Back homePrivacy
Privacy Policy
Last updated: June 2, 2026. This policy explains how Brain Pebbles collects, uses, and protects your personal information.
Information we collect
We collect information you provide directly: your name, email address, password (hashed), task content, project names, notes, file attachments, and any other data you enter into Brain Pebbles. We also collect technical data automatically: IP address, browser type, device information, and usage logs. This helps us keep the service secure and improve performance.
How we use your information
We use your data to provide, maintain, and improve Brain Pebbles — displaying your tasks, syncing across devices, sending notifications you opt into, and diagnosing technical issues. We do not sell your personal data. We do not use your task content for advertising or AI model training.
How we protect your data
All data is encrypted in transit using TLS 1.2+ and at rest using AES-256. We enforce Row-Level Security so your data is isolated from other users. We conduct regular security reviews and use signed URLs for file access. Passwords are never stored in plain text. See our Security page for full details.
Third-party services
Brain Pebbles runs on Lovable Cloud (managed backend infrastructure). We use analytics to understand aggregate usage patterns (never individual task content). If you choose to connect external accounts (e.g., Google for sign-in), we receive only the information you explicitly authorize.
Cookies and tracking
We use essential cookies to keep you signed in and maintain session state. On public marketing pages, analytics are consent-based: visitors in the US are auto-consented to our anonymous, privacy-friendly analytics, while visitors elsewhere (e.g. the EU/UK) see a cookie banner and analytics load only after they accept. Inside the app, we record fully anonymous feature-usage events (e.g. that a task was created or a view was opened) — never your task content, never your identity, and with no advertising or cross-site tracking. This tells us which features are useful in aggregate, nothing more.
Data retention and deletion
We keep your data for as long as your account is active. If you delete your account, we begin a 30-day grace period during which you can recover it. After that grace period, your data is permanently deleted from our systems. You can export your data at any time from your account settings.
Contact us
For privacy questions or to exercise your rights (access, correction, deletion, portability), email us at hello@brainpebbles.com. We respond to all requests within 30 days.