Privacy Policy

Last updated: September 23, 2026

Dr Brainrot is built to protect your attention, not to harvest your data. There is no account and no login. Almost everything the app knows about you stays on your phone. This page is the honest, plain-language version of what we keep, what we send, and to whom.

The short version. No sign-up, no name, no email required. Your blocked apps, Brain Level, and training progress live only on your device. The only things that leave your phone are feedback you choose to send, your anonymous subscription status, anonymous usage analytics that help us improve the app, and advertising events you can decline. We do not sell your data, ever.

Who is responsible for your data

Dr Brainrot is an independent app built and run by a solo developer (referred to here as "Dr Brainrot", "we", "us", or "I"). For privacy purposes, the data controller is Steven Freville, reachable at support@dr-brainrot.com.

What stays only on your device

The following never leaves your phone. We cannot see it, and it is not sent to any server:

Your blocked apps. On iOS this is a set of opaque system tokens (we never even learn which apps you picked); on Android it is the list of package names you chose. It is stored locally for the blocker to use.
Your Brain Level, rank, session history, coins, and mastered questions. All progression and economy data is held in on-device storage.
Screen time and usage access. On Android the app reads which app is in the foreground (via the Usage Access permission) only to know when to show the lock screen. On iOS this is handled by Apple's Screen Time framework. This information is used on-device in real time and is never collected, stored off-device, or transmitted to us.

What we send off your device

The app uses a small number of trusted service providers (processors). Because there is no account, you are identified to these services only by an anonymous device identifier: a random id generated for your install (on supported builds, your RevenueCat app user id). It is not linked to your name, email, or real-world identity.

What	When	Where it goes
Feedback you submit: your message, the sentiment and multiple-choice answers you tap, and basic context (app version, platform, OS version, device model, screen size, days since install, your Brain Level, session count, number of blocked apps, and whether you have a subscription).	Only when you send the feedback form or a bug report, or tap 👍 / 👎 on a trivia question or on "Was it fun?" after a session. A bug report sent from the results screen also includes that session's settings and rounds, so we can replay it.	Google Firebase (Firestore). Used to triage bugs, reply to you, and find bad questions.
Subscription status: whether you have an active purchase, tied to your anonymous app user id.	If you start or restore a subscription.	RevenueCat, with payment processed by Apple or Google. We never see your card or billing details.
Advertising and activation events: app install, finishing onboarding, completing a quiz, and (with your consent on iOS) an advertising identifier.	On iOS, only if you allow tracking when asked.	Meta (Facebook), to measure which ads bring people who enjoy the app.
Usage analytics: which screens you open and events such as finishing onboarding, starting, finishing or quitting a session, ranking up, spending coins or unlocking an experiment, plus basic context (app version, platform, device model, days since install, your rank, session count, and whether you have a subscription). It also includes your answers to the onboarding check-up: your estimate of daily scrolling time, the daily target you pick, and the multiple-choice answers you tap, including which kinds of apps you say you scroll on. The name you type in onboarding is never sent.	While you use the app.	PostHog (EU servers), to see where people get stuck and which experiments they enjoy. Not used for advertising.
Advertising and activation events on TikTok: app install and launch, finishing onboarding, completing a session, your first purchase (its price and currency), and (with your consent on iOS) an advertising identifier.	On iOS, only if you allow tracking when asked.	TikTok, to measure which ads bring people who enjoy the app.
Purchase attribution: a Google Analytics app instance id, and on iOS an Apple Search Ads attribution token, attached to your anonymous subscription record.	If you start or renew a subscription.	Google (Firebase Analytics, Google Ads) and Apple, via RevenueCat, to tell which ads led to a purchase. RevenueCat may also report purchases to Meta for the same reason.

On iOS, advertising tracking only happens if you tap "Allow" on Apple's App Tracking Transparency prompt. If you decline, no advertising identifier is shared with Meta or TikTok. You can change this any time in Settings → Privacy & Security → Tracking.

What we do not do

We do not require an account, name, email, or phone number.
We do not sell or rent your personal data to anyone.
We do not build advertising profiles from your answers, your check-up, or your browsing.
There are no leaderboards, friends, or social features. Dr Brainrot is deliberately solo.

Our service providers

The processors above handle data on our behalf under their own privacy terms:

Google Firebase (feedback storage, purchase attribution): firebase.google.com/support/privacy
PostHog (usage analytics): posthog.com/privacy
TikTok (ad attribution): tiktok.com/legal/privacy-policy
RevenueCat (subscription management): revenuecat.com/privacy
Apple / Google Play (payments, app delivery), under their respective platform privacy policies.
Meta (ad attribution): facebook.com/privacy/policy

How long we keep things

On-device data lives until you delete it or uninstall the app (uninstalling clears it). We keep feedback submissions for as long as they are useful for support and improving the app, and remove them when they are no longer needed. Subscription, analytics and advertising data is retained by those providers under their own schedules.

Your rights (EU/EEA)

If you are in the European Union or European Economic Area, the GDPR gives you the right to access, correct, erase, restrict, or object to our processing of your personal data, and to data portability. Where we rely on your consent (for example, feedback you send or advertising tracking), you can withdraw it at any time without affecting prior processing.

Our legal bases for processing are:

Consent: feedback you choose to send, and advertising tracking you opt into.
Performance of a contract: managing your subscription.
Legitimate interests: usage analytics, fixing bugs, improving questions, and preventing abuse, balanced against your privacy.

Because there is no account, exercising some of these rights may require the anonymous device id tied to your feedback (we can help you find it). To make a request, email support@dr-brainrot.com. You also have the right to lodge a complaint with your local data protection supervisory authority.

International transfers

Our providers (Google, RevenueCat, Apple, Meta, TikTok, PostHog) may process data on servers outside your country, including in the United States. Where required, these transfers are covered by the providers' Standard Contractual Clauses or equivalent safeguards.

Children

Dr Brainrot is not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it.

Changes to this policy

If we change how we handle data, we will update this page and the "Last updated" date above. Material changes will be reflected in the app where appropriate.

Contact

Questions about your privacy? Email support@dr-brainrot.com and the doctor will get back to you.