Privacy Policy

Brainiaks LLC ("we," "us," or "our") operates BrAIniaks, a learning platform that helps you prepare for exams, study with AI assistance, collaborate with others, and organize your learning materials. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our website and services (collectively, the "Service").

By using the Service, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use the Service.

We collect information in the following categories:

• Account information: Email address, authentication identifiers, and profile details you provide (such as display name or username) when you sign up via email magic link or Google sign-in.
• User content: Documents you upload (such as PDFs), notes, highlights, preparation plans, chat messages, study group content, and other materials you create or store in the Service.
• Usage and activity data: How you interact with the Service, including pages visited, features used, preparation progress, and engagement with AI tutoring features.
• Communications: Messages you send through the Service, support requests, and feedback you provide to us.
• Device and log data: Browser type, IP address, device identifiers, timestamps, and similar technical data collected automatically when you access the Service.
• Analytics data: We collect usage data through product analytics (PostHog and Google Analytics) to understand how the Service is used and to improve it. Analytics records how you navigate and interact with the Service; it does not receive the contents of your connected Google Calendar.
• Third-party integration data: If you connect optional integrations (such as Google Calendar), we receive information necessary to provide that feature. See Google User Data and Limited Use below for exactly what we access, what we store, and how you can disconnect.

This section describes how BrAIniaks handles information we receive from Google APIs ("Google user data"). Where anything in this section differs from a more general statement elsewhere in this Privacy Policy, this section controls for Google user data.

Google sign-in. If you choose to sign in with Google, we receive your basic profile information — name, email address, and profile picture — and use it only to create and authenticate your account.

Google Calendar. BrAIniaks offers an optional Google Calendar integration. It is off unless you connect it yourself from your calendar settings. Connecting it grants us the https://www.googleapis.com/auth/calendar scope, which we use only for the following user-facing features:

• Showing your existing commitments. We read the title, start time, and end time of events on your primary calendar, limited to the date range you are currently viewing, so we can display them alongside your study blocks.
• Scheduling around you. We read your busy time ranges so proposed study sessions do not collide with existing commitments. This reads only start and end times — no event titles or details — and the scheduling itself is done by our own software, not by an AI model.
• Adding your study sessions. We create, update, and delete calendar events that correspond to study blocks you create or confirm in BrAIniaks. We do not modify or delete any other event on your calendar.

What we store. We do not store the contents of your Google Calendar. Event titles and times are fetched from Google when you view your calendar and are sent only to your own browser. The only Google-derived data we retain is the authorization token that allows us to access your calendar, the date you connected the integration, and the Google event IDs of the study events we created for you so we can keep them in sync and avoid showing them twice.

Limited Use. BrAIniaks's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google user data only to provide the user-facing calendar and scheduling features described above.
• We do not use Google user data for advertising of any kind, including targeted, personalized, or interest-based advertising. We do not sell it, and we do not transfer it to data brokers or information resellers.
• We do not use Google user data — whether raw, aggregated, anonymized, or derived — to create, train, or improve foundational, generalized, or non-personalized artificial intelligence or machine learning models. Google Calendar data is never transferred to any AI or machine learning service, including third-party AI providers, and is never used to generate AI content.
• We do not use Google user data to create or contribute to any database, profile, or dataset beyond what is required to operate the calendar features described above.
• We do not include Google user data in product analytics. Our analytics tools do not receive the contents of your calendar.
• We do not share Google user data with other BrAIniaks users, including through study groups or other collaboration features.
• We do not transfer Google user data to others except as necessary to provide these features (such as the hosting and database infrastructure that stores your authorization token), to comply with applicable law, or as part of a merger or acquisition with your explicit prior consent.
• No human reads your Google user data except with your explicit consent, for security purposes such as investigating abuse, or where required by applicable law.

AI and machine learning. BrAIniaks uses AI models for study features such as generating practice material and answering questions. Some of these models are operated by third-party AI providers, and some are self-hosted, meaning we run them within our own infrastructure and the data they process is not transmitted back to the model provider. Google user data is not sent to either kind. The calendar features described above are built with ordinary application logic rather than AI models: your existing events are fetched and displayed directly, and proposed study times are calculated by our own scheduling code from your busy time ranges. No part of that path sends data to an AI service.

