Privacy Policy

BrainPal Pty Ltd (“BrainPal”, “we”, “us”) operates the BrainPal website at brainpal.com.au, the BrainPal web app at app.brainpal.com.au and related services (together, the “Services”).

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains what personal information we collect, why, and the choices you have.

Information you give us

• Parent or guardian account details: name, email address, phone number and password.
• Child profile details a parent chooses to add: first name, year level, school and learning preferences.
• Messages, questions and content you or your child share with the PALs.
• Early-access and waitlist sign-ups, and anything you send when you contact us.

Information from connected accounts

• If a parent connects a Google account, the Gmail and Google Calendar data described in Google user data.

Information collected automatically

• Device, browser and log information (IP address, pages visited, time and date of access).
• Essential cookies needed to keep you signed in and keep the Services secure.

BrainPal lets a parent optionally connect their Google account so the PALs can help the family stay on top of school life. Connecting Google is always opt-in and is done by the parent, never by a child.

What we access

• Gmail (read-only):emails related to your child’s school and activities — for example newsletters, excursion notices, permission slips and homework or event reminders.
• Google Calendar: your calendar events, so we can show upcoming school dates and, where you ask us to, add BrainPal reminders to your calendar.

How we use it

• To find school-related emails and summarise the actions, dates and deadlines in them.
• To show those dates and reminders to you inside BrainPal and, if you choose, add them to your calendar.
• We use this data only to provide and improve these user-facing features for you.

What we never do

• We do not sell Google user data.
• We do not use Google user data for advertising, including retargeting or personalised ads.
• We do not use Google user data to determine credit-worthiness or for lending purposes.
• We do not use Google user data to train generalised or non-personalised AI or machine learning models.
• Humans at BrainPal do not read your Google user data unless you give us explicit permission for specific messages, it is necessary for security purposes (such as investigating abuse), to comply with applicable law, or the data has been aggregated and anonymised for internal operations.

Sharing

We transfer Google user data only to the service providers we need to run these features (for example cloud hosting and the AI model provider that processes a summary request), under contracts that require them to keep it confidential and use it only on our instructions. We may also disclose it where required by law, or as part of a merger or acquisition with notice to you.

Storage, retention and deletion

Access tokens are encrypted at rest. We store only the summaries, dates and reminders derived from your emails and events — not a copy of your mailbox — and keep them while your Google account is connected. You can disconnect Google at any time in BrainPal settings or at myaccount.google.com/permissions. When you disconnect, we revoke our access and delete the stored Google-derived data within 30 days. You can also email hello@brainpal.com.au to request deletion.

Limited Use

BrainPal’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• To create and manage accounts and provide the Services.
• To personalise learning, money and safety features for each child.
• To keep children safe, including moderating content and alerting parents where appropriate.
• To communicate with you about the Services, including service and security notices.
• To maintain security, prevent fraud and comply with our legal obligations.

BrainPal is designed for families. Child profiles are created and controlled by a parent or guardian, who can view, correct or delete their child’s information at any time. We collect only what is needed to provide the Services to the child, and we never use children’s information for advertising.

If you believe a child has given us personal information without a parent’s consent, contact us at hello@brainpal.com.au and we will delete it.

We do not sell personal information. We share it only with:

• Service providers who help us operate the Services (hosting, email delivery, analytics, AI processing), under confidentiality obligations.
• Regulators, law enforcement or others where required or authorised by law.
• A buyer or successor if BrainPal is involved in a merger or acquisition, with notice to you.

Some providers may store or process data outside Australia (for example in the United States). Where that happens, we take reasonable steps to ensure the information is handled consistently with the APPs.

We protect personal information with encryption in transit and at rest, access controls and monitoring. We keep information only for as long as needed to provide the Services or meet legal obligations, then delete or de-identify it.

You can ask to access, correct or delete your personal information by emailing hello@brainpal.com.au. We will respond within 30 days.

If you have a privacy complaint, contact us first and we will try to resolve it. If you are not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

We may update this policy from time to time and will post the new version here with a new “last updated” date. Questions? Email hello@brainpal.com.au.