Privacy Policy

BrainBamboo Privacy Policy

Last updated: Sept 17th, 2026

1. Who we are

BrainBamboo ("we," "us," "our") operates www.brainbamboo.com and the BrainBamboo mobile application and services (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

If you have questions about this policy, contact us at [privacy email address].

2. Information we collect

Information you give us directly:

Name, email address, and contact details when you create an account or join a Circle or one of our services.
Payment information, processed through our third-party payment provider, which we do not directly store
Responses to our free BrainBamboo Score assessment and wellbeing questionnaires, and other in-app surveys
Content you create within the application or in the WhatsApp groupds if you are part of a Circle, including Legacy Log entries, journal responses, and messages.

Information collected through connected devices:

If you choose to connect a wearable device (such as Oura or Whoop), we receive the data categories you authorize, which may include sleep, heart rate, activity, and recovery metrics.
Cognitive task performance data from in-app exercises.

Information collected automatically:

Basic usage and analytics data (pages visited, features used, device type)
Cookies and similar tracking technologies, as described in Section 8.

3. How we use your information

We use the information we collect to:

Provide, personalize, and improve the Service, including your Brain Trajectory and pillar recommendations
Facilitate Circle matching and community features
Process payments and manage your account
Communicate with you about your account, Circles, and the Summit
Conduct aggregated, de-identified research to improve our programs and, where you have separately consented, to contribute to broader brain health research.

We do not sell your personal information.

4. A note on employer and organizational access

If you access BrainBamboo through an employer, benefits program, or other organizational sponsor, the following applies specifically:

Your employer or sponsoring organization may fund or subsidize your access to BrainBamboo.
Your employer or sponsoring organization does not have access to your individual health data, assessment results, wearable data, journal entries, or Circle activity. We may provide employers with aggregated, de-identified usage statistics (for example, overall participation rates across their employee population) that cannot reasonably be used to identify any individual.
This separation is a core design principle of our Service, not merely a policy choice, and applies regardless of how your access was funded.

5. How we share information

We share information only in the following circumstances:

With service providers who help us operate the Service (payment processing, wearable data integration, cloud hosting, customer support), under agreements requiring them to protect your information and use it only for the purposes we specify
With research partners, only where you have separately and explicitly opted in, and only in de-identified or aggregated form
Where required by law, or to protect the rights, safety, or property of BrainBamboo, our users, or others
In connection with a merger, acquisition, or sale of assets, subject to the same protections described in this policy

6. Data retention

We retain your information for as long as your account is active, or as needed to provide the Service. You may request deletion of your account and associated data at any time by contacting info@brainbamboo.com. Some information may be retained longer where required for legal, tax, or security purposes.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing.

If you are in the European Economic Area or UK (GDPR): you have the rights described above, plus the right to lodge a complaint with your local data protection authority. Our legal basis for processing your information includes your consent, our need to perform our contract with you, and our legitimate interests in operating and improving the Service.

If you are a resident of Washington State or another US state with a consumer health data law: you have specific rights regarding health data we collect, including the right to withdraw consent for its collection and sharing.

If you are in Canada: you have rights under applicable federal and provincial privacy legislation, including the right to access and correct your personal information.

To exercise any of these rights, contact us at info@brainbamboo.com.

8. Cookies and tracking

We use cookies and similar technologies to operate the Service and understand how it's used. You can control cookies through your browser settings.

9. Data security

We use reasonable administrative, technical, and physical safeguards designed to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. International data transfers

Your information may be transferred to and processed in countries other than your own, including the United States and Canada. Where required, we rely on appropriate safeguards, such as standard contractual clauses, for these transfers.

11. Children's privacy

BrainBamboo is intended for adults and is not directed to individuals under the age of 18. We do not knowingly collect information from anyone under 18.

12. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by [email / in-app notice] and update the "Last updated" date above.

13. Contact us

BrainBamboo
Info@brainbamboo.com