Last updated: 4 May 2026

TL;DR

1. We don't sell your data. Not to advertisers, not to anyone.
2. Brainbuddy doesn't show you ads. It's subscription-only.
3. Your data is yours. You can delete your account and personal data at any time from your account settings (Account → Delete Account), or by emailing support@brainbuddyapp.com.
4. We use limited analytics to understand how the app is used and to measure our own advertising. Where required by your operating system or local law, we ask permission first.

The detail follows below. We've tried to write it in plain English.

1. Who we are

This Privacy Policy describes how AppStudio Australia Pty Ltd ("Brainbuddy", "we", "us", "our") collects, uses, stores and shares personal information when you use the Brainbuddy: Quit Porn Forever app and any related services (the "Service").
‍

We are bound by the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). If you are in the European Economic Area (EEA), the United Kingdom, or California, additional rights apply — see Sections 11 and 12.
‍

For privacy questions or requests, contact us at support@brainbuddyapp.com.

2. The information we collect

We collect the minimum information needed to operate the Service. The categories below cover everything we collect.
‍

Account information you provide - Email address (for account creation, login, and support) - Password (stored as a one-way hash; we cannot read it) - Optional profile information you choose to add
‍

Wellness and app activity you create in the Service - Check-ins, streak data, and any content you create - How you use the app (which features, how often) - Wellness metrics generated within the app (such as those underpinning Brainbuddy's recovery model)

We treat this information with extra care because it relates to your personal recovery journey.
‍

Subscription and purchase data - Subscription status and entitlement (managed via Apple, Google and RevenueCat — see Section 5) - We do not receive or store your full credit card or payment details. Payments are processed by the Apple App Store or Google Play.
‍

Device and technical information - Device type, model, operating system version, app version, language, time zone - Mobile advertising identifiers (Apple IDFA where you've granted App Tracking Transparency permission; Android Advertising ID where applicable) — used only to measure our own advertising (Section 5) - Crash logs and performance diagnostics - Approximate location derived from your IP address (country / region only — we do not collect precise GPS location)
‍

Push notification token (only if you enable notifications)
‍

We do not collect: precise location, contacts, photos, microphone audio, browsing history outside the app, biometric data, or financial account details.

3. How we use your information

• To provide the Service — create and authenticate your account, sync your data across devices, and deliver features such as check-ins, predictions, and recovery insights.
• To back up your content so you don't lose progress when you change devices or reinstall.
• To improve the Service — analyse aggregate usage patterns, fix bugs, develop new features.
• To communicate with you — respond to support requests, send transactional emails (subscription receipts, important account notices), and — only if you opt in — send product updates and recovery tips.
• To measure our own marketing — understand which of our advertising campaigns work so we don't waste money. We do this through attribution providers (AppsFlyer, Meta, Google) using device-level identifiers. We do not use your data to target advertising back at you on other apps or websites.
• To comply with legal obligations, including Australian tax and consumer law.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

4. Legal basis for processing (EEA / UK users)

Where the GDPR applies, we rely on the following legal bases:

• Contract — to provide the Service you've signed up for.
• Legitimate interests — to operate, secure, and improve the Service and measure our marketing, balanced against your rights.
• Consent — where required (for example, certain analytics, marketing emails, and any processing of sensitive data). You can withdraw consent at any time.
• Legal obligation — where we are required to retain or disclose information by law.

5. Who we share information with

We share personal information only with the following service providers, and only as needed to operate the Service. They act as our processors and are contractually required to use your data only for purposes we direct.
‍

• Apple App Store / Google Play — Purpose: Subscription processing, app delivery. Data shared: Purchase tokens, subscription status.
• RevenueCat — Purpose: Subscription state management. Data shared: Anonymised user ID, subscription events.
• Firebase (Google) — Purpose: Backend services, crash reporting, analytics. Data shared: Anonymised user ID, device info, crash logs, app events.
• AppsFlyer — Purpose: Marketing attribution. Data shared: Anonymised device identifiers, install / event data.
• Meta (Facebook) — Purpose: Marketing attribution measurement. Data shared: Anonymised device identifiers, install / event data.
• Google Ads — Purpose: Marketing attribution measurement. Data shared: Anonymised device identifiers, install / event data.
• Mailchimp — Purpose: Transactional and (opt-in) marketing email. Data shared: Email address, name if provided.
• OneSignal — Purpose: Push notifications. Data shared: Push token, anonymised user ID. We may also disclose information if required by law, by court order, or to protect the rights, property, or safety of Brainbuddy, our users, or others.

