Privacy Notice
Last updated: 7/28/2026
Our commitment to your data
Protecting your personal data is a top priority. We are committed to safeguarding it at every step — in transit, at rest, and in the way we work with our providers. We will never sell your personal data, never rent it to advertisers, and never share it with third parties for their own marketing. We collect only what we genuinely need to run the service, keep it only as long as necessary, and apply strict access controls so that only authorised people can ever see it.
Who we are
Brainy Bites ("we", "us") operates brainybitesapp.app and is the data controller for the personal information we process about you in connection with the service. You can reach us at Brainybites@edu-wise.app.
What we collect
- Account data — email address, hashed password, sign-in provider identifier.
- Quiz content — text, PDFs and images you submit; the quizzes we generate for you.
- Usage data — number and timing of quizzes generated, plan tier, plus standard request logs (IP address, user agent, timestamp) used for security and abuse prevention.
- Support messages — anything you send us through Help.
Why we use it
- To create and operate your account (contract).
- To deliver the service: generate quizzes, save your settings, count usage against your plan (contract).
- To prevent fraud, abuse, and security incidents (legitimate interests).
- To send essential service emails (contract). Marketing emails only with your consent.
- To meet legal obligations such as tax and accounting (legal obligation).
Who we share it with
- Hosting and infrastructure providers that run our application and database.
- Email delivery for transactional messages (verification, password resets).
- AI model providers that generate the quiz output on our behalf. We pass them only the source text and quiz prompt — not your account details.
- Paddle, our Merchant of Record, for processing payments, subscription management, tax compliance and invoicing.
- Authorities where required by law.
- Professional advisers (legal, accounting) when needed.
International transfers
We are based in South Africa and many of our providers are located outside South Africa, the UK and the EEA. Where personal data is transferred internationally we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions where applicable.
Retention & deletion
We keep account data while your account is active and for a reasonable period afterwards to deal with disputes and meet legal obligations. The table below summarises how long each category of data is kept by default. You can delete your account and all associated data at any time from the Account page, or follow the steps on our Account & Data Deletion page.
| Data | Stored until |
|---|---|
| Account (email, password, profile) | You delete the account |
| Quiz inputs (text, PDFs) & generated quizzes | You delete them or your account |
| Quiz & study usage logs | You clear them or delete the account |
| Feedback messages & replies | You delete them or your account |
| Paid subscription & invoice records | Up to 7 years (tax law) |
| Payment details | Held by Paddle, not by us |
| Email unsubscribe / suppression list | Indefinitely, to honour your unsubscribe |
| Server request logs (IP, user agent) | Short rolling window (typically 7–30 days) |
You can download a full copy of your data any time from Account → Your data → Download my data.
Your rights
Subject to local law, you have the right to access, correct, delete, restrict or object to processing, request portability, withdraw consent, and complain to your data protection authority. Contact us via the Help page to exercise any of these rights; we'll respond within one month.
Security
We protect your data with industry-standard technical and organisational measures, including TLS encryption in transit, encryption at rest on our managed database, strict role-based access controls, least-privilege service credentials, secret management, audit logging, and row-level security so that one user can never read or modify another user's data. We never sell or rent your personal data, and we do not use it to train third-party AI models. No system is perfectly secure, so we cannot guarantee absolute security — but we take every reasonable step to keep your data safe and will notify you without undue delay if a breach ever affects you.
Cookies
We use a small number of essential cookies and similar local storage to keep you signed in and remember your settings. We do not use third-party advertising cookies.
Contact
For privacy questions, email Brainybites@edu-wise.app or use the in-app Help page.