Privacy Policy

Welcome to Brain Boost. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our platform. By using Brain Boost, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies, please do not use our services.

We collect several types of information to provide and improve our services: **Personal Information:** • Name and email address (during registration) • Phone number (for Mobile Money payments) • Educational information (faculty, department, level) • Profile information you choose to provide **Usage Information:** • Papers you view and purchase • Search queries and filter preferences • Time spent on the platform • Device information and IP address **Payment Information:** • Transaction history • Mobile Money numbers used for payments • Payment confirmations from Fapshi We do not store your complete Mobile Money PIN or sensitive financial details.

We use the collected information for various purposes: **Service Delivery:** • Create and manage your account • Process your purchases and payments • Provide access to purchased content • Send transactional notifications **Service Improvement:** • Analyze usage patterns to improve the platform • Develop new features based on user behavior • Personalize content recommendations • Fix bugs and technical issues **Communication:** • Send important service announcements • Respond to your inquiries and support requests • Send promotional emails (with your consent) • Notify you of new papers in your courses **Legal Compliance:** • Comply with legal obligations • Enforce our terms of service • Protect against fraudulent activity

We do not sell your personal information. We may share your data in the following circumstances: **Service Providers:** • Payment processors (Fapshi) for transaction handling • Cloud hosting providers for data storage • Analytics services for usage analysis • Email services for communication **Legal Requirements:** • When required by law or legal process • To protect our rights, privacy, safety, or property • To investigate suspected fraud or violations **Business Transfers:** • In connection with a merger, acquisition, or sale of assets • Your information may be transferred to the acquiring entity **With Your Consent:** • When you explicitly authorize us to share your information • When you participate in community features

We implement appropriate security measures to protect your personal information: **Technical Measures:** • SSL/TLS encryption for data transmission • Secure password hashing (bcrypt) • Regular security audits and updates • Access controls and authentication **Organizational Measures:** • Limited employee access to user data • Staff training on data protection • Incident response procedures • Regular security reviews While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but will notify you in case of any data breach.

We retain your personal information for as long as necessary to: • Maintain your account and provide services • Comply with legal obligations • Resolve disputes and enforce agreements • Improve our services **Retention Periods:** • Account information: Duration of account + 2 years • Transaction records: 7 years (legal requirement) • Usage analytics: 2 years (anonymized after) • Support communications: 3 years You may request deletion of your data at any time, subject to legal retention requirements.

Depending on your location, you may have certain rights regarding your personal data: **Access:** Request a copy of your personal information **Correction:** Update or correct inaccurate data **Deletion:** Request deletion of your personal information **Portability:** Receive your data in a portable format **Objection:** Object to certain processing activities **Restriction:** Request limitation of data processing **Withdraw Consent:** Revoke previously given consent To exercise these rights, contact us at privacy@mybrainboostapp.com. We will respond within 30 days.

We use cookies and similar technologies to enhance your experience: **Essential Cookies:** • Session management • Authentication • Security features **Analytics Cookies:** • Usage statistics • Performance monitoring • Feature usage tracking **Preference Cookies:** • Theme preferences • Language settings • Display preferences You can control cookies through your browser settings. Disabling certain cookies may affect functionality.

Brain Boost is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us. We will promptly delete such information from our records.

Your information may be transferred to and processed in countries other than Cameroon. These countries may have different data protection laws. When we transfer data internationally, we implement appropriate safeguards: • Standard contractual clauses • Adequate data protection measures • Compliance with applicable regulations By using our services, you consent to the transfer of your information to these countries.

We may update this Privacy Policy from time to time. Changes will be effective when posted on this page with a new "Last Updated" date. We will notify you of significant changes via: • Email notification • In-app notification • Banner on the website Your continued use of the platform after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, please contact us: **Privacy Team:** privacy@mybrainboostapp.com **General Support:** support@mybrainboostapp.com **Data Protection Officer:** dpo@mybrainboostapp.com **Mailing Address:** Brain Boost Douala, Cameroon We aim to respond to all privacy-related inquiries within 30 days.