Effective date: March 27, 2026
Last updated: March 27, 2026
BrainBit, Inc. (“BrainBit”, “we”, “us”, or “our”) operates the Mind Tracker BCI mobile application and related services (collectively, the “App”).
This Privacy Policy explains how we access, collect, use, store, protect, and disclose information when you use Mind Tracker BCI together with compatible BrainBit devices, including the Mind Tracker Headband and other supported BrainBit products.
Mind Tracker BCI is a wellness application. It is not a medical device and does not diagnose, treat, cure, or prevent any medical condition. The App requires compatible external hardware to provide its core functionality.
By using the App, you agree to the practices described in this Privacy Policy.
Depending on how you use the App, we may access or collect the following categories of data:
1.1 Account and profile information
We may collect and store:
● your name;
● your email address;
● your unique user ID;
● your age or age group;
● your sex/gender;
● your preferred interface language;
● your country and other location-related profile information, where applicable.
We use this information to create and maintain your account, enable login, personalize your experience, send service-related notifications, and provide more relevant recommendations.
1.2 Health and wellness data
When you use the App with a compatible BrainBit device, the App may access and process health- and wellness-related data, including:
● raw EEG / brain activity signals;
● derived wellness states and metrics, such as relaxation, stress, concentration, attention, cognitive load, calmness, fatigue, and similar status indicators;
● results of completed neurotraining sessions;
● progress and session history;
● individualized calculated indicators such as iAF / iAPF, where applicable.
Important clarification about raw EEG data
Raw EEG data does not leave your device.
Raw EEG signals are processed locally on the user’s device for calibration, metric calculation, monitoring, and neurotraining functionality.
Health-related data that may be transmitted to our servers
We may transmit and store the following derived health/wellness data on our servers:
● current user state or recorded status markers, such as relaxation, stress, concentration, or similar wellness-state indicators, when a relevant state is фиксируется / recorded in the App;
● results of completed neurotraining sessions;
● calculated indicators such as iAF / iAPF, where applicable;
● related progress history needed to display past results and support continuity of use.
We use this data to:
● provide real-time and historical feedback in the App;
● display training outcomes and monitoring results;
● help users track progress over time;
● support continuity across sessions and devices where applicable;
● improve and maintain the functionality of the App.
1.3 Device, Bluetooth, and hardware-related information
We may access or collect:
● Bluetooth-related data needed to discover, connect to, and communicate with compatible BrainBit devices;
● device identifiers associated with compatible hardware;
● device serial number;
● firmware version;
● mobile device model, operating system, and technical configuration.
We use this information to connect the App to the appropriate device, maintain stable operation, provide firmware-related notices, troubleshoot hardware/software issues, and improve compatibility.
1.4 Location information
The App may access approximate or precise location permissions where required by the Android operating system to support Bluetooth scanning and device discovery.
We may also store country or other location-related information in your account or on our servers for localization, language preferences, and more relevant in-app recommendations, where applicable.
1.5 Analytics, diagnostics, and performance information
We may collect:
● crash logs;
● diagnostics data;
● app performance information;
● interaction events, such as screens viewed and buttons tapped;
● installation attribution or source-related information;
● device or other identifiers used for analytics and service performance.
We use this information to analyze product usage, fix bugs, monitor app performance, understand the user experience, improve the App, and measure the effectiveness of product changes.
We use the information described above to:
● provide the core functionality of Mind Tracker BCI;
● connect the App with compatible BrainBit hardware;
● perform calibration, monitoring, and neurotraining;
● calculate and display wellness metrics and session results;
● provide session history and progress tracking;
● create and manage user accounts;
● send essential service notifications;
● personalize recommendations and parts of the user experience;
● maintain security, integrity, and reliability of the App;
● troubleshoot bugs, errors, and compatibility issues;
● analyze usage and improve the App.
We do not use your data for selling data, cross-context behavioral advertising, or advertising-based profiling.
3.1 Data stored locally on your device
Certain processed brain-activity data is stored locally on your device in a local database (ObjectBox) for the purpose of displaying activity graphs and interface elements in the App.
This local processed brain-activity data:
● is stored only on the device;
● is not transmitted to our servers;
● is retained locally for up to 2 days and is then deleted.
3.2 Data stored on our servers
We may store the following categories of data on our servers:
● unique user ID;
● name and surname;
● sex/gender;
● country;
● age or age group;
● email address;
● preferred interface language;
● device type and device serial number;
● calculated indicators such as iAF / iAPF;
● recorded wellness-state markers or current status indicators when saved by the App;
● results of completed neurotraining sessions;
● session and progress history;
● de-identified or pseudonymized interaction events used for analytics and product improvement.
We do not sell your personal data or health-related data.
We may share personal data or health-related data only in the following limited circumstances:
● with service providers and processors acting on our behalf and only as necessary to provide, host, support, secure, and improve the App;
● where required by applicable law, regulation, legal process, or enforceable governmental request;
● to protect the rights, safety, security, or integrity of BrainBit, our users, or the public.
4.1 Health data sharing
Health-related data is not shared with third parties for their own independent purposes.
Health-related data may be processed only by service providers acting on our behalf, or disclosed when required by law.
4.2 Third-party services and SDKs
We may use the following third-party tools and services:
AppMetrica
Used for product analytics, performance analysis, and installation attribution. This may involve device information, operating system data, and interaction events.
Cloud hosting providers
Used to store account data, settings, session results, and related server-side information.
BCI Device SDK
Used to enable communication between the App and compatible BrainBit hardware over Bluetooth. Raw EEG processing remains local on the device and is not transmitted to the SDK provider’s servers for independent use.
ObjectBox
Used as a local on-device database. Data stored in ObjectBox remains on the user’s device and is not transmitted to third parties by ObjectBox itself.
We take reasonable technical and organizational measures to protect the information processed through the App. These measures may include:
● encryption in transit using TLS;
● encryption at rest;
● access controls;
● role-based access management;
● audit logs;
● pseudonymization where appropriate;
● backups and infrastructure security measures.
No method of electronic storage or transmission is completely secure. However, we take commercially reasonable steps designed to protect your information.
We retain data for as long as necessary to provide the App and its features, maintain your account, comply with legal obligations, resolve disputes, and enforce our agreements.
In general:
● locally stored processed brain-activity data used for interface graphs is kept on the device for up to 2 days and then deleted;
● account, profile, session history, server-side wellness-state records, and completed neurotraining results may be retained while your account remains active;
● analytics and diagnostics data may be retained as needed for product improvement, security, and operational purposes.
If your account is deactivated, we may retain your account data so that your account may be restored later if you choose to reactivate it.
If you request permanent deletion, we will permanently delete your account data and associated personal data within 30 days of receiving and verifying your request, except where retention is required by applicable law or necessary for security, fraud prevention, or similar legitimate purposes.
7.1 Deactivation in the App
The App provides an in-app option to deactivate your account. Deactivation is not the same as permanent deletion.
If you deactivate your account:
● access to the account may be disabled;
● your data may remain stored so that the account can later be restored if you choose to reactivate it.
7.2 Permanent deletion request
If you want your personal data and associated account data to be permanently deleted, you may submit a deletion request by contacting us at: support@brainbit.com
Subject line recommendation: Mind Tracker BCI - Permanent Data Deletion Request
Upon receiving and verifying your request, we will permanently delete your personal data and associated account data within 30 days, unless a longer retention period is required by law or for legitimate security or fraud-prevention reasons.
7.3 No separate in-app deletion for only health data
At this time, the App does not provide a separate in-app workflow to delete only health-related data while keeping the account active. If you want specific health-related data deleted, please contact us at support@brainbit.com, and we will review and process your request in accordance with applicable law and our operational capabilities.
You may choose whether to:
● create and use an account;
● connect compatible BrainBit hardware;
● grant permissions such as Bluetooth, notifications, and location access where required for core functionality;
● deactivate your account in the App;
● request permanent deletion of your account and associated data by contacting us.
Please note that denying certain permissions or disconnecting compatible hardware may limit or prevent the App’s core functionality.
Depending on your device and operating system version, the App may request permissions such as:
● Bluetooth permissions (including scan, connect, and related permissions) to discover and communicate with compatible BrainBit devices;
● location permissions where required by Android for Bluetooth scanning and device discovery;
● notification permissions to send service-related notifications and updates.
We request permissions only for functions relevant to the operation of the App.
By using the App, you understand that your information may be processed and stored in jurisdictions other than your own, where our servers or service providers may be located.
We may update this Privacy Policy from time to time. If we make material changes, we will post the updated version on this page and update the “Last updated” date above. Your continued use of the App after the updated Privacy Policy becomes effective means that you accept the updated Policy.
If you have any questions about this Privacy Policy, our data practices, account deactivation, or permanent deletion requests, please contact us at:
BrainBit, Inc.
Email: support@brainbit.com
Address: info@brainbit.com
