-thresholded global totals.
• Verify bounded progress events and reduce fraud or scoreboard manipulation.
• Process and restore verified App Store entitlements if commerce is enabled.
• Investigate reports, enforce community rules, and protect users and the service.
• Respond to questions, deletion requests, and other communications.
• Maintain reliability, comply with law, and defend legal rights.

Where applicable law requires a legal basis, we process information to perform our agreement with you, based on your consent, for our legitimate interests in operating and securing BrainWins, or to comply with legal obligations. You may withdraw consent where processing is based on consent.

05

What BrainWins does not collect or do

• We do not upload selected app names, website names, browsing history, or raw per-app Screen Time activity.
• We do not collect precise location, contacts, photos, microphone recordings, or health data.
• We do not sell personal information or share it for cross-context behavioral advertising.
• We do not use third-party advertising SDKs or require App Tracking Transparency permission.
• We do not use private Screen Time data to identify, profile, or advertise to you.

06

Community visibility and aggregate privacy

Community participation is optional and off by default. If you enable global leaderboard visibility, other participants may see your display name, league tier, weekly BrainScore, rank, and protected-minute total. They never see the apps or websites you selected.

Global protected-time and Time Won totals are released only after their respective privacy thresholds are met. Each aggregate requires contributions from at least five opted-in participants, reducing the risk that a small group could reveal one person’s total.

07

When information is shared

We do not sell your information. We may disclose limited information in these circumstances:

• Apple: for Sign in with Apple, Screen Time frameworks, App Store distribution, purchases, and platform services. Apple’s handling of information is governed by the Apple Privacy Policy.
• Supabase: for optional authentication, database, and cloud-service infrastructure. Supabase generally acts as a service provider processing customer data under our instructions. See the Supabase Privacy Policy.
• Legal and safety reasons: when reasonably necessary to comply with law, lawful process, enforce our terms, investigate abuse, or protect rights, safety, and service integrity.
• Business transactions: as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality and notice where required.
• At your direction: when you intentionally choose to make profile or competition information visible.

We require service providers that process personal information for BrainWins to use appropriate confidentiality, security, and data-protection measures consistent with this policy and applicable law.

08

Retention and deletion

Local data remains on your device until you delete it through BrainWins, reset related settings, or remove the app, subject to Apple’s device and backup behavior.

Cloud account and progress information is generally retained while your account is active. You can delete either a pseudonymous private backup or a connected Apple account from BrainWins settings. Deletion removes the cloud account and associated personal information that we are not legally required to retain, while information saved locally on the iPhone remains available until you remove it separately. Limited records may be retained for the shortest period reasonably necessary for security, fraud prevention, dispute resolution, legal compliance, or enforcing agreements.

Deletion may not immediately remove encrypted backup copies. Backup data is isolated from normal use and removed through the ordinary backup-rotation process. We do not restore deleted account data to active service systems except where necessary for disaster recovery, and any restored deletion request remains subject to deletion controls.

09

Your choices and privacy rights

• Screen Time access: You can change Screen Time authorization in iOS Settings. Revoking it disables blocking features that depend on Apple’s Screen Time frameworks.
• Notifications: You can disable BrainWins notifications in the app or iOS Settings.
• Community visibility: Global leaderboard visibility is optional and can be turned off in BrainWins settings.
• Account deletion: You can delete a pseudonymous backup through Profile & Settings → Delete Private Cloud Backup, or a connected account through Profile & Settings → Delete Cloud Account. This deletes the cloud account rather than merely deactivating it and does not erase local iPhone progress.
• Access and correction: You can update eligible profile information in the app or contact us to request access, correction, portability, restriction, objection, or deletion where provided by law.

We may need to verify your identity before completing a privacy request. If we deny a request, you may reply to appeal that decision. You may also lodge a complaint with your local data-protection authority.

California and other U.S. state residents may have rights to know, correct, delete, or receive a copy of covered personal information and to opt out of certain sales, sharing, or targeted advertising. BrainWins does not sell personal information or share it for cross-context behavioral advertising.

10

International processing and security

BrainWins and its service providers may process information in the United States and other countries where they operate. Where required, we use contractual and other safeguards intended to protect information transferred across borders.

We use reasonable administrative, technical, and organizational measures designed to protect information, including access controls, encrypted network transport, restrictive database permissions, and separation of private service records. No method of transmission or storage can be guaranteed completely secure.

11

Children’s privacy

BrainWins is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If the minimum age for consent to online services is higher where you live, you may use account-based features only with authorization from a parent or legal guardian. If you believe a child has provided personal information without appropriate authorization, contact us so we can investigate and delete it where required.

12

Changes to this policy

We may update this policy as BrainWins changes or legal requirements evolve. We will post the revised version here and update the effective date. If a change materially affects how we use personal information, we will provide additional notice where required.