Privacy Policy

1. Introduction

Welcome to Brainstorm Buddie (“we,” “our,” or “us”). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and mobile application (collectively, the “Service”).

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, password, and display name when you create an account
• Business Ideas: Project names, business ideas, and related content you submit for analysis
• Chat Messages: Questions and conversations you have with our AI assistant
• Payment Information: Payment details processed securely through Stripe (we do not store credit card information)

2.2 Automatically Collected Information

• Usage Data: Information about how you use the Service, including features accessed and time spent
• Device Information: Device type, operating system, browser type, and IP address
• Cookies and Similar Technologies: We use cookies to maintain your session and improve user experience
• Analytics Data: We use Firebase Analytics to understand app usage patterns

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Generate AI-powered business reports, analysis, and chat responses using Anthropic Claude AI
• Generate logos and marketing images using Google Gemini AI (for Pro and Premium users)
• Generate voiceovers for marketing videos using ElevenLabs (when you use voice features)
• Generate website and landing page HTML using Moonshot Kimi AI (when you use the website generator)
• Process your payments and manage subscriptions
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and customer service requests
• Monitor and analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues and fraudulent activity
• Comply with legal obligations

4. Your Ideas Are Protected

Your business ideas belong to you. We want to be absolutely clear about how we handle your intellectual property:

• No Ownership Claims: We do not claim any ownership of your business ideas, projects, reports, or any content you create using our Service. Everything you create is yours.
• No AI Training: Your business ideas, conversations, and generated reports are NOT used to train or improve AI models. Data sent to our AI providers (Anthropic Claude, Google Gemini, Moonshot Kimi, and ElevenLabs) is processed under their API terms, which prohibit using API data for model training.
• No Sharing: Your ideas are never shared with other users, used for marketing purposes, or disclosed to third parties except as required to provide the Service.
• Confidentiality: We treat your business ideas as confidential information. Our employees and contractors are bound by confidentiality obligations.

We built Brainstorm Buddie to help entrepreneurs succeed, not to exploit their ideas. Your trust is essential to us.

5. Third-Party Services & AI Providers

We use the following third-party services to operate our Service. For each AI provider, we describe exactly what data is sent and for what purpose:

• Anthropic Claude AI (Anthropic, PBC): We send the business ideas, project details, and chat messages you provide so Claude can generate your reports, analysis, and chat responses. Anthropic Privacy Policy
• Google Gemini AI (Google LLC): We send the text prompts and brand details you provide so Gemini can generate logos and marketing images (Pro/Premium). Google Privacy Policy
• ElevenLabs (ElevenLabs, Inc.): When you use voice features, we send the script text you provide so ElevenLabs can generate a voiceover audio file. ElevenLabs Privacy Policy
• Moonshot AI (Kimi): When you use the website generator, we send your business name, idea, brand details, and page-generation prompts so Kimi can generate website and landing page HTML code. Moonshot / Kimi Privacy Policy
• Firebase (Google): Authentication, database (Firestore), and analytics
• Stripe: Payment processing for subscriptions
• RevenueCat / Apple App Store / Google Play: In-app purchase processing and subscription management on mobile
• Vercel: Hosting and deployment

Each AI provider processes your data under its API terms, which prohibit using your data to train their models and provide protections equivalent to those described in this policy. We obtain your consent before sending any personal data to these AI providers, and you can review their privacy policies above. We do not send your data to any AI provider for advertising purposes.

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• With Your Consent: When you explicitly authorize us to share information
• Service Providers: With third-party service providers who assist in operating the Service (listed above)
• Legal Requirements: To comply with legal obligations, court orders, or government requests
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Protection of Rights: To protect our rights, property, or safety, or that of our users
• Connected Applications (at your direction): You can connect third-party AI assistants (such as Claude or ChatGPT) to your Brainstorm Buddie account through our connector. See below.

Connected AI Assistants (Claude, ChatGPT, and other MCP clients)

Brainstorm Buddie offers a connector that lets you use your account from third-party AI assistants. Connections are established only when you explicitly approve them on our consent screen (OAuth 2.1). When a connected assistant uses a tool on your behalf, we share the requested data — such as your project details, reports, or generated assets — with that assistant, and the assistant's own privacy policy governs what it does with the data it receives (for example, Anthropic's Privacy Policy for Claude, OpenAI's Privacy Policy for ChatGPT).

A connected assistant can only access the account that authorized it, subject to your subscription plan's features, quotas, and rate limits. Access tokens expire automatically (1 hour, with 90-day idle expiry for the connection), and you can revoke any connection at any time from Settings → Connections, which immediately invalidates its tokens.

7. Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy. You may delete your account at any time, which will remove your personal information from our active databases. However, some information may be retained in backup systems for a limited period or as required by law.

8. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your account and personal information
• Opt-Out: Opt out of marketing communications (we currently do not send marketing emails)
• Data Portability: Request your data in a machine-readable format
• Withdraw Consent: Withdraw consent for data processing where consent is the legal basis

To exercise these rights, please contact us at support@brainstormbuddie.com or through your account settings.

9. Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using HTTPS/TLS
• Encryption of sensitive data at rest
• Secure authentication through Firebase Auth
• Regular security assessments and updates
• Access controls and authentication requirements

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

10. Children's Privacy

Our Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using the Service, you consent to the transfer of your information to the United States and other countries where our service providers operate.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by us
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at support@brainstormbuddie.com.

13. GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure (“right to be forgotten”)
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

You also have the right to lodge a complaint with your local data protection authority.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date. We encourage you to review this Privacy Policy periodically for any changes.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: