Your privacy is our promise.
BrightMinds is built for children. That means our privacy standards are higher than the law requires — not lower. Here's exactly what we do (and don't do) with your data.
Who we are and why this matters
BrightMinds Learning, Inc. ("BrightMinds", "we", "us", "our") operates the BrightMinds platform — including our website, mobile apps and all related services (collectively, the "Service").
This Privacy Policy explains how we collect, use, disclose and protect information about you and your children when you use our Service. Because many of our users are children under the age of 13, we comply with the Children's Online Privacy Protection Act (COPPA), the EU's GDPR-K framework, and equivalent child-privacy laws worldwide.
What information we gather
We collect information in three ways: information you give us, information we collect automatically, and information from third parties.
Information you provide
Automatically collected data
What we do with your information
Create accounts, sync progress across devices, personalise the learning feed and power AI features.
Detect suspicious logins, prevent fraud, and protect against unauthorised access.
Weekly progress reports to parents, product announcements and tips. Unsubscribe any time.
Anonymised usage data helps us find crashes and understand what features are most helpful.
Comply with tax, consumer protection and child-safety laws in our operating countries.
Sell data. Serve behavioural ads to children. Build advertising profiles. Share data without consent.
How we protect kids — specifically
BrightMinds accounts are created by a parent or guardian. The parent account controls everything — including what the child can access, whether they can post in the community, and data deletion.
What children's accounts contain
Parents can request deletion of their child's entire data record at any time by contacting privacy@brightminds.app. We will process the request within 30 days.
Who else sees your data
We do not sell or rent personal data. We share information only in the following limited circumstances:
What you can ask us to do
Depending on where you live, you have some or all of the following rights:
Request a copy of all data we hold about you or your child.
Ask us to fix inaccurate or incomplete information.
Ask us to erase your account and all associated data.
Get your data in a machine-readable format (CSV / JSON).
Ask us to stop processing your data while a dispute is resolved.
Object to any processing based on legitimate interest.
To exercise any right, email privacy@brightminds.app with the subject line "Privacy Request". We respond within 30 days.
How we protect your data
All data in transit encrypted with TLS 1.3.
All stored data encrypted at rest.
Annual third-party penetration testing.
Opt-in two-factor authentication for parent accounts.
72-hour notification if a breach affects your data.
Undergoing Type II certification (due Q4 2025).
When we update this policy
We may update this Privacy Policy periodically. When we do:
For material changes that affect children's data, we will require fresh parental consent before those changes take effect.