Privacy Policy

Information We Collect

1.1 Information You Provide Directly

• Account Registration Data: Name, display name, and email address provided during registration.
• Profile Information: Profile photo, bio, focus areas, goals, and communication preferences set during onboarding.
• Execution Proof Media: Images and video submitted as proof of completed execution sessions. This media is stored in our secure cloud storage and may be visible to other pod members in the activity feed.
• Journal Entries: Written entries submitted to the Brisbi journaling feature. Private journal entries are not shared with Creators or other members.
• Pod Communication Data: Text and media exchanged with other members and Creators within Pods.
• Payment Information: Payment information is collected and processed by Stripe, Inc. Brisbi does not store full credit card numbers or sensitive financial data on its servers.

1.2 Information We Collect Automatically

• IP Address: Collected at account registration and login to detect and prevent trial abuse and fraudulent account creation.
• Device Fingerprint: A unique identifier generated from your browser and device characteristics, used exclusively to prevent multiple account creation to abuse the free verification trial.
• Timezone and Location Data: Used to accurately calculate daily execution windows, streaks, and session resets.
• Execution Session Data: Session start times, completion times, durations, heartbeat signals sent every 30 seconds during active sessions, and session outcomes. This data powers the Brisbi Score, streak calculations, and momentum scoring.
• Performance Metrics: Your Brisbi Score, current streak, longest streak, verified session count, trust grade, and momentum score. These metrics may be made publicly visible on your Score Card.
• Google OAuth Data: Your Google account ID and profile picture when you sign in with Google. We do not receive your Google password.

1.3 Information From Third Parties

• Google OAuth: When you authenticate via Google, we receive your name, email address, Google account ID, and profile picture from Google LLC in accordance with Google's OAuth 2.0 protocol.
• Stripe: Stripe provides us with transaction identifiers, payment status, and payout account status. We do not receive or store your full card details.

AI Systems and Data Processing

2.1 AI Proof Verification

When you submit execution proof, your media is processed by our AI verification system powered by Google Gemini. The AI analyzes your submission to determine whether it constitutes genuine evidence of the stated execution task. Your media is stored in Supabase cloud storage and may be visible to other pod members in the activity feed unless your pod settings restrict visibility.

2.2 Presence Verification (Selfie Analysis)

In certain circumstances based on your Brisbi Score risk profile, you may be required to submit a selfie photograph alongside your execution proof. This selfie is processed by AI immediately upon submission and is deleted from our systems within seconds of analysis. The selfie is never stored permanently, never associated with your account, and never visible to other users. Only the result of the presence check is retained.

2.3 AI Companion

The Brisbi AI Companion processes your inputs — including text, goals, and behavioral patterns — to provide personalized coaching and daily guidance. Your AI Companion conversations are private and are not shared with Creators or other pod members.

2.4 Behavioral Pattern Analysis

Our systems automatically analyze patterns in your proof submission behavior to detect potential fraudulent activity. Accounts that trigger fraud detection thresholds may be placed under review or suspended. You will be notified if your account is placed under review.

Brisbi Score and Public Data

3.1 Brisbi Score

Your Brisbi Score, current streak, trust grade, and verified session count are displayed on a publicly accessible Score Card page at app.brisbi.com/score/[your-display-name]. This page requires no login to view and is accessible to anyone with the URL. If you do not wish your Score Card to be publicly accessible, you may contact us to request removal.

3.2 Creator Impact Score

For Founding Creators, a Creator Impact Score is calculated based on objective execution metrics from pod members and anonymous survey responses. The Creator Impact Score is publicly visible on the Creator's profile.

3.3 Anonymous Member Surveys

Pod members may periodically receive anonymous surveys to rate their Creator's effectiveness. Survey responses are stored linked to the Pod, not to the individual respondent. Creators see only their aggregated score — not individual responses. Your survey responses are fully anonymous.

