PRIVACY POLICY

Last Updated: October 26, 2023

Brillie.ai ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered tutoring platform, website, and mobile application (the "Services").

By using our Services, you agree to the collection and use of information in accordance with this policy.

1. INFORMATION WE COLLECT

We collect information in three categories: information you provide, information collected automatically, and AI interactions.

A. Information You Provide

• Account Information: When you register, we collect your name, email address, password, and optionally your grade level or academic focus.
• Payment Information: If you subscribe, our third-party payment processor (e.g., Stripe, Apple Pay) collects your billing details. We do not store full credit card numbers.
• Communications: Records of your interactions with our support team.

B. AI Interactions and User Content

• User Input: We collect the text, homework questions, essays, and queries you input into the Brillie interface ("Input").
• Interaction Data: We collect data on how you interact with the AI's responses (e.g., thumbs up/down, re-generating answers, session duration).

C. Information Collected Automatically

• Device & Log Data: IP address, browser type, operating system, device ID, and timestamps.
• Cookies: We use cookies to keep you logged in and analyze site traffic.

2. HOW WE USE YOUR INFORMATION

We use your data for the following purposes:

1. Service Delivery: To provide tutoring answers, track learning progress, and manage your account.
2. AI Model Improvement (Training): We may use de-identified User Input and Interaction Data to train, fine-tune, and improve the accuracy of our AI models. We employ a robust anonymization process to permanently strip personally identifiable information (PII) from data used for training purposes.
3. Personalization: To adapt the AI's tutoring style to your learning level.
4. Safety & Compliance: To detect usage that violates our Academic Integrity policy or Terms of Service (e.g., generating hate speech).
5. Communication: To send transactional emails (receipts, password resets) and optional marketing emails (which you can opt-out of).

3. SHARING OF INFORMATION

We do not sell your personal data to third parties. We disclose data only in the following circumstances:

• AI Service Providers: If we utilize third-party Large Language Models (LLMs) via API (such as OpenAI, Anthropic, or Google) to power parts of Brillie, your Input is sent to these providers solely for the purpose of generating a response. We ensure these providers are contractually bound not to use your data to train their general public models (unless otherwise stated).
• Service Providers: Hosting (AWS/GCP), analytics, and customer support tools.
• Legal Requirements: If required by a subpoena, court order, or to protect the safety of a user.
• Business Transfers: If Brillie.ai is involved in a merger, acquisition, or asset sale, your data may be transferred.

4. CHILDREN'S PRIVACY (COPPA NOTICE)

Important Note for Parents:

Our Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent.

• If you are under 13: You may not create an account or use the Service.
• If you are a parent: If you believe we have inadvertently collected data from a child under 13, please contact us immediately at privacy@brillie.ai, and we will delete such information.

Note to 13-17 Year Olds: We recommend involving a parent or guardian in your use of the Services to ensure you understand how your data is used.

5. YOUR DATA RIGHTS

Depending on your location (e.g., California, Europe), you may have specific rights:

• Access & Portability: You can request a copy of the personal data we hold about you.
• Correction: You can ask us to fix incorrect data.
• Deletion: You can request that we delete your account and associated data ("Right to be Forgotten").
• Opt-Out of Training: If you do not want your de-identified data used to improve our AI models, you may opt-out via your Account Settings or by emailing us.

To exercise these rights, email privacy@brillie.ai.

6. DATA SECURITY AND RETENTION

• Security: We implement industry-standard encryption (TLS/SSL) to protect your data in transit and at rest. However, no method of transmission over the internet is 100% secure.
• Retention: We retain your personal information as long as your account is active. We retain de-identified User Input and Interaction Data for a maximum period of 180 days (six months) for the sole purpose of improving our AI models, after which this data is securely deleted or rendered permanently and irreversibly anonymous (anonymised).

7. INTERNATIONAL DATA TRANSFERS

Brillie.ai is based in the United States. If you access the Services from the EU, UK, or other regions, note that your personal data will be transferred to and processed in the U.S. This transfer is protected by implementing Standard Contractual Clauses (SCCs), alongside any required supplemental measures, as the legal safeguard for cross-border data transfers under the GDPR and UK GDPR.

8. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. If we make material changes regarding how we use your data (especially regarding AI training), we will notify you via email or an in-app notification.