We do not sell your personal information to any party.

6. Data retention and deletion

We retain personal information only for as long as we need it.
‍

• Active account data (email, profile, wellness data, content) — Retention period: For as long as your account exists.
• Account and personal data after deletion request — Retention period: Permanently deleted within 30 days.
• Anonymised, aggregated analytics — Retention period: Retained indefinitely (no longer identifies you).
• Crash logs and diagnostic data — Retention period: 90 days.
• Subscription and purchase records — Retention period: Up to 7 years, to comply with Australian tax and financial reporting law.
• Backups — Retention period: Rotated and purged within 30 days of deletion. We do not auto-delete inactive accounts. You retain control until you choose to delete.

How to delete your account and data

In the app — go to Settings → Account → Delete Account. Deletion is initiated immediately and completed within 30 days.

‍

When you delete your account we permanently remove your personal information from our active systems within 30 days, except where we are legally required to retain it (for example, subscription records held in a restricted-access system for tax purposes).

You can also request manual account deletion by emailing support@brainbuddyapp.com.

7. Your rights and choices

Wherever you live, you have the following choices:
‍

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to correct information that is inaccurate.
• Deletion — delete your account and personal data at any time (see Section 6).
• Marketing opt-out — unsubscribe from marketing emails using the link in any marketing email, or by emailing us.
• Push notifications — turn off in your device settings or in the app.
• Tracking permissions — on iOS, you can deny App Tracking Transparency (ATT). On Android, you can reset or limit your Advertising ID in your device settings. We respect your choice.

To exercise any of these rights, email support@brainbuddyapp.com. We will respond within 30 days. We do not charge a fee for routine requests.

8. International data transfers

Brainbuddy is operated from Australia. Some of our service providers (notably Firebase, AppsFlyer, RevenueCat, Mailchimp, Meta, Google and OneSignal) store and process data on servers located in the United States, the European Union, or other locations.
‍

When personal information is transferred outside your country, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses where applicable, and the protections offered by our providers' compliance programs.

9. Security

We take reasonable steps to protect your personal information:

• All data in transit between your device and our servers is encrypted using TLS.
• Data at rest in our backend is encrypted.
• Access to user data is restricted to authorised personnel and protected by strong authentication.
• Passwords are stored using one-way hashing and are never accessible to us in plaintext.
• We periodically review the security practices of the service providers we use.

No system is 100% secure. If we ever become aware of a data breach affecting your information, we will notify you and the relevant regulator as required by Australian, EU, UK or California law.

10. Children's privacy

Brainbuddy is intended for users aged 16 and over. We do not knowingly collect personal information from anyone under 16. If you believe a child under 16 has provided us with personal information, please contact us and we will delete it promptly.
‍

In some EU countries, the age of digital consent is higher than 16. If you are below the age of digital consent in your country, please do not use the Service without a parent or guardian's involvement.

11. EEA, UK and Swiss users — GDPR rights

If you are in the European Economic Area, the United Kingdom or Switzerland, you have the following additional rights:
‍

• Access, rectification, and erasure ("right to be forgotten")
• Restriction of, or objection to, processing
• Data portability
• Withdrawal of consent at any time (where processing is based on consent)
• Lodging a complaint with your local data protection authority

To exercise these rights, email support@brainbuddyapp.com. If you remain unsatisfied, you can complain to your country's data protection authority.

12. California users — CCPA / CPRA rights

If you are a California resident, you have the right to:
‍

• Know what personal information we collect, use, and disclose
• Request deletion of your personal information
• Correct inaccurate personal information
• Opt out of the sale or sharing of personal information for cross-context behavioural advertising
• Be free from discrimination for exercising your rights

Brainbuddy does not sell or share your personal information for cross-context behavioural advertising. We use the Meta and Google advertising SDKs solely to measure the effectiveness of advertising we run for Brainbuddy itself — we do not use your data to target advertising back at you on other apps or websites.
‍

To exercise your California rights, email support@brainbuddyapp.com.

13. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you in the app and update the "Last updated" date at the top. Where a change materially expands how we use your data, we will seek your consent where required by law. Data collected before any change will continue to be governed by the policy in effect at the time of collection, unless we obtain your consent for new uses.

14. Contact us

For any privacy question, request or complaint:

Email: support@brainbuddyapp.com