Privacy Policy
Last updated: 29 October 2026
The short version
You write or speak about your life. We turn it into patterns and show you matches — from your own past and, namelessly, from other people’s. We don’t read your entries, we don’t sell data, and we show no ads. Other users never learn who you are, and the people you write about are never identified. Nameless group patterns may serve science; your words never leave. The rest of this page is the detail, in plain words.
1. Who we are
brainDiverse is a product of Yaletown Software Inc., a company incorporated in Alberta, Canada.
- Mailing address: listed on our Contact page — one place, kept current there
- Privacy contact: legal@braindiverse.com
When this policy says “we”, “us” or “our”, it means Yaletown Software Inc. When it says “brainDiverse” or “the service”, it means the brainDiverse website and app.
2. What brainDiverse is — and is not
brainDiverse is a pattern-recognition and self-reflection tool. It finds patterns in what you record and matches them against your own history and, anonymously, against other people’s patterns.
It is not a health service. It does not diagnose, treat or give medical advice, and we are not a health-care provider or a custodian of health information. What brainDiverse shows you is pattern information, for your own reflection.
brainDiverse makes no automated decision that has a legal or similarly significant effect on you. It surfaces patterns for your own reflection; what you do with them is always your call.
Entries often contain emotional and deeply personal content. For that reason we treat every entry as sensitive data, whatever it contains, and protect it accordingly.
3. What we collect
Your account. You sign in through a provider such as Google. We receive your name, email address and account identifier from them. We never see your password, and we don’t ask for your birthday.
Your entries. Voice recordings, typed entries, second opinions you paste in, answers to homework questions, and files you upload. If you take your content to an outside AI and paste back its response, that response becomes one of your entries; what the outside service keeps is governed by its rules, not ours.
What our software makes from your entries. Transcripts, written analyses, numerical pattern “fingerprints” (embeddings), match results and explanations.
Written analyses may also reference recognised clinical frameworks (such as DSM-5 or ICD-11) as a way of naming patterns. These are software-generated inferences, not diagnoses, and we treat them as sensitive, like everything else you record.
Credits and purchases. Your credit balance, a sealed record of every credit movement, and usage counters for the free tier. Payments are handled by Paddle, our merchant of record — we never see your card number. Paddle tells us only what was bought and the transaction reference.
Technical basics. Standard server logs (IP address, browser type, timestamps) needed to run and protect the service.
Cookies. Only what’s needed to keep you signed in. No advertising cookies, no third-party ad trackers.
4. People you write about
You may write about other people in your life — a child, a partner, a friend. Three rules apply:
- The names you give them are free text. We never verify them, never link them to real people, and never contact them. The system treats “K” and a full name exactly the same.
- Entries about others are your observations, made under your account and on your responsibility. For your own minor children, you record as their parent or guardian.
- Nobody else ever learns who your entries are about. Matching uses patterns, never names.
5. What we do with your data
- Run the service: transcribe, analyze, fingerprint, match and explain.
- Charge credits and keep honest books in the sealed ledger.
- Keep the service healthy: our systems write technical error reports so problems get fixed.
- Answer you when you contact us.
- Learn from patterns in de-identified, aggregated form — never your words, never your identity — to improve matching and for scientific research, including with vetted academic partners we choose.
That is the whole list. We do not sell or rent your data. We show no ads and do no ad-tracking. No human reads your entries unless you ask us to look at a specific problem, or the law forces us.
To be precise about that promise: when our software hits a fault, an automated diagnostic may process technical error context — which can include a fragment of an entry — purely to fix the fault. It is machine-only; no person is ever shown it.
6. Matching and cohorts
Matching runs on fingerprints — numbers, not names. When your pattern matches someone else’s, you see the pattern and an explanation of what worked for them and why. You never learn who they are, and they never learn who you are.
Cohorts (shared groups) are opt-in only, and the consent you give is once, at joining, for the whole cohort: your fingerprints can appear in that cohort’s searches for everyone in it — including members and professionals who join after you — with no further approvals asked, for as long as you stay. A professional running a cohort sees pattern numbers and match results, never anyone’s recordings, entries or analyses. Leaving ends it: your fingerprints are removed from all future cohort searches. Results already produced while you were a member stay as they were made.
