Privacy Policy

Last updated: February 21, 2026

1. Information We Collect

We collect the following types of information:

  • Account Information: Name, email address, and password when you create an account.
  • Payment Information: Payment details are collected and processed securely by Stripe. We do not store your full credit card number on our servers.
  • Usage Data: Information about how you interact with the Service, including pages visited, features used, chat conversations, and activity completion data.
  • Device Information: Browser type, operating system, and IP address collected automatically when you access the Service.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service.
  • Personalize your experience, including generating tailored brain activation protocols.
  • Process payments and manage your subscription.
  • Send transactional emails (account verification, password resets, billing receipts).
  • Respond to your questions and provide customer support.
  • Analyze usage patterns to improve the Service.

3. How We Share Your Information

We do not sell your personal information. We share data only with the following service providers as necessary to operate the Service:

  • Stripe: Payment processing and subscription management.
  • Directus: Content management and data storage.
  • Anthropic (Claude AI): AI-powered chat responses. Conversation data is sent to generate personalized responses.
  • Mailgun: Transactional email delivery (verification, password resets).

We may also disclose information if required by law or to protect the rights and safety of our users or the public.

4. Cookies and Tracking

We use essential cookies to maintain your authenticated session (session tokens). We do not use third-party advertising or tracking cookies. Stripe may set cookies as part of its fraud prevention measures.

5. Data Retention

We retain your account data for as long as your account is active. If you cancel your subscription or request account deletion, we will delete your personal data within 30 days, except where retention is required by law (e.g., billing records).

6. Data Security

We implement industry-standard security measures to protect your data, including encrypted connections (HTTPS), secure authentication tokens, and access controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data.
  • Object to or restrict the processing of your data.
  • Request a portable copy of your data.

To exercise any of these rights, please contact us at support@activategenius.com.

8. Children's Privacy

The Service is intended for use by parents and guardians (age 18+). We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us so we can delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at support@activategenius.com.