Who we are
BrainOshi is a family learning app provided by Tayeb TTALBI, imm talbi avenue el moquaouama rue 2 mars Q.I Agadir 80000, Morocco. For privacy questions or requests, contact support@brainoshi.com.
The current test version supports child profiles aged 6–15, with an account managed by a parent or legal guardian. Parents are the point of contact for their family’s information.
Information used to run BrainOshi
- Parent account: email address and sign-in session, used to provide account access.
- Family and child profiles: family name, time zone, child name, age, avatar, learning settings and playtime settings, used to organise the family’s experience. Profiles use age rather than date of birth.
- Learning and rewards: answers, activity time, points earned and spent, rewards and challenges, used to run quizzes and keep progress and reward records.
- Connections: invitations and family connections, used for the corresponding sharing and challenge features.
- Device storage: sessions, preferences and a record of answers awaiting recovery, used to maintain access and recover interrupted activity.
- Support: information you choose to include when contacting us, used to investigate and answer your request.
Parent PINs are stored as hashes. A PIN protects access to parent controls; it is not a substitute for any parental consent required by law.
Sharing and service providers
Connections can show participating children’s names, connection status, dates and point-sharing permissions. Point sharing becomes active only when the connection is active and both sides have approved it.
Challenges can show participant names, question counts, progress, results and expiry information. In friend challenges, the other participant’s score is revealed according to the submission stage. In parent–child challenges, the other participant’s score stays hidden until both turns are complete. These challenge and connection responses do not include email addresses.
A valid pending invitation can provide its owner with a link granting access to the invitation. Treat invitation links and shared result images as information that recipients can forward; share them only with people you intend to involve.
The current app uses Supabase for account and application services and a Render-hosted API in Frankfurt, Germany. Expo EAS and Apple TestFlight support test-build delivery. These services are involved in providing and distributing the app. Data processing can take place outside your country.
The current mobile implementation does not include an advertising, analytics or crash-reporting SDK. Hosting and distribution services may process technical information under their own applicable terms and privacy notices. This does not mean that no technical logs exist.
Children and parental choices
BrainOshi is designed for use under a parent’s or legal guardian’s supervision. Parents should avoid putting unnecessary identifying or sensitive information into child profiles, reward descriptions or support messages.
You may request access to information about your family, ask for corrections or deletion, or raise a concern about a child’s information. Contact us from the parent account’s email where possible. We may ask for information needed to verify your authority before disclosing or changing family information. Do not send passwords, PINs or sign-in codes.
Retention and deletion
Contact support@brainoshi.com with the subject “Privacy request” or “Delete my account” to request help with family or child information. Uninstalling the app does not by itself delete information stored in the account.
The current test build does not provide a working remote account-deletion flow. We do not represent this preview as an account-deletion service or promise immediate erasure from backups. The production retention and deletion notice must be completed before public registration opens.
Your country and your rights
International availability is planned; the app’s store listing determines where it is actually offered. The following regional information describes relevant protections, not a declaration that the app has been approved in every country.
- Morocco: applicable protections under Law 09-08 include rights relating to access, correction and objection. The Moroccan data protection authority is the CNDP.
- European Economic Area — EU countries, Iceland, Liechtenstein and Norway: where the GDPR applies, rights can include access, correction, erasure, restriction, portability and objection, subject to their legal conditions. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. You can complain to your relevant data protection authority.
- United Kingdom: applicable UK data protection rights and protections for children apply. You can raise a concern with the Information Commissioner’s Office.
- United States: COPPA applies to covered services collecting personal information from children under 13. Required parental notice and verifiable consent must precede covered collection. Parents can ask to review or delete their child’s information and refuse further collection or use. Applicable state privacy rights may also apply.
- Other countries: mandatory local privacy and child-protection rights remain applicable. Contact us to exercise rights relevant to your situation.
Updates
This page is dated 12 October 2026. The launch notice will describe the production service, its legal bases, retention arrangements and international-transfer protections. Questions about this preview can be directed to support@brainoshi.com.