Privacy Policy
DRAFT FOR ATTORNEY REVIEW. Not legal advice. Replace every [BRACKETED] item before launch.
Last updated: [DATE]
Brain Weather ("we," "us") is operated by [COMPANY NAME, LLC], a Texas limited liability company. This policy explains what we collect, why, who helps us run the service, and the choices you have. Brain Weather is a self-tracking journal. We built it so your entries stay yours.
The short version
- Your journal entries are private to your account. We don't sell them, rent them, or use them for advertising.
- We send the text of an entry to our AI provider only when you tap Sort it for me or Find patterns, so it can organize that text for you.
- You can export or permanently delete your data at any time from Account in the app.
- Nothing is shared with a clinician or anyone else unless you print a report or make a private link yourself.
What we collect
- Account information: your email address, used to sign you in and contact you about your account.
- Journal content: what you say or type, the ratings you save (for example focus, mood, sleep, medication timing, caffeine, stress), your wins, and the AI-generated summary and tags. This is consumer health information and we treat it that way.
- Voice: when you use the microphone, your browser or device converts speech to text. We receive and store only the resulting text, never audio recordings. Depending on your browser, speech may be processed by your browser or operating-system provider (for example Google or Apple) under their privacy terms.
- Billing information: handled by Stripe. We store your Stripe customer ID and subscription status. We never see or store your full card number.
- Basic technical data: standard server logs (such as IP address, browser type and error reports) kept by our hosting provider for security and troubleshooting.
We do not use advertising trackers, sell data, or share it with data brokers.
How we use it
- To provide the app: save your entries, show your trends, and run the AI features you request.
- To manage your subscription and send account emails (sign-in links, receipts, important notices).
- To keep the service secure and working.
- We will not use your journal content for marketing, and we will not use it to train AI models.
Consent for health information
By creating an account and saving entries, you consent to us collecting and processing your journal content to provide the service described here. You can withdraw consent at any time by deleting your account. [ATTORNEY: confirm whether a separate, explicit consent checkbox is needed for states with consumer-health-data laws, such as Washington's My Health My Data Act, Nevada and Connecticut, and whether a separate Consumer Health Data Privacy Policy page is required.]
Who helps us run Brain Weather
We share data only with service providers that process it on our behalf, under contracts that limit their use of it:
| Provider | What they do | What they receive |
|---|---|---|
| Supabase | Database and sign-in | Email, entries, subscription status |
| Vercel | Hosts the website | Technical request data |
| Anthropic | AI sorting and pattern notes | The entry text you ask it to sort, or your recent entries when you tap Find patterns |
| Stripe | Payments | Email, billing details |
| [EMAIL PROVIDER, if separate] | Sends sign-in emails | Email address |
[ATTORNEY/CAT: confirm each provider's current data-processing terms, including Anthropic's commercial API terms on data retention and model training, and link them here.]
We may also disclose information if required by law, or to protect someone's safety, or as part of a sale or merger of the business (in which case this policy continues to apply to your data).
Reports and private share links
You can make a summary report of your check-ins to print, save as a PDF, or share. If you choose Make private link, we create a long, hard-to-guess web link to that report. Anyone who has the link can view the report until it expires (you pick 3 to 30 days) or until you turn it off in the app, whichever comes first. The report shows your ratings, averages, wins, themes, any note you add, and (if you choose) the one-line summaries of your check-ins. It never includes the full text of what you said or typed. We record how many times a link was opened and when, and show that to you. Share links with people you trust, and turn them off when you no longer need them. Pages opened from a share link are marked so search engines don't index them.
HIPAA
Brain Weather is a consumer app. It is not offered by a healthcare provider as part of treatment, and it is not covered by HIPAA. If your clinician asks you to use it, what you choose to share with them is up to you.
How long we keep it
We keep your entries until you delete them or delete your account. When you delete your account, we delete your entries and profile immediately from our live database; backups roll off within [30] days. Stripe keeps billing records as required by law.
Security
Data is encrypted in transit and at rest by our providers. Database access rules ensure each account can read only its own entries. No system is perfectly secure. If a breach affects your health information, we will notify you and, where required, the Federal Trade Commission, as required by the FTC Health Breach Notification Rule and applicable state law.
Your choices and rights
- Export: Account → Export my data.
- Delete: Account → Delete my account. This is permanent.
- Correct: edit or delete any entry in the app.
- Depending on where you live, you may have additional rights (to access, correct, delete, or port your data, or to appeal a decision). Email [PRIVACY EMAIL] and we'll respond within [45] days.
Age
Brain Weather is for adults 18 and over. We do not knowingly collect information from anyone under 18. If you believe a minor has created an account, contact us and we'll delete it.
Changes
If we make material changes, we'll notify you by email or in the app before they take effect.
Contact
[COMPANY NAME, LLC] · [MAILING ADDRESS] · [PRIVACY EMAIL]