Privacy Policy

Brain Quest is an independent, student-built learning platform for Tanzanian secondary students (“we”, “us”). It is a small project, not a large company — which is exactly why we keep the data we collect small and this policy short. Questions or requests: safaribeast01@gmail.com.

• Account details — your name, email address, and profile picture if you sign in with Google, or your phone number if you sign in by SMS code.
• Learning activity — questions you answer, whether you got them right, XP, levels, streaks, and achievements. This is the product: it's how your progress works.
• AI chat messages — what you write to the AI tutor, and its replies, saved as your chat history.
• Notification setup — if you turn notifications on, your browser's push subscription.
• Donations and volunteering — if you donate or sign up to volunteer, the name, email, and (optional) phone number you enter on those forms.

We do not collect payment card or mobile-money details (Pesapal handles payment entirely), and we don't run advertising or sell data to anyone.

To run the product: track your progress, generate your lessons and quizzes, show streaks and leaderboards, send the notifications you opted into, process payments and donations, and fix bugs. That's the full list.

Like almost every app, we rely on a few services to operate. Each one only receives what it needs for its job:

• Supabase — Database and sign-in. Stores your account, learning activity, and chat history.
• Google — Sign in with Google. We receive your name, email address, and profile picture.
• Twilio — Sends the SMS verification code if you sign in with a phone number.
• DeepSeek — Powers the AI tutor. Messages you send in the AI chat are processed by DeepSeek's API to generate replies.
• Pesapal — Handles all payments (Tigo Pesa, Airtel Money, card). We never see or store your payment details.
• Sentry — Error reporting, so we can find and fix crashes.
• Vercel — Hosts the website.

Worth stating clearly: messages you type to the AI tutor are sent to DeepSeek's servers to generate the reply. Don't put personal details (yours or anyone else's) into AI chats.

The leaderboard shows your first name and last initial (for example, “Julieth M.”), your level, XP, and badge count. If you donate and don't tick “don't show my name”, the name you enter appears on the donor wall. Nothing else about you is visible to other users.

Brain Quest is for secondary students aged 13 and above. If you are under 18, a parent or guardian should know you use Brain Quest and consent to it. Parents and guardians can email us at any time to ask what data we hold about their child or to have it deleted.

Under Tanzania's Personal Data Protection Act (2022) you have the right to know what personal data we hold about you, correct it, or have it deleted. There's no in-app deletion button yet, so the mechanism is simple: email safaribeast01@gmail.com from the address on your account (or with your account phone number) and we'll delete your account and its data within 30 days.

We keep your data for as long as your account exists, so your progress is there when you come back. Data lives in Supabase's managed PostgreSQL with row-level security, and access to production is limited to the maintainer. No system is perfectly secure, but we keep the surface small: no ads, no trackers, no data brokers.

If this policy changes in a way that matters (new data collected, new processor), we'll update this page and the effective date above. Significant changes will be announced in the app.