Privacy Policy
Last updated: February 21, 2026
1. Information We Collect
We collect the following types of information:
- Account Information: Name, email address, and password when you create an account.
- Payment Information: Payment details are collected and processed securely by Stripe. We do not store your full credit card number on our servers.
- Usage Data: Information about how you interact with the Service, including pages visited, features used, chat conversations, and activity completion data.
- Device Information: Browser type, operating system, and IP address collected automatically when you access the Service.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service.
- Personalize your experience, including generating tailored brain activation protocols.
- Process payments and manage your subscription.
- Send transactional emails (account verification, password resets, billing receipts).
- Respond to your questions and provide customer support.
- Analyze usage patterns to improve the Service.
3. How We Share Your Information
We do not sell your personal information. We share data only with the following service providers as necessary to operate the Service:
- Stripe: Payment processing and subscription management.
- Directus: Content management and data storage.
- Anthropic (Claude AI): AI-powered chat responses. Conversation data is sent to generate personalized responses.
- Mailgun: Transactional email delivery (verification, password resets).
We may also disclose information if required by law or to protect the rights and safety of our users or the public.
4. Cookies and Tracking
We use essential cookies to maintain your authenticated session (session tokens). We do not use third-party advertising or tracking cookies. Stripe may set cookies as part of its fraud prevention measures.
5. Data Retention
We retain your account data for as long as your account is active. If you cancel your subscription or request account deletion, we will delete your personal data within 30 days, except where retention is required by law (e.g., billing records).
6. Data Security
We implement industry-standard security measures to protect your data, including encrypted connections (HTTPS), secure authentication tokens, and access controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data.
- Object to or restrict the processing of your data.
- Request a portable copy of your data.
To exercise any of these rights, please contact us at support@activategenius.com.
8. Children's Privacy
The Service is intended for use by parents and guardians (age 18+). We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us so we can delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.
10. Contact Us
If you have any questions about this Privacy Policy, please contact us at support@activategenius.com.