How we protect Google user data. All communication with Google APIs and between your browser and our servers uses encrypted HTTPS connections, and our database provider encrypts stored data at rest. Your authorization token is never sent to your browser and is never exposed through our public interface; it is used only by our servers. Every request that touches your calendar runs through an authenticated endpoint scoped to your own account, so one user cannot reach another user's Google data. Short-lived access tokens are requested from Google as needed, held in memory for the duration of the request, and never stored.

Retention and deletion of Google user data. We do not retain the contents of your Google Calendar at all — event titles and times are fetched from Google each time you view your calendar and are not written to our database, so there is nothing for us to keep. The limited Google-derived data we do store is retained only while your integration is connected: when you disconnect, your authorization token and connection date are deleted immediately and our access is revoked at Google. The stored ID of a study event we created is deleted when you delete that study block. If you delete your BrAIniaks account, all of this data is deleted along with it.

Disconnecting. You can disconnect Google Calendar at any time from your calendar settings in BrAIniaks. Disconnecting deletes the authorization token we store and revokes our access at Google. Study events we already added to your calendar remain there, and you can delete them in Google Calendar. You can also review or revoke access at myaccount.google.com/permissions.

We use personal information to:

• Provide, maintain, and improve the Service
• Authenticate you and manage your account
• Generate personalized study content, quizzes, and AI-assisted learning experiences
• Enable collaboration features such as study groups, messaging, and shared content
• Process uploads, index documents, and deliver preparation plans and related features
• Send service-related communications (such as sign-in links and important notices)
• Monitor, analyze, and improve performance, security, and user experience
• Comply with legal obligations and enforce our Terms of Service

BrAIniaks uses artificial intelligence to help generate study materials, answer questions, and provide tutoring features. When you use these features, your prompts, uploaded content, and relevant context may be processed by AI systems operated by us or our service providers. We use this processing solely to provide the features you request. We do not use your content to develop, train, or improve generalized AI or machine learning models, and data from your connected Google Calendar is never sent to AI providers.

AI-generated content may not always be accurate or complete. Do not rely on it as professional, medical, legal, or exam-specific advice.

We do not sell your personal information. We may share information with:

• Service providers that help us operate the Service, including hosting, authentication, database, storage, analytics, video conferencing, email delivery, and AI inference providers
• Other users when you choose to share content publicly, join study groups, or use collaboration features — this never includes data from your connected Google Calendar
• Legal and safety purposes when required by law, to protect rights and safety, or to respond to lawful requests
• Business transfers in connection with a merger, acquisition, or sale of assets, subject to appropriate safeguards, and — where the data includes Google user data — only with your explicit prior consent

Our key infrastructure and service providers may include Supabase, Google (authentication, analytics, and optional calendar integration), LiveKit, and AI model hosting providers.

Google user data is shared only with the infrastructure strictly necessary to operate the calendar integration, and never with analytics or AI providers. See Google User Data and Limited Use above.

We use cookies and similar technologies to keep you signed in, remember preferences, and measure site usage through product analytics (including PostHog and Google Analytics).

Analytics cookies are enabled by default so we can understand how the Service is used and improve it. Essential cookies required for authentication and core functionality are also used. Analytics cookies never carry the contents of your connected Google Calendar.

We retain personal information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data by contacting us.

We implement reasonable technical and organizational measures designed to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on where you live, you may have rights to:

• Access, correct, or delete personal information we hold about you
• Limit analytics collection using your browser privacy controls or a tracking blocker, or contact us to request that we stop processing your information for analytics
• Disconnect third-party integrations through your account settings — disconnecting Google Calendar also revokes our access at Google
• Request a copy of your data or object to certain processing

California residents may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to request deletion, subject to certain exceptions. We do not sell personal information as defined under the CCPA.

To exercise your rights, contact us at atharva.sherekar@brainiaks.ai. We may need to verify your identity before responding.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us and we will take steps to delete it.

Brainiaks LLC is based in the United States. If you access the Service from outside the United States, your information may be transferred to, stored in, and processed in the United States and other countries where our service providers operate. By using the Service, you consent to such transfers.

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the "Last updated" date. Material changes may also be communicated through the Service or by email where appropriate.

If you have questions about this Privacy Policy or our privacy practices, contact us at atharva.sherekar@brainiaks.ai.

See also our Terms of Service.