7. Who processes data for us
We use a small set of service providers. Each receives only what its job needs:
| Provider | Job |
|---|---|
| Google (Firebase / Google Cloud) | Stores your data; runs sign-in and website hosting |
| Pinecone | Stores the numerical fingerprints |
| OpenAI | Turns recordings into text; runs the analysis and matching AI |
| Anthropic | Runs automated system diagnostics when our software hits a problem |
| Railway | Hosts the processing services |
| Paddle | Handles payments and sales tax as merchant of record |
| Cloudflare | Serves the website |
Under the API terms we use, OpenAI and Anthropic do not use your content to train their AI models.
8. Where your data lives
On Google Cloud and Pinecone servers in the United States. Your information is stored and processed outside Canada — and outside your own country, if you live elsewhere — and may be reachable by authorities there under their laws. By using brainDiverse, you consent to this.
9. How long we keep it
Your entries and patterns are kept as long as your account exists. Seeing your own history over time is the point of the product.
You can permanently delete any single entry — a recording or a typed note — at any time. When you do, we destroy the recording and its text for good: nothing is archived, and nothing can bring it back. Anything already made from it before you deleted it — an analysis, a fingerprint — is its own record and follows the rules in this section. Our payment ledger keeps only the fact that a charge happened that day, never what you said.
If you delete your account, or ask us to at the contact address in Section 1, we delete your entries, recordings, analyses and account records within 60 days.
The numerical fingerprints work differently, and we say it plainly: a fingerprint is never deleted from the matching pool. Instead, every link between it and you is cut — its cohort stamps are removed, and the records that connect it to any person are destroyed. What remains is a permanently nameless pattern that can never be traced back to anyone, still helping strangers find their matches. Your words are gone; an orphan number stays.
Two further notes: the sealed financial ledger — amounts, timestamps and transaction references, never your entries — is kept as long as tax and accounting law requires, and anonymous match results already delivered to other users stay as they were made (Section 6).
10. Your rights
Wherever you live, you can:
- See a copy of what we hold about you.
- Correct anything that’s wrong.
- Delete your account and content (Section 9).
- Withdraw consent at any time by deleting your account.
Write to the privacy contact in Section 1. We answer within 30 days. If your local law gives you more rights — for example in the EU or UK — we honour what applies to you. In Canada you can also complain to the Office of the Privacy Commissioner. In India, the same contact address is our grievance contact under the DPDP Act.
11. Your consent
When you create an account, you tick a box agreeing to our Terms of Service and this Privacy Policy. That tick is your consent for us to process your entries — including emotional and personal content — for the purposes in Section 5, and nothing else. You can withdraw it at any time by deleting your account.
Because those entries include emotional and health-adjacent content — and our software may infer clinical-framework categories from them (Section 3) — that same agreement is your explicit consent to process this sensitive content. One tick covers it.
12. Age — adults only
brainDiverse accounts are for people 18 or older. We don’t knowingly let anyone under 18 hold an account, and we deliberately collect no birthdays. If we learn an account holder is under 18, we close the account, delete its data, and refund unspent credits to whoever paid for them. Writing about your own minor child in your own entries is allowed — see Section 4.
13. Professionals
If a counsellor, psychologist or other professional uses brainDiverse in their work with clients, that professional — not us — is responsible for getting their clients’ consent and meeting their own professional duties. Our contract is with the professional.
14. Security
Everything travels encrypted (HTTPS) and sits encrypted at rest on our providers’ servers. Access is restricted, our services run isolated from each other, and every credit movement sits in a tamper-evident sealed ledger. No system on earth is perfectly safe. If a breach ever creates a real risk to you, we will tell you, and the authorities, as the law requires.
15. Changes, and the law that governs this
When we update this policy, we post it here with a new date and flag meaningful changes in the app. Using brainDiverse after a change means you accept it.
This policy is governed by the laws of Alberta, Canada.