How We Use Your Information

• Account Management: To create and manage your Brisbi account and authenticate your identity.
• Platform Services: To power execution sessions, verify proof submissions, calculate your Brisbi Score, track streaks, and provide AI Companion coaching.
• Pod Participation: To facilitate your participation in Creator-led Pods, including displaying your verified proof in the pod activity feed.
• Payment Processing: To process subscription payments, pod entry fees, and creator payouts through Stripe.
• Fraud Prevention: To detect and prevent fraud, fake proof submissions, duplicate account creation, and abuse of the free verification trial.
• Communications: To send transactional emails including verification emails, welcome emails, pod confirmations, proof verification results, and survey notifications.
• Platform Improvement: To improve our AI models and platform performance using anonymized and aggregated data.
• Legal Compliance: To comply with applicable laws, regulations, court orders, and legal processes.

Data Sharing and Disclosure

We do not sell your personal data to third parties or advertisers. We share your information only in the following circumstances:

• Service Providers: Stripe (payment processing and creator payouts), Supabase (database and file storage), Google Gemini (AI processing), and cloud infrastructure providers. All service providers are bound by data processing agreements that prohibit them from using your data for their own purposes.
• Pod Members and Creators: When you join a Pod, your display name, execution proof media (where applicable), verified session count, and momentum score may be visible to the Creator and other pod members. Your private journal entries and AI Companion conversations are never shared within a Pod.
• Public Score Card: Your Brisbi Score, streak, trust grade, and verified session count are publicly accessible via your Score Card URL.
• Legal Requirements: We may disclose your information if required by law, subpoena, court order, or governmental regulation.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

Data Retention

• Account and Profile Data: Retained until you delete your account, after which data is deleted within 30 days, except where retention is required by law.
• Execution and Score Data: Retained for the lifetime of your account. Deleted within 30 days of account deletion.
• Presence Verification Selfies: Deleted immediately after AI analysis, typically within seconds of submission. No selfie data is ever retained.
• Journal Entries: Deleted upon account deletion. You may delete individual entries at any time through your account settings.
• Payment Records: Retained for seven (7) years as required by US financial regulations.
• Fraud Prevention Data: IP address and device fingerprint data retained for two (2) years.

Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to Access: Access your personal data through your account settings or by contacting us.
• Right to Rectification: Correct inaccurate personal data through your profile settings.
• Right to Deletion: Request deletion of your account and associated personal data by contacting us at contact@brisbi.com.
• Right to Restriction: Request that we restrict processing of your personal data in certain circumstances.
• Right to Data Portability: Request a copy of your personal data in a structured, machine-readable format.
• Right to Object: Where we process your data based on legitimate interests, you may object to such processing.
• Opt-Out of Communications: Update your notification preferences in your account settings or click the unsubscribe link in any marketing email.

To exercise any of these rights, please contact us at contact@brisbi.com. We will respond to all verified requests within thirty (30) days.

International Data Transfers

Brisbi Inc. is incorporated in the State of Delaware, United States. Your data is stored and processed in the United States. If you access the Platform from outside the United States — including from the European Union, the United Kingdom, Africa, or Asia — your data will be transferred to and processed in the United States. By using the Platform, you consent to this transfer. We implement appropriate safeguards including standard contractual clauses where required by applicable law.

Security

We implement industry-standard technical and organizational security measures to protect your personal data, including SSL/TLS encryption for data in transit, bcrypt hashing for passwords, secure JWT token management, and access controls limiting employee access to personal data.

Despite our efforts, no method of transmission over the internet is one hundred percent secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.

Cookies and Tracking Technologies

We use essential cookies and local storage to maintain your authenticated session, store your execution state locally, and remember your preferences. We do not use advertising cookies or sell data to advertising networks. You may disable cookies in your browser settings, but doing so may impair the functionality of the Platform.

Children's Privacy

The Brisbi Platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we learn that we have collected personal data from a person under 18, we will delete that data immediately and terminate the associated account. If you believe we have collected data from a minor, please contact us at contact@brisbi.com.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, the right to opt out of the sale of your personal information (note: we do not sell your personal information), and the right not to be discriminated against for exercising your CCPA rights. To exercise these rights, please contact us at contact@brisbi.com.

Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. When we make material changes, we will notify you by email at the address associated with your account and update the "Last Updated" date at the top of this document. Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

Contact Us

For questions, concerns, or requests related to this Privacy Policy or your personal data, please contact: