Privacy Policy

Brainer is an online study platform for students. This policy explains what personal data we collect, why we collect it, and how we protect it.

• Account data — your email address, and optionally your name, institution and study program.
• Study data — your personal notes, bookmarks, saved units, planner items, and community posts.
• Usage data — which papers you open, your AI tutor questions, and request counts used to enforce daily limits.
• Payment data — payments are handled by a third-party payment provider. We store only the payment reference, amount, plan, status, and timestamps. We never receive or store card numbers or other payment credentials.
• Security data — sign-in records (time and IP address) used to protect your account and detect abuse.

• To provide the service: showing papers, grounding the AI tutor in the paper you choose, and keeping your notes and bookmarks.
• To enforce the subscription you bought: daily AI limits, paper allowances, and download permissions are checked server-side against your plan.
• To keep the platform safe: detecting abuse, fraud, and account sharing.
• To support you: resolving payment and access issues using your payment reference and history.

We do not sell your personal data, and we do not use it for third-party advertising.

When you ask the AI tutor a question, your question and the relevant excerpts from the paper you selected are sent to our AI provider to generate the answer. Every request is logged (question volume, model, token usage) for cost control and abuse prevention. Your questions are associated with your account and are not used to train public AI models by Brainer.

• Account and study data are kept while your account is active, including during gaps between subscriptions — an expired subscription never deletes your notes, bookmarks, or history.
• Payment records are kept as required for accounting and dispute resolution.
• Security and sign-in records are kept for a limited period for abuse detection.
• If you ask us to delete your account, we delete your personal data except what we must retain by law (for example payment records).

• Email verification for every account; passwords are handled by our authentication provider, never by Brainer.
• Server-side authorization for every paper, download, and AI request — client apps are never trusted.
• Short-lived signed links for document access; original files stay private.
• Payment confirmations are cryptographically verified before any subscription state changes.

We post updates on this page with a new "Last updated" date. If a change materially affects how we use your data, we will highlight it in the product before it takes effect.