Your data, plainly

Who we are

Brain Guru is the data controller for information collected on brainguru.ai. [Brain Guru legal entity and registered address, to confirm before launch]. Contact: privacy@brainguru.ai.

What we collect

• Your answers to the Business Check and, if you give them, your first name and website address.
• Public information from your website's homepage, plus its robots.txt, sitemap and llms.txt files if it has them, to run the audit and design concepts.
• Your email address, only if you choose to leave it, and a record of what you agreed to.
• If you describe an app idea, the description you give us.
• A one-way scrambled (hashed) version of your IP address, used only to stop abuse. We don't store the address itself.

Why, and our legal basis

• To run the audit and show your results: legitimate interest, because you asked for them.
• To send your results by email: to provide what you requested.
• To follow up about working together: your consent, which you can withdraw at any time.
• To prevent abuse and control costs: legitimate interest.

Your idea stays yours

If you share an app idea, we don't publish it, share it or use it in our portfolio. The AI provider we use does not train its models on it. We delete it when you ask.

How long we keep it

• Checks where you didn't leave an email: deleted after 30 days.
• Enquiries: kept for 12 months after our last contact, then deleted, unless you become a client.

Who processes it for us

Hosting (Vercel), database and storage (Supabase, UK region), AI generation (Anthropic, under its data processing terms, which cover transfers outside the UK), email delivery (Resend), abuse protection (Cloudflare Turnstile, Upstash) and page speed tests (Google PageSpeed Insights).

Cookies

We don't use advertising or tracking cookies. Our analytics are cookieless.

Your rights

You can ask to see, correct or delete your data, or withdraw consent, at any time. Email privacy@brainguru.ai, or use the form below. We'll confirm by email and delete everything linked to you, keeping only a scrambled note that the deletion happened. You can also complain to the Information Commissioner's Office (ico.org.uk).